This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier: rN3hrQ9/o93fiu17Rm442R58vW5gEfoq4gJV7pNAZg4=
Subject key identifier: B5:22:9F:09:13:61:FA:27:BC:A8:48:F2:D3:58:4D:3A:B3:4F:92:39
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer: /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial: 34F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number: 34F1
Signing time: Mon 22 Dec 2025 14:55:35 +0000
Manifest this update: Mon 22 Dec 2025 14:55:34 +0000
Manifest next update: Mon 29 Dec 2025 14:55:34 +0000
Files and hashes: 1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: +wSsND4wQt4WXaMi6l0IyA+9btHEOgOzhksSz7sPu/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13553 (0x34f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Validity
Not Before: Dec 22 14:55:34 2025 GMT
Not After : Dec 29 14:55:34 2025 GMT
Subject: CN=69495be7-f965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:55:a7:98:46:cf:65:65:9b:5b:c9:90:9e:
fa:3d:09:8c:03:4d:4d:ff:da:5b:b5:a4:19:be:ff:
34:c8:8e:50:3a:31:ec:9d:1a:99:56:48:87:e1:49:
55:85:5f:fa:58:56:69:0c:a4:67:54:5a:a4:d9:07:
f0:93:ef:f6:c8:16:03:fb:fa:1f:29:aa:5a:07:9f:
8d:2a:07:dc:17:f1:59:d0:a5:72:7b:9c:56:fc:11:
53:ef:f1:71:8e:5b:ae:d3:22:e2:2f:dd:ac:e4:78:
59:0b:92:9d:4c:38:f4:49:34:fd:99:95:9d:a1:da:
87:f5:17:b7:7b:09:d0:0d:9f:65:9b:a9:c4:88:c2:
75:a2:99:0d:d0:a5:80:bc:8e:cd:5b:00:76:4e:aa:
cc:88:22:8d:9f:3f:7d:f7:4e:1c:4d:24:af:0e:3c:
69:ec:b5:9e:d2:1f:4c:f3:3f:d7:15:39:b8:86:3a:
cd:a5:c2:53:3a:b0:99:37:37:b8:ea:39:3b:45:55:
34:c7:53:a3:c4:f5:03:0a:32:2d:c7:76:30:9a:2d:
5f:88:95:af:c8:6b:d3:c3:4e:fe:8b:92:3d:57:ef:
44:67:5d:6b:00:ef:98:d7:30:85:1d:8c:d0:bb:4f:
41:d3:29:38:22:39:1a:80:72:54:bd:f7:f1:89:a8:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:22:9F:09:13:61:FA:27:BC:A8:48:F2:D3:58:4D:3A:B3:4F:92:39
X509v3 Authority Key Identifier:
keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:20:3d:d4:3c:65:66:de:02:fb:3b:02:dd:1a:d5:27:e6:
d9:1c:a1:5b:d0:a8:f6:ec:7f:43:66:19:91:b9:48:c3:51:1b:
f7:48:6e:bb:6a:18:cf:22:25:0c:b8:74:01:fd:4a:55:f5:2c:
bd:c9:15:45:36:c2:f8:f3:db:3a:a2:18:1d:84:53:04:cf:9b:
8e:83:6b:2a:46:c5:55:c3:74:d7:03:a5:d8:73:aa:3a:1d:8f:
b2:c3:0f:55:c1:f0:b8:4a:79:c4:e0:45:48:3f:55:d9:67:1c:
a1:fb:5d:39:e5:6c:7f:e8:d9:7f:ab:76:f7:dd:90:ed:b1:7a:
0c:59:d6:47:3d:f2:f8:70:c0:14:b0:ad:c8:43:a2:19:0e:4d:
3d:58:33:61:d4:50:7f:1b:b6:7b:6e:d2:47:84:11:1c:d1:36:
20:1e:d6:bd:4b:e8:76:81:59:85:30:24:fe:dc:ae:9a:e0:ce:
95:2f:d5:34:80:d9:b5:66:f9:c5:ff:80:58:ac:36:f6:34:79:
9c:74:bc:ff:90:c3:ed:c9:1b:af:3e:e9:23:fc:7c:ae:35:1b:
93:74:1d:c9:38:c2:12:ab:68:23:c6:ca:d8:89:6d:ec:61:18:
02:f2:c1:47:16:17:17:17:d7:3a:8a:8b:d0:3d:fc:a3:09:1d:
f6:b3:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:22 2025 by rpki-client