This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File: c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier: l/exfLx/nuTu41x+HYdpNyLWeCve99QPICvu3D47toY=
Subject key identifier: AC:A7:45:AE:8D:8D:3A:D1:F8:DA:63:6C:73:A7:E7:E4:6C:83:51:FF
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1E80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number: 1E62
Signing time: Sat 06 Dec 2025 15:46:18 +0000
Manifest this update: Sat 06 Dec 2025 15:46:18 +0000
Manifest next update: Sat 13 Dec 2025 15:46:18 +0000
Files and hashes: 1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: OHiRGIjA5vjPsqmDz4r25P0If+VRdZzfWOA0QBw7JSE=)
2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: EJiEnoCirWsDQY/eDttKswieD8axfAxOee0LqYEm/Qk=)
3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: C6lZnCUm+xSNFhUq+KN79jJBl7/zRPJh8VdBqkQbpX0=)
4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: BGVuJ0Wf+Uf4RgQQzyj2Cck77KLCc+rr/2VE6L1NPis=)
5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: wqWtD+2LXaW4MpbT7PeD5JYJic0Zu3FnuTrJZi1gdyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7808 (0x1e80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Dec 6 15:46:18 2025 GMT
Not After : Dec 13 15:46:18 2025 GMT
Subject: CN=69344fca-57de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:47:f2:e0:77:2e:77:14:ea:66:2c:3a:35:
08:8d:04:83:38:04:67:36:a1:10:24:66:47:1f:b9:
fd:24:47:02:1c:03:7f:59:2a:78:30:04:a2:1e:e8:
fd:54:15:a5:e5:95:9d:38:68:07:18:32:7f:d6:b7:
76:4d:a8:5c:d4:5a:7c:9c:93:37:45:a8:71:89:d3:
36:57:17:6f:26:06:47:69:0f:86:96:1b:62:ac:5d:
59:00:15:f8:4c:a5:3c:1c:23:4b:f7:88:f9:ef:28:
79:9d:14:40:35:21:45:cf:76:1c:78:93:91:e7:bb:
9c:04:07:d2:ea:34:a8:9b:19:02:d7:c0:92:83:a7:
dd:3b:c0:c6:81:7b:ce:05:14:66:d5:04:d9:d6:18:
af:c7:ae:86:d8:0f:9d:05:5d:b7:91:e5:54:b9:0a:
62:64:8a:a7:3a:78:02:19:36:cf:05:a8:93:98:29:
d3:3e:76:7f:ff:7f:76:38:0c:c9:69:cd:e0:96:21:
ba:2a:90:4d:12:8f:e4:78:aa:e7:61:c2:d0:84:37:
30:8f:00:c3:36:b8:38:0f:94:c7:e8:5e:da:04:8b:
c5:aa:03:67:15:a7:fb:51:66:8b:a6:9f:fc:08:21:
c0:78:ba:7f:b8:d8:a6:28:49:70:66:58:18:ea:92:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A7:45:AE:8D:8D:3A:D1:F8:DA:63:6C:73:A7:E7:E4:6C:83:51:FF
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4f:d6:ea:88:5a:29:c5:42:86:f1:95:70:c4:69:9b:3e:6b:
9d:ad:82:42:b2:31:ef:75:fe:f0:e1:e2:58:c4:09:99:1a:9d:
d8:91:f8:e2:8f:65:f4:ee:f7:6e:da:7c:bd:1d:e8:71:bc:37:
00:1e:ea:9e:4e:9d:d5:ac:03:bf:8a:62:c9:1e:90:65:d5:da:
d4:dd:c6:7e:a1:40:0a:5d:4a:22:46:37:43:88:d3:d6:07:0e:
3f:78:f4:4d:22:7f:e3:b2:85:fe:12:05:14:a1:d2:0f:0c:64:
1b:03:94:a1:db:0f:2e:44:b4:84:8f:16:f8:f7:76:be:56:c2:
ea:d6:25:1e:bd:35:34:d4:91:34:38:32:e3:31:13:b0:0e:b2:
16:b3:33:26:d3:3f:af:8b:e1:cf:f4:49:2b:bd:45:69:e2:48:
d5:0c:23:49:2d:b5:7d:55:5e:b2:1c:0f:5a:c5:66:fb:09:79:
f4:c2:c0:6c:8c:4b:fb:9c:55:d7:b2:7b:88:56:1b:c3:9c:ca:
82:7a:6d:c7:b7:2e:21:be:bf:3a:dd:79:8e:6d:b5:2f:29:36:
71:97:6b:97:c7:cc:da:3d:13:e6:21:92:dd:06:a2:72:41:b9:
f7:99:f0:64:c0:b8:d2:97:c7:42:6b:ac:c9:9f:07:33:92:b1:
71:95:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:23:16 2025 by rpki-client