This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier: G9UMNyRvSCoyl3kTQ14DFHggLNdE3FQDMZXYagarHGA=
Subject key identifier: C3:C6:8C:7D:C9:D7:C4:9F:E0:C3:4D:F1:F6:97:3A:97:8D:31:9C:EB
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial: FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number: FC
Signing time: Tue 23 Dec 2025 04:09:00 +0000
Manifest this update: Tue 23 Dec 2025 04:08:59 +0000
Manifest next update: Tue 30 Dec 2025 04:08:59 +0000
Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: pqyNk+80+NFXPd8cbAYt7hGCfKnPhd6D40VQ9sDjPMQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Validity
Not Before: Dec 23 04:08:59 2025 GMT
Not After : Dec 30 04:08:59 2025 GMT
Subject: CN=694a15dc-3ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:1a:f2:4e:d3:52:69:1a:06:bd:6b:d3:6a:
c8:65:90:a1:bd:b9:40:8a:29:5c:df:24:13:8b:f1:
7a:52:5e:f9:ec:62:43:35:02:46:43:50:48:a6:ed:
cd:94:be:61:4d:69:21:b1:e5:e7:f8:ef:7f:91:68:
a7:e1:24:46:f2:98:93:61:ab:88:52:28:25:0b:a7:
24:10:49:10:36:fe:ea:0f:43:3e:5f:0e:9f:ed:2d:
41:95:28:c2:9e:71:4b:85:e3:15:df:21:98:62:b5:
a0:36:7b:ef:8f:53:32:d7:bc:f4:ca:1c:23:86:77:
60:03:b4:74:be:3c:82:56:38:3e:d1:e4:21:fd:a2:
be:51:a3:c1:d4:3e:8c:0c:dd:0c:42:af:bd:80:20:
02:75:7e:cf:16:85:01:23:7c:de:aa:8f:d9:5c:a2:
0d:4c:d8:75:8b:c9:fb:91:ec:48:bc:37:2b:bd:d8:
f0:ee:b1:ba:2c:29:a7:b1:61:0c:bc:dc:6d:2c:ad:
93:12:c6:44:87:67:4b:60:73:54:bd:e8:b6:04:fc:
5e:c2:a1:5a:ed:46:4c:f0:40:08:7f:19:1c:08:a5:
07:48:6d:84:f2:1c:8f:52:0b:0a:31:d5:d6:fe:a7:
f5:79:fe:4b:17:3e:0c:d5:71:05:35:70:69:a3:17:
04:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:8C:7D:C9:D7:C4:9F:E0:C3:4D:F1:F6:97:3A:97:8D:31:9C:EB
X509v3 Authority Key Identifier:
keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:da:20:d9:72:3d:1f:50:cb:aa:71:2a:0e:8a:32:5f:70:d3:
39:2b:9a:85:71:3b:d4:f2:40:cf:b8:83:83:14:e0:e5:1d:0f:
5e:74:4a:16:eb:e2:71:e7:0e:d7:48:ad:a5:6f:7b:ba:0f:78:
7a:4e:3d:1e:04:0c:de:bc:a9:1f:15:3f:e2:22:93:3b:ad:f1:
10:1d:ef:26:0e:cb:8d:e9:42:f6:30:a5:63:ab:f6:1a:46:1b:
52:7a:0a:c8:00:a6:b3:52:fc:cb:64:b9:14:6e:01:e3:35:69:
41:0c:14:a1:6b:5c:73:e7:30:5e:fb:59:55:d4:bd:0e:67:4f:
d3:a3:a4:e0:b3:0c:ac:90:f0:ed:d6:91:80:c3:e1:b7:8d:7d:
b4:62:2a:ba:c2:36:3c:7b:eb:ca:f9:a1:38:1e:a5:90:a2:7d:
39:12:82:c2:06:b9:01:19:11:00:3c:9c:31:8e:73:d0:1f:68:
12:d9:b3:52:02:88:a6:14:be:05:0a:02:20:80:16:e6:ca:ca:
38:cb:de:73:ee:6b:d1:2f:aa:60:cd:00:84:60:36:0f:ba:62:
a3:65:f3:1e:79:11:1b:d7:c7:7a:63:0e:2f:1d:90:8e:4a:33:
39:32:f5:45:17:8c:37:9c:20:57:9d:5f:77:d7:0f:38:bd:55:
41:ae:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:19 2025 by rpki-client