This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier: c2/t2ak3gSRGHQPzU6Bn9gNXMiRx9nCESulGVCYAIlY=
Subject key identifier: 9E:8F:64:8C:44:0F:88:F5:BB:78:E2:E7:C5:EB:B6:EC:64:53:DE:D5
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number: F2
Signing time: Tue 23 Dec 2025 04:27:07 +0000
Manifest this update: Tue 23 Dec 2025 04:27:07 +0000
Manifest next update: Tue 30 Dec 2025 04:27:07 +0000
Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: 7s04Ts+rxsxoOd7MeGW4vm03df4s6gIMxQx209eNM3w=)
2: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=)
3: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Validity
Not Before: Dec 23 04:27:07 2025 GMT
Not After : Dec 30 04:27:07 2025 GMT
Subject: CN=694a1a1b-ca8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:ca:39:e6:01:cf:e1:b0:bd:08:e1:98:a1:
44:b8:37:19:46:01:22:58:fd:6c:21:65:13:e8:83:
15:70:f3:97:c0:5c:7f:73:2a:58:74:6a:ce:92:a6:
5c:88:75:35:4e:64:54:8c:b4:47:2a:b7:13:1e:db:
dc:ec:6f:8e:0e:d5:c0:9a:18:8e:eb:79:bf:78:ca:
35:7e:4f:54:68:fe:63:ff:e7:07:3c:00:af:57:45:
40:13:e0:30:2f:c7:bc:dd:ad:23:01:22:a0:df:f2:
b4:bb:5a:99:c5:d1:8c:48:4a:5d:4f:33:45:d4:9a:
83:80:ee:b3:c9:67:9f:20:24:df:5e:6c:af:64:b3:
dc:f3:07:32:4c:85:41:3a:09:bc:94:d8:0b:b9:c1:
6c:61:ff:55:19:11:4c:bd:56:03:58:ad:41:34:ac:
91:b8:ad:c1:56:ab:0d:55:c1:6d:ae:65:5c:3c:5c:
e8:3c:0b:fb:22:a3:65:94:36:1a:74:fb:d5:1a:f6:
e2:4f:f2:f5:03:d3:e5:4a:3b:25:1e:97:a0:1b:09:
f3:df:8c:11:47:93:52:1c:40:0c:13:82:98:14:b4:
55:13:1f:a8:d2:1d:be:4e:23:6b:ad:74:15:c7:64:
47:b1:62:52:79:65:7f:4f:95:a0:5b:15:2c:e2:ee:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:64:8C:44:0F:88:F5:BB:78:E2:E7:C5:EB:B6:EC:64:53:DE:D5
X509v3 Authority Key Identifier:
keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:55:72:b0:60:1a:f5:87:be:08:27:a4:51:dc:f4:f0:5e:54:
8a:2f:ab:6a:a5:00:1a:59:46:a1:01:55:0d:6c:8e:0a:85:3e:
28:d1:e3:fa:e1:18:52:1c:cf:e3:62:ce:35:99:97:2c:7a:66:
aa:ab:22:f3:8c:b2:f6:74:71:1f:6a:3d:ec:05:44:07:7f:60:
91:ee:ef:17:fa:15:6d:7e:d6:c0:b9:ed:31:3b:fd:47:bc:08:
0b:ad:51:29:3b:bd:15:f9:a9:76:09:fb:ad:90:ab:8f:89:dc:
02:ed:7c:fd:1f:c4:a1:25:3c:7b:ca:4e:91:a1:38:1a:a4:9c:
40:77:61:a3:14:ed:89:c2:eb:27:70:ef:0a:be:17:55:55:d4:
89:d8:7b:81:44:03:1f:3e:cb:1b:c3:54:2b:4d:12:46:6b:df:
d2:1b:93:10:11:72:25:b1:3a:ac:69:91:97:ce:82:80:9b:4c:
ad:e4:16:07:ec:ee:7b:07:2e:a2:27:41:a4:c4:fd:6c:c3:f6:
ac:0e:4c:d9:b3:a9:e3:72:81:66:47:0c:de:a5:75:23:61:26:
b5:f5:b9:4b:a9:12:1e:c2:c0:42:89:49:5b:59:22:4e:4d:00:
78:49:05:fa:f4:4a:3e:2e:ea:16:89:ee:17:1b:6a:e9:06:d5:
d4:f2:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:59:03 2025 by rpki-client