This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
File: 2MZzCV6Cqbfn381GWA94MajRiso.mft (raw, json)
Hash identifier: FV/GxbuJD4C9LQh8Cocenj8lSdMsz3Ef6DNPLCgdcM4=
Subject key identifier: 7E:28:D7:14:E5:70:B0:09:62:C5:48:93:6A:61:91:8A:38:45:30:1F
Authority key identifier: D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
Certificate issuer: /CN=A911862D/serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Certificate serial: 17AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
Manifest number: 178C
Signing time: Mon 22 Dec 2025 16:21:11 +0000
Manifest this update: Mon 22 Dec 2025 16:21:10 +0000
Manifest next update: Mon 29 Dec 2025 16:21:10 +0000
Files and hashes: 1: 2MZzCV6Cqbfn381GWA94MajRiso.crl (hash: CUveX4T1wQl3DLy1wBZlW4AYwo5SUWyh7eaOHVKuEdQ=)
2: 07FF86DACF3F11F0AF94352AC4F9AE02.roa (hash: h+Bf/dSTxmYNIw4E2dr2Pk1RCT+hYqXsNKneahGznRI=)
3: EE9AC4A2CF3E11F0BD67F029C4F9AE02.roa (hash: ukdO87WAf/HOAmSfdD0XwhgfXedlsv2aXlEz1cOk5UE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6060 (0x17ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911862D, serialNumber=D8C673095E82A9B7E7DFCD46580F7831A8D18ACA
Validity
Not Before: Dec 22 16:21:10 2025 GMT
Not After : Dec 29 16:21:10 2025 GMT
Subject: CN=69496ff6-ef47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:9e:0c:13:88:bc:48:98:6b:0c:f2:94:46:
52:2f:20:20:cf:48:cc:73:52:0d:cc:ca:14:2e:cc:
bf:a5:fe:c9:48:ad:61:5a:57:75:db:80:f0:a5:c4:
74:27:cd:a8:cd:2e:b7:41:36:26:0e:81:bd:81:91:
24:83:0e:d6:eb:2e:cd:00:66:ed:76:d9:eb:7e:1b:
57:2f:3c:10:28:65:99:70:7a:b2:67:ae:18:f4:17:
28:51:bb:c9:56:e7:a2:09:37:1f:2b:73:f1:1f:5f:
cf:75:20:18:ff:e9:ad:4f:46:52:14:80:fb:d2:01:
d4:49:2c:97:1b:0e:98:d8:c6:3e:14:f3:d3:d4:d5:
f7:fd:93:b2:73:65:55:75:6c:ea:06:c7:63:db:d0:
a1:9e:84:23:75:45:be:b6:22:78:e9:4f:e0:2e:0a:
40:0a:5b:54:dd:d5:c2:65:44:37:34:38:39:88:e7:
da:f3:a3:00:40:42:0f:99:8c:b6:4a:81:38:15:e5:
fb:71:d4:59:a7:b7:37:5d:c8:e1:bd:be:23:02:8e:
50:20:3d:4c:cc:1c:88:ce:1d:bf:44:6e:f8:55:19:
cc:11:5c:3f:35:54:f1:6d:b9:0e:c7:62:c6:d2:45:
c8:83:34:a2:61:d5:0d:39:48:d6:e2:24:47:17:ad:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:28:D7:14:E5:70:B0:09:62:C5:48:93:6A:61:91:8A:38:45:30:1F
X509v3 Authority Key Identifier:
keyid:D8:C6:73:09:5E:82:A9:B7:E7:DF:CD:46:58:0F:78:31:A8:D1:8A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2MZzCV6Cqbfn381GWA94MajRiso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911862D/32879D3AE8BA11E78A6A7042C4F9AE02/2MZzCV6Cqbfn381GWA94MajRiso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:46:99:99:32:2c:ef:d9:49:12:cd:e9:bf:ab:a2:5c:a0:56:
2a:1c:68:ca:ec:14:06:99:4f:21:77:68:42:49:af:05:9a:cd:
b5:ab:3f:7e:68:78:a3:44:68:15:4a:40:3b:44:fd:88:50:25:
9d:39:e8:5d:d8:98:4a:aa:1d:5e:97:29:b1:2c:f9:fe:bd:45:
0e:22:85:73:29:61:c8:38:9c:8f:2b:73:02:71:3d:71:1e:30:
70:ed:69:be:40:ac:6f:c4:bd:3f:15:cc:77:72:f4:6f:04:cd:
f8:c4:00:cd:92:a1:cb:5d:f7:48:95:18:8a:2b:dc:40:e0:2f:
19:7c:6f:be:14:2f:e2:23:3c:aa:a9:db:0f:62:a2:40:dd:09:
db:f4:8f:47:09:54:55:bd:2f:e6:a8:1d:6d:8e:1c:5c:1b:33:
a3:ed:1a:5e:a6:b0:d1:a3:0f:c7:fd:2e:66:a5:dd:ab:d7:82:
0d:9c:d0:10:4e:4d:24:b5:87:7e:4c:a9:50:06:3d:cb:ca:72:
ce:2c:1e:73:61:67:cb:a6:f1:25:eb:62:89:78:8b:32:9c:59:
d7:d0:65:e2:c7:7c:3d:8c:1e:91:91:22:b3:e3:cb:d3:de:18:
b3:a1:57:36:07:8a:46:4d:bb:bc:3f:77:36:ab:b9:85:2b:72:
71:37:a0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:59:02 2025 by rpki-client