This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
File: ifWWEQAwvcmzutds_QXDEkYXyVI.mft (raw, json)
Hash identifier: V2lEqPyp5Mve0R72P3P8lkBAhvKXA2MSGhbbasmFE5o=
Subject key identifier: 8A:2C:64:C4:70:C6:4D:E4:84:5E:9C:38:FB:60:89:67:B1:D1:FE:10
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 0468
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
Manifest number: 045A
Signing time: Mon 22 Dec 2025 23:17:08 +0000
Manifest this update: Mon 22 Dec 2025 23:17:08 +0000
Manifest next update: Mon 29 Dec 2025 23:17:08 +0000
Files and hashes: 1: ifWWEQAwvcmzutds_QXDEkYXyVI.crl (hash: 29WJtlyH0LWDhNCkguhBsaEZLlZ4mZa8/FDuR3DVSA8=)
2: 969AE080A14211EC8C49D660C4F9AE02.roa (hash: b9iBKweDQpw3WvJOHZ5pnqPC35ef5TOK2GSHDPRSqes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:17:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1128 (0x468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62, serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Dec 22 23:17:08 2025 GMT
Not After : Dec 29 23:17:08 2025 GMT
Subject: CN=6949d174-8c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:2f:e6:02:c4:cc:f5:16:d4:24:6b:2c:95:
cc:bd:ef:3b:99:dd:f8:95:26:85:d5:41:76:fc:bf:
6c:40:87:32:20:ac:69:bd:39:0e:67:bd:8e:61:56:
cf:c7:97:36:72:79:1c:57:ab:04:37:64:e8:79:cb:
8b:2a:60:57:2a:91:36:cd:88:f3:24:d8:f4:22:fd:
bd:20:c2:85:2a:2c:c3:0f:0c:63:37:ac:85:2c:7e:
d5:c1:ea:6d:6b:73:df:16:6e:35:ed:0a:3a:90:e0:
c0:b1:61:21:f1:6c:55:f6:a5:48:b0:18:24:ae:10:
75:bd:1d:0b:cb:4e:a2:65:41:95:d7:69:c5:98:60:
d9:a9:d8:fb:8e:44:d2:7d:ea:5f:ac:e1:d5:30:27:
4f:12:df:e3:07:cd:bc:9d:e9:ea:cb:e1:3e:58:78:
b2:69:2b:c2:db:ac:fb:43:6a:91:0c:c2:76:48:2a:
55:04:b5:87:3b:a3:0e:a0:95:7a:b9:57:77:4e:0f:
25:c9:52:35:e5:e6:65:70:5d:44:bb:0b:36:9e:e0:
9a:5f:ec:a6:db:90:b3:50:96:e2:14:90:bf:fe:27:
fa:9f:f8:b1:b1:ae:e4:3a:1a:3c:a8:f3:06:00:36:
a4:4d:cc:6b:25:85:37:04:c1:ac:5e:dd:22:b1:91:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:64:C4:70:C6:4D:E4:84:5E:9C:38:FB:60:89:67:B1:D1:FE:10
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:48:eb:74:9b:c6:ac:af:19:86:91:cb:37:4c:d7:e4:42:
e1:95:a8:1a:44:1f:ad:c3:c8:24:2a:1b:a1:8c:70:d0:3a:58:
52:24:3b:c0:ec:0a:b3:1f:ea:cd:3e:e9:96:b2:b8:2f:96:2b:
79:73:8d:7e:9e:58:5c:f2:4c:c6:a3:1e:e7:5c:d2:d9:b9:fb:
51:c4:64:66:55:1b:ad:74:2f:b1:21:fb:ab:0b:2f:15:70:38:
2a:ca:8b:58:c8:27:9c:72:d0:29:e7:fb:38:48:e5:67:75:cc:
b6:88:cc:91:46:62:c7:8f:63:43:6c:fa:a1:cb:07:5f:e3:4e:
a3:b4:10:fb:f0:4b:06:71:3d:3d:e1:50:08:9b:e5:69:36:40:
e9:40:17:e0:48:9b:eb:40:14:cb:d8:88:33:42:ee:f6:bc:51:
9e:3e:21:40:f8:38:4e:25:16:15:4a:38:26:dc:89:80:2e:b1:
90:5b:50:ed:97:d2:d9:42:9e:8a:d7:7c:af:64:d4:b5:d1:fa:
e4:f7:22:00:af:05:97:4b:2f:e3:f8:df:19:f6:02:6f:80:3a:
81:a9:0d:75:80:7d:b8:e1:87:f4:9c:80:cc:51:2e:22:bd:a4:
eb:c3:a9:d7:31:a5:2b:dd:53:0f:79:8e:b2:5d:26:b6:21:1e:
8b:1f:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:22 2025 by rpki-client