This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json)
Hash identifier: ySFpP4kYU5dM6yom6bw3JqY2kGM8h7VIPu15AIdTXM8=
Subject key identifier: D8:31:6E:87:C8:93:71:AB:D0:15:6D:36:31:CD:3B:7E:84:A1:43:D1
Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
Manifest number: 0435
Signing time: Mon 22 Dec 2025 23:20:50 +0000
Manifest this update: Mon 22 Dec 2025 23:20:49 +0000
Manifest next update: Mon 29 Dec 2025 23:20:49 +0000
Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: /lZWrsPTO2WZc0rhZ53KYniKLx+qK2+ffgZHTNZb+ZU=)
2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543
Validity
Not Before: Dec 22 23:20:49 2025 GMT
Not After : Dec 29 23:20:49 2025 GMT
Subject: CN=6949d252-fb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:15:7e:23:1f:bb:04:77:d2:8e:da:85:8a:72:
ff:12:22:a7:6f:48:9f:6c:0a:d6:ab:85:f5:1e:d9:
c6:5b:fc:65:46:ec:fd:06:47:76:82:86:4c:56:d0:
cc:a0:d8:26:64:1e:ae:1d:7d:31:c5:f7:f1:38:da:
9e:71:9c:4b:a0:9c:15:72:63:03:81:a2:a4:42:7d:
a2:9e:57:dc:1a:dc:1b:b4:1e:43:ff:fb:c3:df:32:
b2:6a:2b:8c:c8:e7:95:83:38:12:66:32:b5:56:6c:
7e:18:ba:54:a0:67:d2:6e:02:90:bb:63:a7:48:46:
94:17:7f:b0:75:f3:9c:ef:14:24:6c:84:b8:df:12:
40:3f:47:79:74:ed:3e:d2:e2:fb:3c:7a:0d:21:c3:
68:f8:a1:80:34:c5:1b:88:1d:85:61:80:53:1b:f4:
71:27:0d:8d:11:8e:5d:0b:6f:2c:76:dc:08:e7:93:
73:89:74:3c:11:30:0d:9d:3d:6c:30:3d:1f:dd:69:
18:bf:77:35:91:15:a1:86:84:65:2e:c2:db:61:e4:
72:a7:ff:f5:7e:24:4a:33:b7:01:87:e9:a2:06:ef:
4e:ce:24:4f:65:ba:c4:3d:bd:1f:1b:4a:d0:52:45:
b3:52:76:e6:db:09:cc:6e:4c:2e:b5:75:41:46:d2:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:6E:87:C8:93:71:AB:D0:15:6D:36:31:CD:3B:7E:84:A1:43:D1
X509v3 Authority Key Identifier:
keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:ff:d4:e3:f3:4c:31:7c:f1:3d:8f:5e:4e:be:c8:a1:41:22:
16:56:fc:ae:9a:b6:c8:66:af:06:fa:fa:f3:96:ff:1e:52:d6:
f9:19:3f:ae:78:00:10:a3:fd:75:7a:0e:dd:34:1d:30:e9:cf:
b4:86:bc:26:84:b0:fc:d9:4d:ab:d0:19:50:90:97:d3:c7:02:
93:a6:89:92:ea:24:4b:64:ee:40:04:33:b6:25:99:cb:86:17:
22:26:08:ac:e0:7b:35:13:7e:71:a8:43:70:6f:2d:0b:43:50:
94:da:c3:d2:bd:55:a5:a2:be:00:85:42:96:da:f5:c8:2c:c7:
24:32:5c:af:3c:ff:e6:79:c8:ca:07:77:0d:26:71:0e:3e:b2:
a6:a5:0e:e8:16:17:ab:b3:75:2a:33:57:de:d9:7b:c0:e4:29:
28:fe:63:11:c4:84:ae:c7:66:14:70:11:9d:f0:3b:87:2b:eb:
1c:59:9e:24:d0:bf:96:9b:6c:e1:1f:f1:e5:c6:7b:be:a5:6d:
64:0e:df:fa:aa:f2:4f:bd:e3:b5:6d:ee:c5:8e:71:84:f1:d7:
5f:8c:83:33:b3:45:6a:0f:16:1a:14:8c:d9:49:7a:af:6d:32:
3c:80:e4:9a:81:a2:3c:bf:a2:27:eb:ca:85:84:95:54:6a:dc:
ad:6d:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 02:06:36 2025 by rpki-client