This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json)
Hash identifier: WfY/k0jp4aIKweG/tQIhgU6QZpu6CxGkvPTlJTN67Kc=
Subject key identifier: CB:47:44:A5:5D:E8:EA:89:9E:59:B1:7C:E8:65:3C:8D:AD:0B:B0:45
Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Certificate serial: 056D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
Manifest number: 0568
Signing time: Mon 22 Dec 2025 22:29:03 +0000
Manifest this update: Mon 22 Dec 2025 22:29:02 +0000
Manifest next update: Mon 29 Dec 2025 22:29:02 +0000
Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: LySZsM7gYJ+Z+PDyB2R7l70dUuroFlxRYn84JyfRC0U=)
2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: G0TJ9gg7YE7FaWREh61rcwclF21PHLQCA7qkRQvl9xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Validity
Not Before: Dec 22 22:29:02 2025 GMT
Not After : Dec 29 22:29:02 2025 GMT
Subject: CN=6949c62e-e62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:cc:f5:87:7d:9a:91:24:87:98:50:61:8a:
f3:22:39:3e:6f:5f:d8:f8:6f:9a:3b:35:35:17:91:
f5:9f:3a:ca:35:04:f6:c5:d2:e4:6f:05:56:4c:61:
c1:63:e6:f6:50:b5:02:0f:6b:68:af:2e:f1:10:54:
59:bc:dc:66:44:df:bf:05:e6:75:4a:78:a0:71:91:
8c:be:e3:8e:fd:d3:d2:bd:ac:c9:cc:9b:86:ad:4b:
a8:57:8d:c3:3e:57:2d:72:38:74:20:b4:44:e9:c7:
74:df:0c:f7:1b:96:b1:13:0f:db:7b:99:86:9f:f7:
4c:5b:7b:d5:77:af:0a:86:62:b1:64:d6:53:86:0d:
99:51:49:3e:13:ea:3b:32:4b:bb:a8:c4:03:c9:ff:
e9:42:96:20:b0:4c:83:0a:fd:b8:34:f4:0d:64:5e:
eb:a2:94:64:2c:93:4c:4c:3e:52:5b:7c:a5:35:f3:
c6:28:a0:bc:69:41:ee:69:5d:1e:91:59:84:3b:2c:
91:1f:30:21:00:2f:12:a2:ae:9e:4d:80:9f:0b:bf:
2e:7b:b2:32:31:24:1a:24:5b:46:a5:16:0c:4a:03:
d7:fd:a7:9f:37:04:3f:97:ec:e4:50:02:dc:2a:7c:
69:26:7f:21:2c:6c:3f:06:03:b1:2c:b5:33:51:a4:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:44:A5:5D:E8:EA:89:9E:59:B1:7C:E8:65:3C:8D:AD:0B:B0:45
X509v3 Authority Key Identifier:
keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:ca:28:97:b3:ab:52:b0:0b:48:f3:da:b6:0a:2c:40:9e:3c:
c0:b8:9f:e8:9a:16:21:4b:4b:7a:57:e8:8c:1e:d2:c3:dc:24:
63:01:54:dd:7c:01:61:3c:46:20:6a:47:ec:e8:1e:7a:d7:27:
cb:3a:53:84:76:ba:96:6e:17:10:88:48:a6:15:c2:c3:9d:69:
87:de:19:eb:57:c0:89:43:7e:b3:5c:91:ff:05:f4:22:e4:aa:
b7:85:c6:aa:61:3d:1b:3a:cf:76:0a:7c:c7:29:ec:64:9c:05:
75:d8:3a:74:c2:ff:77:21:41:d0:ba:bd:43:9c:ee:84:c7:47:
d8:37:df:31:ff:a5:4d:17:87:76:38:e8:d5:ea:38:05:41:a4:
9e:4b:65:36:c3:db:a2:c9:85:02:4d:a8:6a:c5:33:78:0c:3e:
91:de:ff:ba:10:7a:80:fa:bd:58:56:18:f8:f4:ab:83:65:af:
f7:be:f8:c8:2e:8d:d0:9b:4c:d6:e4:da:de:1a:78:8a:6c:be:
15:75:2f:b3:40:75:48:a8:9e:f2:69:b7:76:c9:28:42:df:86:
6b:a9:bd:d3:11:19:ae:43:e8:ad:c0:de:e3:29:7f:b8:7e:e7:
b2:5d:b1:1b:a4:4f:43:06:86:06:18:b2:44:52:94:41:6c:1f:
bb:96:54:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:06:37 2025 by rpki-client