This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
File: t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft (raw, json)
Hash identifier: M1oKP2vQ6RRLzIq5jvdGP4VNVeCLDS4TmwU53Wu87fU=
Subject key identifier: 2C:76:16:A7:55:A8:0C:02:42:E2:B7:28:A2:83:A3:2A:E3:09:DA:23
Authority key identifier: B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF
Certificate issuer: /CN=A911EE4C/serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
Certificate serial: 2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
Manifest number: 29
Signing time: Tue 23 Dec 2025 06:29:53 +0000
Manifest this update: Tue 23 Dec 2025 06:29:52 +0000
Manifest next update: Tue 30 Dec 2025 06:29:52 +0000
Files and hashes: 1: t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl (hash: iucbpd52u3cLd6xxjtf9OxvT9wes6WkiS3PMu1sFxJ8=)
2: 8D06A40AA1DE11F0A041111BC4F9AE02.roa (hash: CtuQzwGllfJ59SjM+rzLZycPJacOoACuk/ktiuBDrZI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl
rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EE4C, serialNumber=B75198ECB4B5C6E8D1E565AFF8943F8AF4AF77FF
Validity
Not Before: Dec 23 06:29:52 2025 GMT
Not After : Dec 30 06:29:52 2025 GMT
Subject: CN=694a36e1-fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:43:03:d4:2a:74:1c:c9:f0:1b:f5:7e:3d:
e7:57:67:cc:7b:c5:69:d3:ee:ce:6f:0c:de:db:c9:
53:58:ea:77:46:5f:1b:75:4b:2b:76:b2:a8:24:8e:
02:99:1b:a9:1d:c2:ca:4f:85:6c:f7:e1:a5:7a:e9:
44:83:8c:3b:4a:67:3f:06:84:83:ca:f3:59:0e:b3:
e1:e5:2c:5c:bf:e0:d8:69:da:32:54:5b:df:80:42:
11:18:57:d6:2e:e9:6c:c4:78:09:e2:a3:64:a8:54:
97:45:16:bf:7a:28:5b:8f:1e:dc:98:fe:58:17:e7:
ea:09:ad:20:56:b4:58:eb:b3:9a:d6:e2:91:21:47:
c5:ee:1c:52:7c:e6:fa:c8:0e:89:02:bc:e8:cc:a0:
28:bb:dc:dd:6d:da:ab:32:ee:63:28:6b:16:34:b8:
aa:39:bd:d5:c3:3b:4d:5d:ac:f4:80:f1:b2:b9:a5:
8e:6b:b0:45:99:42:b3:aa:22:92:fd:4c:1e:40:25:
87:e6:d1:0f:d4:fc:fb:8b:2b:6d:7f:4f:29:cd:60:
a9:6b:a1:2d:6d:76:12:bb:d7:fe:33:c8:59:e0:52:
c8:08:9e:37:69:59:eb:a3:ff:d3:af:ee:f2:02:8d:
8d:78:72:48:dc:d0:2d:fa:7e:49:bd:49:1c:58:1e:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:76:16:A7:55:A8:0C:02:42:E2:B7:28:A2:83:A3:2A:E3:09:DA:23
X509v3 Authority Key Identifier:
keyid:B7:51:98:EC:B4:B5:C6:E8:D1:E5:65:AF:F8:94:3F:8A:F4:AF:77:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t1GY7LS1xujR5WWv-JQ_ivSvd_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EE4C/09359614A1DD11F09C402513C4F9AE02/t1GY7LS1xujR5WWv-JQ_ivSvd_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a6:52:4d:5e:e7:15:a1:d1:5c:fe:85:14:50:a3:ba:ce:b5:
56:de:ae:47:d7:fa:1f:8d:81:df:b9:4e:3c:77:8f:14:20:da:
52:f3:86:4e:02:b1:06:39:97:ea:2e:76:89:3f:da:c0:9f:a1:
c1:26:92:cd:1d:54:a5:a2:a4:ae:84:16:89:36:c0:75:77:87:
6a:ab:75:06:44:38:55:37:99:e7:32:dc:2c:69:1d:16:e6:cc:
e5:6e:29:2e:39:9f:7d:09:51:66:b0:0f:3a:8c:d3:7b:28:2b:
14:20:97:20:08:03:57:cb:65:bd:dc:df:3f:c0:a2:bf:74:4a:
e2:6d:0f:d4:71:2f:d0:39:1e:41:ba:35:55:80:9a:3c:09:d6:
4d:a9:8a:07:ea:e4:fa:43:e8:bf:71:28:ac:c2:7b:02:0a:c3:
57:74:0e:4b:00:19:e3:90:40:30:5a:60:bb:15:f3:48:e9:27:
48:d1:bd:dc:c9:66:26:a1:c1:c4:02:7f:12:d9:44:f7:cc:dc:
2a:f0:e0:42:77:30:75:d6:73:d2:b1:67:bd:7c:e1:01:be:00:
f3:9e:9e:7a:28:96:a7:03:75:98:73:00:02:2c:c0:a6:0d:04:
cb:d6:3f:96:ba:40:af:d7:0f:54:78:41:16:a4:6c:d4:9f:cd:
5e:01:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:14 2025 by rpki-client