This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
File: kg59CR8VVp8tg0DGWCuVlewGVoA.mft (raw, json)
Hash identifier: bUIzExRz7nP/cfG2KlZHes0a6hgVh47x+aaVOzMHDpE=
Subject key identifier: 22:57:DE:C8:97:D8:06:2B:48:6E:56:6B:9A:F8:9B:77:8B:E3:B5:DB
Authority key identifier: 92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
Certificate issuer: /CN=A9112FE1/serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Certificate serial: 82
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
Manifest number: 82
Signing time: Fri 05 Dec 2025 04:37:31 +0000
Manifest this update: Fri 05 Dec 2025 04:37:31 +0000
Manifest next update: Fri 12 Dec 2025 04:37:31 +0000
Files and hashes: 1: kg59CR8VVp8tg0DGWCuVlewGVoA.crl (hash: uWgo9AU5gPav/kmS7BI0/3G9DGQKm+3QVRsndD4vJoE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112FE1, serialNumber=920E7D091F15569F2D8340C6582B9595EC065680
Validity
Not Before: Dec 5 04:37:31 2025 GMT
Not After : Dec 12 04:37:31 2025 GMT
Subject: CN=6932618b-9a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:1e:64:0f:88:62:94:22:84:a1:a1:b3:35:
84:a7:d7:b6:d8:66:ee:b7:3c:fb:1c:70:4f:b9:48:
ef:3f:97:09:65:b0:cf:0c:e7:2e:32:ed:2f:2e:db:
c4:95:64:d4:4c:56:f7:35:d1:7d:bc:c0:30:bf:3a:
77:eb:ab:ac:ae:d1:f7:00:0e:05:6a:c4:79:c0:35:
22:b4:57:aa:7a:f8:8d:3c:71:a3:00:1d:0f:01:fd:
72:55:eb:5b:1f:6c:a8:4b:c6:6b:37:46:88:9b:59:
d4:d4:62:98:a1:39:c3:b0:18:fd:84:91:17:8d:5d:
3b:eb:4f:33:42:d1:a1:cd:60:98:63:9c:19:b9:ff:
7b:ca:84:57:77:be:a7:1b:6b:06:84:89:75:c4:e7:
00:9c:57:e4:bb:c4:72:40:75:47:76:3b:9c:a9:e7:
e8:37:90:9d:98:a3:a6:0d:2a:20:96:10:54:48:57:
61:85:60:82:ca:52:5f:a4:c0:42:2a:cd:f7:6d:b8:
8b:e0:87:0a:87:51:2b:89:6e:54:fd:2b:51:74:08:
2c:ea:3b:f9:a9:9a:04:62:94:7b:1a:46:b8:9f:61:
a3:86:c1:b0:97:24:a6:4a:5a:fe:b7:20:d8:b7:16:
50:92:32:52:7c:99:ed:e4:dc:32:e8:54:ea:66:0e:
4f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:57:DE:C8:97:D8:06:2B:48:6E:56:6B:9A:F8:9B:77:8B:E3:B5:DB
X509v3 Authority Key Identifier:
keyid:92:0E:7D:09:1F:15:56:9F:2D:83:40:C6:58:2B:95:95:EC:06:56:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kg59CR8VVp8tg0DGWCuVlewGVoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/F1C7447E09F111F08B44A325C4F9AE02/kg59CR8VVp8tg0DGWCuVlewGVoA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:0a:f5:c5:2f:53:95:b7:5f:6d:14:28:f1:44:2b:b9:e3:89:
3d:b5:18:35:05:5a:85:ae:dd:00:9f:15:d0:06:4a:ee:e6:7b:
b3:25:d5:80:d2:2d:7f:70:33:59:76:d0:a2:9a:fb:e5:6d:1d:
e9:82:73:c8:fc:9f:be:50:83:25:a6:0e:a4:a4:76:28:c7:cd:
4c:01:96:51:9a:26:70:3a:ff:3e:aa:1c:53:f7:12:b5:fb:dc:
66:bc:ab:35:9e:39:48:87:92:cc:a6:e6:5e:ba:84:5e:ec:2d:
f2:06:09:3e:cf:9c:06:98:51:7e:40:7d:79:ae:2d:26:58:5d:
7a:42:ff:4e:eb:4d:47:7a:5e:58:72:b0:73:03:35:ed:d5:86:
7a:de:18:b3:7c:a4:2e:dd:a3:a0:10:16:4a:14:1e:03:3d:64:
d2:7f:39:2d:e9:f3:66:d4:f4:3d:58:29:fe:b1:37:91:bd:cd:
6b:87:cf:b3:7b:c1:30:38:84:f9:fa:73:16:2e:0d:7b:5a:f1:
99:eb:0f:9e:07:e5:cc:3c:80:00:ba:c9:5a:1e:d7:d7:68:e1:
fd:54:82:4e:57:45:9e:e9:6b:74:8c:51:1e:89:63:dd:28:aa:
27:55:01:ab:19:bd:ec:c7:47:2c:fa:e4:61:df:9e:29:a1:72:
e5:7f:29:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:31 2025 by rpki-client