This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier: rcfHIpY58OXad83ZEw6mW36vqg9Toi0IQTEZd0l6IKM=
Subject key identifier: 33:ED:A2:ED:44:AF:2A:08:71:8A:31:00:7D:3D:AB:0E:2C:34:0B:72
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial: 065B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number: 0655
Signing time: Mon 22 Dec 2025 21:50:02 +0000
Manifest this update: Mon 22 Dec 2025 21:50:02 +0000
Manifest next update: Mon 29 Dec 2025 21:50:02 +0000
Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: yvSutxWabnLN1esV5czK+fetQLNAM4eGnJJRcXDqAOc=)
2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: HwUjEpVEx/M+axjjRSXHAAv6+7lu4B2c6Jg1jCD9mbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1627 (0x65b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Validity
Not Before: Dec 22 21:50:02 2025 GMT
Not After : Dec 29 21:50:02 2025 GMT
Subject: CN=6949bd0a-3158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:1d:5a:dc:e2:fe:e4:9a:a9:08:a3:9a:82:
3c:34:ec:75:e0:39:d0:2d:73:12:02:34:f5:37:cc:
b4:8d:16:8d:71:46:d0:37:04:6d:51:ef:92:5c:58:
78:2c:53:d4:08:5e:be:3a:7c:6a:b6:e2:47:ef:13:
f3:af:10:8a:70:98:0a:b1:64:a0:b0:b0:03:5f:6c:
6a:fe:05:73:3a:c4:d1:1f:88:b6:a7:e5:3a:14:d8:
01:2d:17:41:fc:5d:62:dc:6d:f2:f0:f4:ae:9f:cf:
29:ed:4a:89:cb:12:15:76:01:ff:9d:3f:16:f1:6a:
62:8d:c9:bd:f2:cb:fb:6f:16:64:8c:c0:21:c2:ab:
42:5e:1f:58:f4:21:0d:03:73:b1:d9:8c:db:3a:a1:
18:9d:60:ad:0a:e9:b1:ca:68:40:8d:62:30:69:c6:
44:86:a1:7b:4b:9b:49:1e:b1:3d:38:a7:7e:e6:19:
5a:a3:61:f1:af:42:e2:40:fb:0d:a6:ca:64:f4:fe:
8d:0b:8e:b7:9c:53:8c:16:aa:1b:b9:ee:f0:8e:21:
79:5b:ad:6d:2a:c2:c0:2e:e9:e0:b2:ba:12:01:82:
01:75:9e:f4:46:8e:9b:36:87:fd:85:90:1e:9a:e8:
0a:0b:6f:bf:94:46:67:d1:eb:65:76:0a:65:d6:6e:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:A2:ED:44:AF:2A:08:71:8A:31:00:7D:3D:AB:0E:2C:34:0B:72
X509v3 Authority Key Identifier:
keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:33:ed:87:23:ee:b8:23:9f:09:0f:af:bc:ef:b2:d5:97:8c:
8f:9f:aa:01:5d:15:9a:cf:8f:5e:44:1b:7a:f8:e9:6a:c9:70:
ca:e3:a9:e8:b9:f5:42:5e:75:26:00:b6:86:63:83:00:e8:17:
f4:7a:22:c7:e1:ff:2a:43:2d:99:80:5a:cd:b2:2c:67:8f:a0:
2b:a3:0c:78:8c:2e:f0:68:76:73:cb:74:ab:7d:ee:ae:17:b6:
9b:82:ee:ac:f0:7a:c7:97:a3:16:f9:e5:92:8f:6d:32:26:7c:
95:44:40:3f:4c:2c:ce:3b:f2:18:91:6b:ba:b3:67:5c:c6:e8:
2a:c9:b7:3c:5c:0f:b2:b3:b3:49:1c:36:0d:31:0b:70:b9:2b:
11:89:89:1b:f4:01:28:79:a3:1a:80:de:8e:cb:ca:14:61:60:
db:ef:bd:fd:15:df:4a:5a:f2:40:1c:12:bb:14:20:e8:03:65:
5a:da:9d:f5:a4:11:47:94:43:a3:52:71:65:5d:b9:49:9a:34:
2b:7f:4e:ed:6b:c2:55:eb:98:26:75:60:0f:00:d5:d1:da:6c:
86:12:3d:36:95:15:cc:78:f5:89:93:19:19:16:fa:01:c0:8c:
5f:40:8a:e5:f1:77:aa:13:40:a1:27:d9:90:02:a0:07:aa:31:
3e:6d:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:15:18 2025 by rpki-client