This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
File: ReDCzhRgM0N0_BWzcEXXajTd7l0.mft (raw, json)
Hash identifier: NL5YTkBQt0pG1ifOcgRlO8JEVvCp0CGPIniB9Ojy3Z4=
Subject key identifier: 65:3B:E0:93:63:25:DA:7A:F8:88:29:1B:3C:67:F7:E8:84:C2:F2:F5
Authority key identifier: 45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D
Certificate issuer: /CN=A911465D/serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D
Certificate serial: 80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
Manifest number: 7E
Signing time: Tue 23 Dec 2025 05:39:11 +0000
Manifest this update: Tue 23 Dec 2025 05:39:10 +0000
Manifest next update: Tue 30 Dec 2025 05:39:10 +0000
Files and hashes: 1: ReDCzhRgM0N0_BWzcEXXajTd7l0.crl (hash: GXZz+bCGpwbMMDwJy0Hpwlg7yASCj73qclWzc8wfUoY=)
2: 8494A0A8202211F091667E59C4F9AE02.roa (hash: 0td0rYY1sI6ZCcrPq8Ekycn5CSJTuG2FeaNe5fiVsgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.crl
rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911465D, serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D
Validity
Not Before: Dec 23 05:39:10 2025 GMT
Not After : Dec 30 05:39:10 2025 GMT
Subject: CN=694a2aff-6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:88:f8:29:ca:fa:6e:4b:92:1c:87:24:14:
48:ee:a5:4e:c9:6f:6d:31:59:39:ed:b6:e3:ef:0c:
7c:64:bb:43:b8:c3:bd:a8:2f:0b:4b:b6:93:c8:a3:
95:35:5c:98:ab:33:e3:aa:57:10:44:6f:28:eb:ce:
62:3a:29:af:cd:39:9c:ab:0a:dc:8f:2c:a1:ff:f3:
c8:9a:ca:80:2b:af:3b:eb:37:9f:c2:1d:f6:b6:22:
1b:5a:a4:0d:e8:e9:db:b7:35:f1:09:8b:fd:bb:5d:
fc:78:07:bf:75:c8:62:33:17:42:3b:8a:6b:85:4b:
3a:2b:db:13:9b:33:dc:b1:18:7c:35:aa:ae:3c:4c:
d1:45:cc:64:b2:9c:6c:dc:8a:fa:51:f4:f6:b9:2d:
21:4e:83:1b:74:16:cb:f2:b5:d8:fa:87:17:a9:ad:
1f:3b:e4:e4:c6:95:ac:96:b7:af:82:00:87:01:85:
b9:53:81:10:66:8f:8f:0e:1b:96:5a:60:a6:5e:ed:
0e:79:52:d7:1d:4b:78:e7:b7:c6:77:15:be:e2:af:
7d:5f:d8:dc:25:22:01:97:bb:2b:c9:4c:45:bc:01:
6c:c4:a7:a5:4c:90:ab:b9:c4:7b:ee:db:01:3c:67:
4d:fd:35:54:85:23:a6:74:9f:a8:44:c4:70:8a:87:
07:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:E0:93:63:25:DA:7A:F8:88:29:1B:3C:67:F7:E8:84:C2:F2:F5
X509v3 Authority Key Identifier:
keyid:45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:87:e9:6e:c4:8d:3c:20:db:d4:60:bf:cb:04:2f:8b:aa:
ab:87:53:e6:85:1b:d3:60:45:fb:42:23:d5:9f:57:1b:dc:e0:
05:47:e8:ff:43:f0:fd:53:6c:7c:7c:ab:fe:18:a9:c7:f7:f0:
d4:da:99:c2:6c:89:d7:a7:18:72:a3:32:bd:28:8a:b0:eb:77:
0f:59:40:0e:dd:66:f0:5c:9b:36:53:62:1a:5a:74:09:ed:c2:
5b:3e:4c:b4:95:ed:14:8a:e2:86:cf:21:90:9d:81:30:0e:15:
ab:e6:41:92:90:60:f3:c1:46:ff:41:d9:ca:58:b5:90:47:35:
bb:90:41:b1:9d:8a:00:52:eb:60:e2:05:86:b7:ab:ec:fb:25:
23:57:65:2e:60:ac:53:67:44:fc:6b:10:0b:ea:53:b1:1c:2e:
e1:75:c9:f1:f2:79:db:53:73:86:9a:9c:b8:25:98:1f:14:05:
fa:99:19:1d:f7:e7:65:fb:b6:44:81:01:a5:20:25:bf:89:3e:
2c:e5:f5:fa:e8:4a:ae:44:51:d1:3a:13:03:34:fa:fc:f2:09:
7b:d9:43:d7:86:a9:5a:e0:e2:76:8d:5c:eb:e2:20:cb:45:08:
82:be:26:98:c1:24:c7:44:71:15:79:da:83:64:83:27:ea:bd:
ae:5a:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:44:59 2025 by rpki-client