This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
File: ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json)
Hash identifier: ZjQOf/05hhVZGev083LEetH1gR5vbZ2MyBP1Djefmw0=
Subject key identifier: 42:EE:41:36:FE:44:62:68:93:94:F1:76:13:A1:67:39:1A:A1:3D:0A
Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39
Certificate issuer: /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
Manifest number: 02CF
Signing time: Tue 23 Dec 2025 00:23:03 +0000
Manifest this update: Tue 23 Dec 2025 00:23:03 +0000
Manifest next update: Tue 30 Dec 2025 00:23:03 +0000
Files and hashes: 1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: PhOQ8EKvjCsW721Xn0UF8iR+I/ykikkC5b6yvcwwORI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl
rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
Validity
Not Before: Dec 23 00:23:03 2025 GMT
Not After : Dec 30 00:23:03 2025 GMT
Subject: CN=6949e0e7-4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0c:b2:f7:79:26:9d:fa:aa:65:9e:d2:9b:f0:
3b:e4:bd:00:8c:84:52:dd:64:50:be:d3:1b:12:9e:
a4:ef:36:11:c1:98:2d:06:55:a0:d0:17:89:40:88:
2b:a4:a7:94:e3:9a:28:d1:3b:ed:94:9f:89:0c:3e:
85:c6:a5:41:08:40:86:d5:3e:71:f7:c9:af:74:3a:
47:02:8c:b9:4d:38:eb:84:c8:b0:8e:da:f1:80:a0:
b6:91:ce:d6:85:2c:0a:a9:cf:7a:ca:33:98:54:88:
5b:aa:69:36:83:5d:02:f1:a5:6a:3d:14:0c:df:68:
3d:bf:56:98:32:fb:bf:cd:cd:95:29:e2:cf:33:9e:
b9:65:40:d1:66:d1:38:f6:bb:cc:24:46:e6:fc:47:
29:5e:37:18:01:e4:7a:91:12:7c:4c:32:0e:b1:af:
a5:a4:04:bf:eb:3d:50:29:e3:d9:b5:7a:f7:55:11:
47:57:94:b7:98:f5:d4:a3:16:69:ee:cd:14:59:95:
b2:e8:e4:4f:0f:a8:cd:cf:bf:28:63:af:87:9a:81:
cd:1c:66:fe:e0:09:08:96:95:73:3a:c8:f3:6a:33:
37:b2:28:8d:a2:15:62:f9:7d:31:1b:3e:e1:8e:ca:
69:c7:4d:03:c5:14:b2:b6:f5:ca:07:48:b2:3f:29:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:41:36:FE:44:62:68:93:94:F1:76:13:A1:67:39:1A:A1:3D:0A
X509v3 Authority Key Identifier:
keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c1:db:e9:f2:6c:c9:57:89:07:fe:55:31:84:95:c1:6d:25:
7f:68:23:c4:59:97:fb:c2:30:a4:3f:7d:9b:ec:c5:aa:e4:6c:
dc:dd:48:57:0f:d4:57:47:93:97:c2:88:b0:9e:cf:8f:f8:b3:
bd:d2:22:37:2b:2b:a2:66:a2:cb:90:81:4f:03:9e:58:ce:4a:
7a:06:77:98:27:9d:fe:71:30:c8:b6:db:08:a4:a8:d7:e7:fa:
10:a2:29:e0:88:e8:bb:8f:17:37:97:06:04:fa:2a:b3:bf:2d:
80:b8:4e:c7:88:96:f7:d1:76:b5:8f:8a:4c:bd:a5:a4:62:33:
bf:22:56:3e:b9:2d:1b:4e:c5:15:bc:c2:df:95:dc:d5:c9:00:
9c:ee:af:a8:1a:38:7b:b3:e7:6e:9a:2a:b2:44:af:34:9b:eb:
de:93:34:e7:2d:b8:71:c3:8e:0f:f1:74:10:9c:49:50:6b:ec:
7b:65:2b:17:92:dd:ac:1c:2b:81:e9:54:ed:e2:a0:e6:b5:9a:
c7:ff:14:cc:aa:06:f2:a3:0d:b0:03:1e:be:ec:4c:62:2e:62:
eb:04:e9:d7:ee:40:12:80:ed:28:91:21:f9:a5:59:35:53:0e:
19:79:9d:ee:2a:9b:1d:0c:16:49:7d:63:a7:58:c0:ea:04:a4:
44:d8:ad:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 21:37:11 2025 by rpki-client