This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json)
Hash identifier: AVOaNCeRDpsUrcEWQ+PEfSEF2molKZuAiEm8q1zbC7c=
Subject key identifier: B6:EF:1A:B4:35:9B:51:CB:CE:5D:22:78:5E:82:E5:6A:FF:F9:05:9B
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial: 03E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
Manifest number: 03DB
Signing time: Mon 22 Dec 2025 23:37:53 +0000
Manifest this update: Mon 22 Dec 2025 23:37:52 +0000
Manifest next update: Mon 29 Dec 2025 23:37:52 +0000
Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: hPvyG3PicwaclWteblDxXyZaJion8cHyhzVMM2qIURI=)
2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: FMJfMOhKmr3+LIFoso7iYyeae1vQb80K64qzROcKGwI=)
3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Validity
Not Before: Dec 22 23:37:52 2025 GMT
Not After : Dec 29 23:37:52 2025 GMT
Subject: CN=6949d651-4a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:bc:b7:c5:df:19:31:eb:63:59:b6:48:5a:
11:57:0e:06:52:df:62:b0:d1:bc:fe:a2:39:3a:7f:
3c:3a:47:26:f6:14:38:70:86:32:4d:ea:da:fc:0e:
da:30:0c:be:2e:4d:f0:a1:78:e4:16:f7:d7:3b:6a:
1d:90:78:d5:d2:78:0e:b4:c2:11:77:0e:20:dd:da:
b8:b0:a0:fa:40:d5:19:b8:84:1e:29:e1:9b:09:a9:
58:5c:ef:5a:ed:a5:5a:4b:4c:04:cb:99:40:67:87:
d1:0e:d4:66:6f:ae:09:78:5e:29:fe:fe:d2:71:d5:
70:4d:88:72:1e:86:dd:33:30:39:89:1d:16:eb:8c:
82:e2:79:fa:2c:f3:a9:ba:2e:91:7a:ae:d4:0c:a5:
df:77:de:b0:e4:6f:79:96:bd:a2:98:8b:22:16:d0:
eb:84:70:33:1a:8f:ee:9b:f4:a8:74:a9:23:3b:fd:
c5:46:09:52:02:98:24:0d:79:de:50:0b:55:09:6d:
e8:a8:04:fd:08:2e:47:67:8f:89:c9:f2:f6:a8:88:
f6:fa:72:c5:48:d7:0b:b3:96:ef:87:ff:52:ae:64:
84:e2:13:bb:3e:1e:76:71:bc:c6:1a:ab:96:c9:bf:
8f:9b:4a:8e:fd:65:8b:b6:d7:ee:0e:20:15:62:3e:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:1A:B4:35:9B:51:CB:CE:5D:22:78:5E:82:E5:6A:FF:F9:05:9B
X509v3 Authority Key Identifier:
keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:cf:eb:27:76:94:01:ef:ca:2e:f2:6e:05:de:7c:0e:f1:b5:
da:c5:51:47:cf:6f:f9:43:89:a3:4f:ad:cc:91:10:72:a1:29:
03:29:82:ec:d6:0b:72:f9:ea:56:8f:14:d8:06:b9:0e:4f:4e:
ef:84:b8:10:78:a0:de:6a:cf:2e:60:88:ee:a6:55:55:37:ee:
be:65:20:f3:67:e5:75:e5:59:16:92:72:62:41:28:2b:38:07:
ff:7d:fc:d7:36:3f:f6:6c:30:af:fb:6f:e4:f7:51:28:3f:19:
be:57:93:0b:b5:e7:6a:f1:7b:ad:8d:e1:27:2c:e8:66:f5:a6:
94:56:07:aa:59:be:36:30:f0:98:cf:db:89:93:3f:ce:52:b0:
30:28:0e:be:99:0e:36:b1:bf:72:0a:1c:0c:5c:10:f9:e1:b2:
7c:08:77:b1:a1:3d:40:8d:fb:2d:88:81:65:e8:ea:92:5d:43:
d3:4b:18:7c:4c:ca:cb:43:f4:80:6f:02:6b:81:d7:55:4f:70:
4f:14:52:bf:4f:75:79:25:30:80:00:5b:78:e5:3a:e5:6e:b2:
12:e4:27:26:23:aa:65:84:5e:20:a8:9b:78:21:93:e0:87:56:
b0:cc:84:50:fa:6a:ca:b1:81:3a:94:2c:d0:1f:d5:f1:a4:b0:
e2:14:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:31 2025 by rpki-client