This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier: Jq80sFuYup+W4lBguNSYvvR/5S1Pa2aGHfkTaA5yg70=
Subject key identifier: 3C:1C:6E:CC:6D:25:FF:17:27:CF:45:58:B7:A0:FF:0E:98:D9:88:B7
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial: 054B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number: 0546
Signing time: Mon 22 Dec 2025 22:33:39 +0000
Manifest this update: Mon 22 Dec 2025 22:33:38 +0000
Manifest next update: Mon 29 Dec 2025 22:33:38 +0000
Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: jOeMY7run9Do4vFJEwAKOdsdRXdaU+ECD3C3nDJL/vk=)
2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: VqWOdJpzHU4g7FfrJlbFpwfob9hyB+C2diH5Mhn8hxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355 (0x54b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Validity
Not Before: Dec 22 22:33:38 2025 GMT
Not After : Dec 29 22:33:38 2025 GMT
Subject: CN=6949c743-e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:c4:9d:b2:5c:c2:4d:15:0d:12:95:23:c7:
49:23:0c:db:89:a0:d3:cc:4e:b8:3e:63:7b:c7:6f:
3f:c0:d5:a0:98:b0:d3:e8:75:0a:a3:86:e0:6d:04:
b9:52:36:b2:08:67:07:b7:50:1d:f2:f3:b5:76:68:
a3:df:70:be:1d:22:d8:e3:38:42:69:5f:06:10:3f:
15:4b:27:98:af:30:d8:45:dd:16:39:16:f1:66:e1:
c8:fa:d7:53:bf:ac:08:45:b3:47:a4:70:92:ea:f0:
11:bd:b6:a3:c5:28:79:54:05:cd:63:32:b4:89:5c:
d3:a5:53:ee:51:3c:d5:c4:2b:39:86:93:fd:ef:8f:
a2:59:47:97:d7:ed:c5:2a:85:7b:f9:50:85:5e:3f:
47:e7:47:0e:e8:2e:ec:dc:a7:0e:3e:7a:e8:15:f5:
bf:db:15:c6:3c:0d:c3:a7:5f:f0:62:9c:51:6f:e1:
ea:3b:e5:1a:d5:7f:f1:d2:f1:50:00:af:a4:4a:44:
21:d9:2d:5c:b9:0c:e7:69:bf:e3:0b:d2:09:ef:ad:
e6:d3:de:6a:16:9b:bd:bc:73:49:a0:44:2d:b0:19:
f9:34:7a:04:75:6d:15:74:5f:0e:a4:45:ef:16:f6:
f4:6a:1d:f9:63:5a:7c:06:0c:d3:87:9f:71:b9:58:
c9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:6E:CC:6D:25:FF:17:27:CF:45:58:B7:A0:FF:0E:98:D9:88:B7
X509v3 Authority Key Identifier:
keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:32:c5:95:09:45:59:15:4f:ec:7a:e5:e6:43:01:30:50:e8:
53:5e:2e:e7:8e:b4:d0:a8:46:98:a7:9b:8a:82:4b:68:d5:18:
71:ff:a4:1d:48:09:2b:ba:84:98:db:79:1c:39:bb:77:86:24:
5d:a9:47:26:96:ec:e1:a4:4b:3c:dc:c4:ec:30:7b:99:73:b6:
83:a1:d7:e2:dd:fb:f6:5f:9b:a4:2c:6b:30:45:97:6c:7e:b1:
97:a2:3f:97:18:e8:f4:1d:d4:d7:81:df:cc:13:ee:92:7f:62:
f6:2f:0d:cd:25:ea:e1:5a:63:2b:9f:db:f9:f7:17:3b:70:bd:
3f:8f:dc:a0:37:09:1b:3e:1e:f7:0f:e3:12:e6:11:e7:26:03:
e5:c8:77:6d:95:7e:4b:e1:11:15:d5:ce:c8:4e:36:19:de:03:
24:11:e0:b5:48:b0:b3:7e:25:9f:f1:59:ec:8e:07:43:dc:a8:
21:20:e0:17:04:4c:30:09:6f:30:bb:27:fb:75:f4:f8:b9:ed:
b4:96:1f:14:e2:0d:88:90:33:03:41:52:7e:a7:f1:80:d8:ba:
92:de:10:6d:80:27:7a:d8:54:65:b2:e6:14:98:a8:54:47:f0:
58:7f:4c:5c:d9:ae:93:6e:9a:27:f9:77:a1:92:95:25:ad:d8:
0d:f1:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:39:27 2025 by rpki-client