This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
File: A47Arrg1DJ2n5vILJtLzULpsJAk.mft (raw, json)
Hash identifier: 9VhdFsxkH8wErj/nR33wP41r4FSBccnah7aM6qXMlGQ=
Subject key identifier: 3C:96:13:24:97:A3:19:42:19:1B:F3:71:D3:E2:17:20:46:6F:88:07
Authority key identifier: 03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
Certificate issuer: /CN=A911B8D9/serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
Manifest number: 0204
Signing time: Tue 23 Dec 2025 01:23:50 +0000
Manifest this update: Tue 23 Dec 2025 01:23:50 +0000
Manifest next update: Tue 30 Dec 2025 01:23:50 +0000
Files and hashes: 1: A47Arrg1DJ2n5vILJtLzULpsJAk.crl (hash: u+dZoq1pJqahjH5EdumvD2jtkQTDqKcvnrWJIlXGElc=)
2: F50351E0C70A11EDB29DDE85C4F9AE02.roa (hash: hqEhlFzljzL9QNC3npjH/PXhuwMeiWo8+fxKQZav0bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B8D9, serialNumber=038EC0AEB8350C9DA7E6F20B26D2F350BA6C2409
Validity
Not Before: Dec 23 01:23:50 2025 GMT
Not After : Dec 30 01:23:50 2025 GMT
Subject: CN=6949ef26-e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:33:3b:5c:38:f4:20:64:81:1e:7a:60:b6:8a:
bc:66:b5:b8:8a:e8:48:18:52:7a:95:46:82:28:c1:
dd:a2:a1:65:8a:31:f4:fb:e7:af:66:91:0f:98:20:
a4:00:04:e9:25:f6:fb:39:14:ff:ff:ec:56:d4:2f:
0d:60:3d:bb:f3:23:4e:a6:a1:71:04:ec:f2:5d:10:
4d:1d:1d:dd:8e:5c:6b:a9:b0:c0:b9:07:86:ba:8f:
17:e1:14:04:c6:b6:71:3e:ee:89:fa:81:f2:9b:8f:
3f:a8:c5:ac:12:6a:a2:8a:3e:cc:90:cc:b5:99:05:
39:33:7a:4a:8d:76:75:82:f3:87:e1:40:4a:13:3c:
93:83:16:71:82:1b:fb:6b:43:6b:5c:32:67:6f:a6:
c4:16:0d:8a:17:fc:29:36:36:74:a7:12:8f:f6:18:
ff:ad:c7:14:b5:70:d8:6e:7e:11:1a:20:37:61:77:
4d:b5:5e:db:76:c0:39:31:94:38:35:f8:67:d1:e1:
91:83:69:8b:5d:0f:ad:2e:1b:ce:87:98:95:86:45:
30:d1:23:9e:83:7d:e1:8e:84:6b:1c:ff:1b:03:2a:
3d:5f:ac:07:90:95:4f:c1:2b:96:11:bb:b7:d1:0f:
af:a3:fe:8f:d3:c8:81:65:6e:f2:22:13:4d:73:26:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:96:13:24:97:A3:19:42:19:1B:F3:71:D3:E2:17:20:46:6F:88:07
X509v3 Authority Key Identifier:
keyid:03:8E:C0:AE:B8:35:0C:9D:A7:E6:F2:0B:26:D2:F3:50:BA:6C:24:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A47Arrg1DJ2n5vILJtLzULpsJAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B8D9/AF5CDB04C70811EDA874AE85C4F9AE02/A47Arrg1DJ2n5vILJtLzULpsJAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:77:ca:5a:a5:b9:4f:16:e8:d5:31:85:e1:2f:31:5b:d1:f0:
ee:44:ad:e9:28:26:e0:33:58:b0:40:bd:7d:65:47:83:a7:de:
12:e1:3a:b2:56:f6:95:9b:93:74:0c:72:df:98:2e:cf:3a:52:
e7:e7:1c:4a:44:14:aa:2c:0c:60:e0:45:54:e8:d8:54:d0:62:
fa:38:c5:22:3f:c1:8a:9a:26:80:35:ab:be:39:76:ba:f6:26:
8c:fe:fe:18:39:f2:0d:a1:a0:31:08:e5:23:46:92:33:0c:47:
d3:dd:56:45:7e:e3:4b:d7:67:07:4e:c1:6b:9f:b9:6d:e9:de:
c7:82:f5:1a:2d:4b:af:ba:0b:f2:38:bc:6a:89:fa:58:95:c7:
69:07:b8:62:66:67:73:07:7d:13:18:66:6b:a4:57:60:af:83:
ce:89:a3:1e:d5:0b:3c:10:23:11:78:9b:7c:74:05:2a:5f:7c:
f1:79:eb:b6:2e:e7:2b:ed:42:52:67:9c:e7:65:ee:24:6d:02:
c9:43:a7:55:02:3e:00:23:54:5c:e5:9e:8f:d5:c3:76:96:ce:
b5:de:c6:3b:e4:3d:ab:e7:91:3c:5a:2c:b7:67:97:c6:90:6a:
76:f4:4e:0c:81:89:c5:ee:23:7a:d3:af:f7:ed:0d:dd:ee:0d:
29:dc:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:54 2025 by rpki-client