This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json)
Hash identifier: vnbX7JNceg/6ykmJS7I4/xDECaSS50R+KGuziWsa818=
Subject key identifier: C8:41:40:0F:F7:B5:E5:B0:1E:63:C1:F2:12:A1:8E:53:23:DD:15:5A
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial: 13C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
Manifest number: 1399
Signing time: Thu 18 Dec 2025 16:50:50 +0000
Manifest this update: Thu 18 Dec 2025 16:50:49 +0000
Manifest next update: Thu 25 Dec 2025 16:50:49 +0000
Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: dqQPOAtC9MHHB+88FJA/tnI/FGxEiXdQOVIcB7jovHg=)
2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=)
3: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=)
4: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=)
5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5058 (0x13c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Validity
Not Before: Dec 18 16:50:49 2025 GMT
Not After : Dec 25 16:50:49 2025 GMT
Subject: CN=694430e9-c6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:d0:29:fb:8c:0d:92:4b:8d:d0:1c:3a:90:
1d:b0:e4:52:03:5b:f0:c6:74:3f:ae:c3:12:e3:68:
13:c8:3e:42:3a:bd:56:22:b2:4a:37:06:93:94:05:
c1:66:5d:a4:a7:4b:0e:86:54:93:47:be:fd:c7:32:
81:da:5e:cd:af:71:37:38:7b:9f:1a:be:a5:ca:ca:
36:59:b1:51:c0:01:ba:46:76:73:e6:07:df:1b:49:
b4:e0:84:60:40:50:ee:a8:c3:93:a6:6e:d2:1f:a9:
71:da:0c:38:23:e5:8a:56:ec:81:1a:e9:cb:5d:51:
6b:25:a3:91:96:b2:04:92:30:a1:47:4c:a2:70:58:
ab:16:d1:6f:e3:00:1b:75:d5:11:95:f3:b1:93:34:
be:38:72:f6:ef:1a:c4:2b:4d:b0:41:3e:36:fd:6f:
12:4c:3b:8d:ac:9a:2b:91:de:ae:27:97:63:cb:5d:
17:c2:6d:21:7b:7b:55:71:63:1c:f7:5c:e2:54:2e:
11:22:54:a8:63:75:b2:27:12:3b:f4:e4:81:80:d1:
b2:d8:cd:4b:09:ca:ac:56:cd:36:41:e6:c1:75:70:
eb:07:7e:f4:e1:ec:7e:cb:7c:be:b0:6c:62:4d:18:
90:f4:1e:80:2c:5b:ac:e9:99:44:c1:46:79:5e:0a:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:41:40:0F:F7:B5:E5:B0:1E:63:C1:F2:12:A1:8E:53:23:DD:15:5A
X509v3 Authority Key Identifier:
keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:1a:c9:a0:0e:23:65:75:46:7b:5f:dc:cf:12:27:db:16:
10:20:76:b4:39:d0:8f:7d:53:72:e8:e8:5d:59:cc:b3:87:0c:
ff:f1:76:55:6f:f4:2a:b8:22:35:43:14:b9:8c:de:a7:36:07:
4a:70:fb:08:2e:38:e4:6f:4f:4f:6a:20:84:66:a8:00:1d:d5:
fb:d2:d9:c9:d7:da:64:e5:64:53:fb:4c:b7:79:f1:f8:71:e6:
c5:ad:40:6f:0d:3a:3e:20:c4:44:03:0d:c6:1a:f0:04:eb:f4:
68:d2:7f:d1:3a:0f:14:65:3b:05:e2:83:72:48:24:ef:84:fd:
3c:a3:e6:4e:72:08:fd:e7:90:b7:33:fc:97:35:c5:81:53:33:
c9:39:b6:61:95:b9:95:83:ab:ae:af:db:22:cf:2f:a6:21:b6:
03:95:60:4a:12:48:63:20:15:fd:24:e0:82:30:5e:a8:23:f5:
c1:ea:ae:eb:9e:40:4a:21:31:4c:14:f9:12:cd:5e:e1:7e:4a:
7b:7a:8a:65:7a:68:9e:1c:c2:69:15:e0:d1:c9:4c:08:fc:26:
b2:bb:8f:8d:b2:9b:1e:cc:42:ef:33:f6:aa:86:3e:8c:7f:59:
c7:48:99:1e:42:4e:e7:1e:03:c4:ad:52:83:2e:ab:47:e7:38:
14:81:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:18:21 2025 by rpki-client