This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json)
Hash identifier: gWjDm9ySKgmqrQqhfDtFjdV3fUSQevs11gA73weHWWk=
Subject key identifier: CC:A2:9E:DE:05:6B:61:27:9C:A4:08:9E:D4:77:70:32:6D:54:55:4E
Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Certificate serial: 5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
Manifest number: 5E
Signing time: Tue 23 Dec 2025 05:57:52 +0000
Manifest this update: Tue 23 Dec 2025 05:57:51 +0000
Manifest next update: Tue 30 Dec 2025 05:57:51 +0000
Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: mS4Uuw2LhE17C5lptIBDuvqRFLukyjCbLyiKuz23IH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Validity
Not Before: Dec 23 05:57:51 2025 GMT
Not After : Dec 30 05:57:51 2025 GMT
Subject: CN=694a2f60-e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:b9:8b:c7:ee:84:03:98:48:89:0f:26:c4:
a2:1d:24:55:f6:7d:ed:93:53:40:d3:6b:ee:03:ca:
80:58:cb:26:59:4e:1f:43:76:7e:b9:b2:57:70:5f:
5c:10:05:48:aa:d3:30:01:56:7c:5b:bd:fe:13:31:
48:81:7d:31:40:91:00:ac:2f:e8:de:9b:89:48:5c:
aa:c8:5a:e1:15:10:07:23:8d:ba:4c:cd:7d:24:20:
8d:26:ba:f2:5b:f9:e4:f6:55:21:4f:46:04:3a:23:
7b:2c:36:b8:6a:d9:96:bb:c2:ce:f8:d8:4a:eb:8d:
58:5f:a1:74:e2:62:f8:d7:28:1b:76:10:19:5d:b7:
8d:c4:fc:50:b7:61:ad:d8:2a:b3:06:31:a0:12:25:
9f:87:40:13:a6:a8:55:94:64:20:7d:e1:32:95:24:
8d:28:3d:e9:08:75:64:b8:83:2a:88:2b:c3:0e:69:
fd:b7:41:3a:47:ed:16:48:b5:09:31:f4:b5:87:89:
d8:98:e3:00:15:6b:c7:35:e2:cc:ae:69:20:12:e4:
b6:e6:f4:04:3f:31:29:d8:71:c9:99:12:2e:be:dc:
0e:26:49:4f:70:79:71:39:18:e0:1c:8b:5f:21:20:
4c:40:0a:64:26:9b:a6:ef:94:35:9c:b0:80:d3:d6:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A2:9E:DE:05:6B:61:27:9C:A4:08:9E:D4:77:70:32:6D:54:55:4E
X509v3 Authority Key Identifier:
keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:93:fb:92:68:19:68:d8:66:65:45:15:3b:d7:54:36:be:
24:85:bc:c1:bb:ac:46:e6:10:73:15:a9:84:7a:80:61:da:fb:
56:7c:49:91:3b:e9:68:3d:ac:42:74:d4:9d:bc:35:23:de:01:
a7:79:0e:40:0c:fa:07:e3:38:b7:bf:7e:fb:ad:3c:26:b7:bd:
4c:34:c4:62:67:a4:65:82:1d:f0:51:5c:1d:cd:03:8f:c4:a2:
20:18:58:6f:81:0e:35:1d:7e:87:be:8a:bd:6c:d1:e1:b3:f0:
6d:91:08:7f:0e:64:c4:ce:35:c1:82:cc:8b:b0:3e:2c:bb:1c:
53:31:1a:a7:e9:35:85:98:01:01:8d:ce:6b:56:bf:51:1f:6f:
17:bb:d2:eb:62:94:86:26:ef:94:f7:e2:25:ba:22:93:fe:ba:
fe:10:a2:c0:37:e5:d3:3e:7b:03:f8:2f:bf:0f:91:72:bc:b2:
38:dd:e5:db:10:77:42:31:4b:e7:c1:59:b6:ad:55:c9:54:a0:
82:f8:07:db:f0:20:dd:de:87:8d:68:fa:de:39:93:f2:7c:96:
b6:32:68:51:0a:d1:8e:77:2e:7b:cb:3d:d3:20:78:3e:e8:fd:
26:ca:20:db:b1:a6:c6:87:6d:03:4d:65:7f:5d:7c:f7:bd:3f:
ed:75:8a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:55 2025 by rpki-client