This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File: azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier: nFBgo5DI7BtEIR/TLj4CquNOO0ZpBm5GsROaI4Tb47I=
Subject key identifier: DC:D7:B4:55:52:EB:56:97:4C:C7:77:BF:13:1C:E0:00:A8:E6:75:9B
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer: /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number: 017B
Signing time: Tue 23 Dec 2025 02:50:34 +0000
Manifest this update: Tue 23 Dec 2025 02:50:34 +0000
Manifest next update: Tue 30 Dec 2025 02:50:34 +0000
Files and hashes: 1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: a4wKeANt/PaZT05C/SPGhvfh71UhLDTLinGv7pZtuPQ=)
2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Validity
Not Before: Dec 23 02:50:34 2025 GMT
Not After : Dec 30 02:50:34 2025 GMT
Subject: CN=694a037a-60d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:00:ca:88:5a:f0:28:b7:da:6e:74:7c:02:d6:
d0:d2:f7:c2:cb:e8:f8:dd:df:36:96:3e:21:cf:98:
88:07:87:8f:ec:7b:83:08:ce:d8:ea:09:41:9a:a5:
d3:be:76:6a:4e:56:be:50:a9:fb:81:e8:39:21:46:
2f:03:57:ea:e0:76:ce:2a:63:55:ad:88:bd:81:f3:
92:7e:4b:52:fe:db:57:ad:46:50:c2:28:ed:81:e6:
2e:21:57:21:b8:d0:ca:eb:24:f1:c6:25:e4:4e:e5:
0c:3e:2a:ca:c0:7d:2e:dd:62:79:91:ab:05:df:62:
70:64:b3:32:d3:00:a8:c3:c5:8e:40:b8:f1:96:58:
75:18:cf:39:17:d8:2d:9b:e0:3c:54:e6:28:28:ee:
1b:0c:32:9b:52:48:69:9d:99:03:59:ab:d7:1e:5a:
83:ef:78:c3:cf:93:5d:16:7c:d0:77:23:f0:45:17:
45:7d:22:0f:5c:3d:0c:37:b5:83:ae:d5:94:f1:f7:
93:0e:e5:60:a3:a3:41:f8:7c:e3:de:84:15:90:85:
dc:2e:40:40:37:85:7d:3e:a7:83:f8:2f:11:94:fd:
23:7b:ee:6e:cb:de:03:56:43:7b:66:3f:08:1f:43:
a4:55:22:d4:8d:77:6e:33:ac:ae:d7:7d:d2:0f:8c:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:B4:55:52:EB:56:97:4C:C7:77:BF:13:1C:E0:00:A8:E6:75:9B
X509v3 Authority Key Identifier:
keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4f:c1:7a:56:d9:8f:3e:d2:17:d1:fc:ec:09:ca:76:21:ad:
18:ea:14:a4:73:f8:16:25:d4:51:3f:fa:9b:a9:f6:06:db:37:
2b:cb:2e:12:35:b7:b6:5e:53:cc:21:d9:c0:19:a0:f2:ca:92:
c7:01:b2:d8:c2:74:e0:c7:a3:9d:76:0e:2c:f3:50:53:9f:43:
d5:6e:ad:5a:69:31:ef:ad:e5:40:bd:bc:f3:d8:d5:e1:7c:17:
d9:8c:27:42:42:89:29:fe:97:02:a4:cb:02:1d:2b:f1:ec:a8:
f2:b2:0c:af:3c:db:34:44:fd:ab:ca:19:1c:e3:d7:b0:7d:1b:
de:7a:5d:d2:19:72:a9:3a:5b:79:dd:10:f5:39:1d:d5:3d:86:
97:ee:f2:09:ad:9e:8a:50:eb:1e:2c:0f:32:2b:57:5b:c6:d9:
97:83:10:93:2f:2b:08:a9:a0:c8:2b:db:2b:a7:c8:e2:a7:22:
a1:a3:23:28:34:18:9f:f3:98:48:cb:8c:d1:6a:69:1e:ec:ca:
9a:e8:a5:51:01:3b:ab:90:7c:6a:54:ef:2e:b4:6d:14:0f:75:
ff:8c:89:25:4b:69:b5:7c:9f:c1:de:9a:76:17:fe:02:05:0f:
4c:f7:3d:b6:c9:e1:3d:db:b7:98:28:0b:6b:5a:cc:9c:8a:3c:
d5:d8:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:41 2025 by rpki-client