This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json)
Hash identifier: 6WspMPeRT2JKAcm8Kn7m02clc68gBgocxBqB3lS9pmA=
Subject key identifier: 54:24:0C:B0:BB:46:78:1F:52:AB:B7:57:88:EA:AD:6B:0B:02:A5:E0
Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Certificate serial: 34EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
Manifest number: 34EB
Signing time: Mon 22 Dec 2025 14:58:41 +0000
Manifest this update: Mon 22 Dec 2025 14:58:40 +0000
Manifest next update: Mon 29 Dec 2025 14:58:40 +0000
Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: 2XcwCwefbS8fUa0WPVNtvg+UTosCuPDfTiHTe6K6mJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13547 (0x34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF
Validity
Not Before: Dec 22 14:58:40 2025 GMT
Not After : Dec 29 14:58:40 2025 GMT
Subject: CN=69495ca1-ce45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:63:72:9a:e3:e1:60:b5:fd:2b:09:7f:93:
6d:55:2c:97:7f:05:43:52:f0:49:5b:03:c6:5f:83:
ab:11:1a:19:d5:58:77:96:f7:5c:a8:1e:65:7c:c4:
42:d7:b9:3a:82:59:18:3b:34:66:07:0e:7a:66:64:
09:c3:da:ad:51:bb:3c:3b:25:ff:4c:11:ce:b5:b5:
da:97:80:19:1f:75:a8:0f:05:3b:10:70:ff:cd:d4:
d5:21:51:85:41:0a:37:22:20:7a:af:07:a0:ea:bf:
4b:96:cd:08:60:e6:7b:74:87:3d:fc:42:68:c2:eb:
44:cd:c8:86:23:6a:15:f0:60:16:0b:dc:c1:14:f2:
80:9b:94:a6:5e:f3:fa:69:25:58:38:94:e0:bc:da:
01:ec:33:a9:2b:b0:72:72:89:dd:67:fb:6c:11:b7:
8b:42:81:b9:77:d6:22:ec:df:06:bb:31:18:87:88:
66:b8:4f:68:24:8d:33:eb:02:ed:9d:bb:07:0a:e8:
11:96:9a:b7:0e:05:9b:08:3e:c9:89:8c:96:fc:fd:
1f:a2:de:51:5a:2f:c5:1b:9a:82:06:aa:d2:d1:5f:
52:a3:e1:fe:07:ab:d6:b4:31:12:96:b4:c3:9e:ba:
a5:da:e6:bd:41:07:d5:da:51:a3:2e:f3:77:b0:2b:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:0C:B0:BB:46:78:1F:52:AB:B7:57:88:EA:AD:6B:0B:02:A5:E0
X509v3 Authority Key Identifier:
keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:cb:88:56:c3:da:a7:be:79:73:3c:ac:d0:ae:71:5c:fd:ce:
ab:ef:5e:f1:c0:4a:0f:c1:d0:bd:d8:41:42:ce:53:a9:78:b8:
77:22:d1:0e:ff:35:d6:f2:ce:3a:43:ed:30:80:d1:89:5e:18:
a1:81:9b:62:c9:7b:f6:71:bf:49:bc:96:37:c7:ea:fd:80:f3:
8e:6a:e6:24:7f:83:19:9e:61:6f:65:0f:98:88:ad:ef:49:6f:
bf:7e:98:af:5c:c3:ee:78:d4:ac:14:01:a9:ab:61:53:87:a4:
5e:a3:67:91:01:e4:79:94:d7:7e:ae:a2:11:5d:11:fc:94:4e:
1e:fe:87:12:c3:61:ed:b2:b0:fe:c5:31:66:28:25:6c:f3:c3:
01:9c:ae:dd:0b:07:5d:87:d4:f4:27:c9:b0:11:c6:a1:1f:9e:
b8:db:cb:f4:39:b1:e2:cd:d1:63:1b:b2:95:4c:00:50:72:3f:
1e:ee:3a:25:19:f4:8b:0b:78:ee:f9:bd:ec:60:ef:04:61:62:
4d:5f:38:94:c6:b9:11:df:f5:4d:e4:3f:14:72:dd:20:dd:fc:
59:06:51:55:4b:4f:47:a3:ea:2e:92:dd:c7:f6:cf:64:71:30:
5f:84:f4:1b:d5:f7:26:79:3e:1f:05:1b:df:55:76:7d:37:11:
95:18:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:02 2025 by rpki-client