This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier: Q7MG+Yzdhx1S6MtvXUvoK+FwKCbJCWJcaQHBny/PF94=
Subject key identifier: DC:66:A7:21:51:D9:44:08:29:A1:E7:47:26:A1:70:31:04:A2:DE:F0
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 011E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number: 0118
Signing time: Sun 07 Dec 2025 03:08:54 +0000
Manifest this update: Sun 07 Dec 2025 03:08:54 +0000
Manifest next update: Sun 14 Dec 2025 03:08:54 +0000
Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: 2vg82lMskCdQmYjO8YPw0JvTxhmM9IEitJZJLbRgtn8=)
2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: Lss+xMSjsVW/Iz01A+UAitwGdTNiOgTBuwOADNSWYt0=)
3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: Uft/wx6+OSudUAkV6haKL8qwseEuVEVTt0nYwgnQ/Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 03:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Dec 7 03:08:54 2025 GMT
Not After : Dec 14 03:08:54 2025 GMT
Subject: CN=6934efc6-6149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:3b:21:6e:a7:4b:9e:51:f4:39:b6:10:79:
fa:a6:47:ce:92:ec:4c:dd:42:da:d2:eb:a7:fd:6f:
8c:24:10:04:05:49:e0:17:7b:ed:0f:de:2a:d6:34:
db:85:1e:dd:24:e8:9a:d1:c2:26:ab:05:c5:19:d0:
9b:31:87:0a:01:f4:28:6e:29:1d:2f:f4:45:5f:6d:
66:bd:bc:54:2b:55:ee:5e:b9:d8:a8:50:d4:02:40:
fe:30:26:3d:43:54:9e:31:b2:65:dc:bd:f1:42:e4:
1b:e0:40:2f:2c:c6:bc:d9:ef:0e:e2:cb:58:66:80:
1f:c5:04:51:7b:45:c3:d8:3e:a5:8b:65:52:d8:52:
2b:81:ee:34:92:29:38:f6:80:9f:ac:d0:1b:ef:37:
b5:bd:8c:6a:57:9a:6c:3a:2b:db:b4:95:17:3f:a0:
2c:2a:af:60:0b:2b:e8:24:9e:b6:ab:a4:ff:4c:95:
5f:22:96:16:39:1f:36:0d:de:7a:8c:e0:4a:98:ee:
ae:21:fa:61:0d:31:85:ed:77:f1:82:b2:58:ef:b7:
4c:b6:bf:ba:db:c9:63:54:f3:bc:c9:45:bc:e7:b3:
3f:1f:c3:27:0f:83:30:db:07:64:f2:8b:b1:4f:51:
06:4d:61:34:e5:de:23:7c:f4:3a:7b:8f:b8:e8:cb:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:A7:21:51:D9:44:08:29:A1:E7:47:26:A1:70:31:04:A2:DE:F0
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:b2:c0:d2:fd:ce:d1:d9:26:4f:40:8b:69:2f:37:26:44:37:
89:fb:f3:d1:00:4c:3f:4d:c8:95:b5:ae:be:e7:fc:02:43:92:
a6:08:fc:0c:3d:a8:a8:be:27:af:28:e6:4c:48:fc:53:7e:6b:
8a:80:66:bb:2e:6d:19:63:19:05:78:ce:f5:1a:8e:00:b7:7e:
94:71:c6:9a:3a:ca:47:ec:4b:45:01:0c:a7:c3:ba:d0:16:e3:
34:38:7d:4b:79:68:a0:9b:52:76:ad:46:3f:44:8b:30:e4:ff:
5d:b3:22:af:1c:29:6f:dc:20:c2:79:f2:72:a7:5a:66:9b:0d:
13:65:4a:2c:02:f0:39:0c:fe:68:59:a7:56:23:dd:2f:80:4c:
da:c4:21:71:ef:47:07:2b:2c:41:b6:63:94:29:0a:fd:ae:a0:
81:52:d8:f7:b6:50:ae:a2:30:63:0c:49:df:cf:ec:68:ef:05:
7d:5c:81:5c:aa:93:fa:f2:ca:b3:68:81:8b:fb:3a:bf:ed:72:
0b:27:16:8a:36:50:39:c3:82:6e:e4:a1:0c:2d:f1:54:31:29:
48:bd:37:26:1d:57:e6:2b:11:66:78:f4:a0:dc:fc:74:2e:89:
1c:a3:51:c6:bd:f1:2d:eb:d6:ea:ce:26:00:cf:b9:5f:c1:27:
57:45:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:19 2025 by rpki-client