This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: NWWEH/45hMbTXPv+62PLVUR80CnrBOx/NrxeeaaljQ8=
Subject key identifier: CA:4D:B7:80:6F:8C:04:CD:2E:61:4A:F6:35:A8:4E:A5:E1:8A:2B:63
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 0240
Signing time: Tue 23 Dec 2025 00:53:09 +0000
Manifest this update: Tue 23 Dec 2025 00:53:09 +0000
Manifest next update: Tue 30 Dec 2025 00:53:09 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: 0VySiG2f9YZaKPGj/lQ3oyyjOvcG4+rae8lzin3Zowo=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Dec 23 00:53:09 2025 GMT
Not After : Dec 30 00:53:09 2025 GMT
Subject: CN=6949e7f5-4a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:df:37:de:6f:29:3b:54:12:a5:e0:96:58:
4b:3f:f2:95:33:a9:b4:cb:25:2a:f8:ac:d3:c7:78:
5b:9a:ed:9e:13:d3:d3:4e:a0:82:a0:6c:44:33:2b:
cd:05:4b:71:86:64:07:c2:ab:2b:1b:68:3b:c0:72:
95:e3:0d:24:5d:50:c9:89:b6:02:00:b0:b5:82:b5:
59:06:a0:d0:d3:0a:99:27:ff:20:75:92:36:3d:b8:
47:73:e6:f3:46:4a:aa:07:2e:e8:43:f3:0a:11:4c:
51:37:2d:93:17:02:f8:ee:8f:9a:e5:a6:73:be:a6:
56:3a:06:b5:63:f9:0a:7d:8a:8b:c5:1c:62:55:cd:
54:ad:69:66:95:50:68:31:7a:71:47:aa:08:d4:79:
fc:b5:e0:b2:d5:9f:93:b5:38:35:c1:df:6d:60:93:
78:de:6b:d5:de:b7:fe:51:2c:6f:bd:bb:94:2a:fb:
24:06:eb:21:27:e1:ee:54:3b:39:05:93:9f:70:61:
f5:a6:87:06:eb:a2:0a:de:7d:53:ca:1c:5e:e2:02:
09:df:27:8d:b4:ac:66:8c:a0:12:d4:4a:1e:0a:f4:
c3:17:b1:53:7e:c1:b5:78:e5:03:b6:e1:69:33:b7:
72:c9:9f:e5:60:2b:32:d2:71:61:7a:01:76:2a:6b:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4D:B7:80:6F:8C:04:CD:2E:61:4A:F6:35:A8:4E:A5:E1:8A:2B:63
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:fd:82:85:5a:0e:e3:aa:ab:08:77:10:29:42:f4:b0:fd:b2:
6e:27:86:c3:32:81:69:ba:05:91:c9:0c:db:6d:ff:a6:1d:0f:
14:d4:99:52:bf:fd:14:7e:53:69:5c:5f:40:d2:b0:ae:d0:ac:
9b:82:5e:1e:18:18:53:62:28:85:45:42:49:86:88:00:7d:d2:
7f:2c:c4:3d:fb:85:76:0e:d1:2b:55:06:f0:8a:e9:86:8c:2f:
20:b1:5c:56:3e:25:0e:22:21:56:47:eb:2b:d8:76:e3:f1:39:
87:61:dd:dd:86:0b:3d:ad:a5:ea:98:3c:00:97:98:89:0a:52:
62:f9:ac:6b:46:66:f6:f2:e0:81:89:52:c1:91:06:03:18:5d:
af:5a:09:68:43:48:d6:0a:65:37:0d:f1:4f:57:d3:04:a6:1f:
27:b8:b2:e5:19:6f:f2:29:9f:b9:7a:82:a1:5c:69:08:96:ed:
7b:4c:c5:00:4c:c5:9d:d6:72:30:6b:67:99:43:a0:c5:44:50:
55:85:ba:9d:c6:b3:12:25:f4:3e:51:2a:29:18:fe:ce:1d:70:
d3:70:0e:9d:d7:0a:cc:d0:0a:9d:f2:bf:39:19:64:ba:b3:89:
6e:24:eb:6d:db:40:ba:3d:49:fc:b8:28:99:d2:e3:d5:e8:b4:
54:80:55:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:25:31 2025 by rpki-client