This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
File: tljvayeSnHt_X7Jsue5qQSzoXdQ.mft (raw, json)
Hash identifier: MDFORTfTEFZl3RkzRHBBA3dv5UgW/8U4w7b92mGcqoo=
Subject key identifier: 71:C0:1E:E0:69:35:34:CA:7D:65:79:EF:D6:BB:B8:EB:2C:12:F3:1F
Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
Manifest number: 07F8
Signing time: Tue 02 Dec 2025 20:22:06 +0000
Manifest this update: Tue 02 Dec 2025 20:22:05 +0000
Manifest next update: Tue 09 Dec 2025 20:22:05 +0000
Files and hashes: 1: tljvayeSnHt_X7Jsue5qQSzoXdQ.crl (hash: 2BREjYjoFPyA8Jyd0g9Knml3f8Vuk6FcUGPukDQW9Gs=)
2: 0886DE60D4D311ECBE99375AC4F9AE02.roa (hash: uazG73UaMnx6WsXKrRFqrUld6ba1Rwlrt5W45/vO4zY=)
3: EFC0CAB2F81111EEB4681B75C4F9AE02.roa (hash: HLeHhf7z+DQd8E9vrX8KAr3EM5GCzgmJjqLeg2zSKbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 20:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072, serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4
Validity
Not Before: Dec 2 20:22:05 2025 GMT
Not After : Dec 9 20:22:05 2025 GMT
Subject: CN=692f4a6e-67cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:a1:c6:6a:cd:34:a1:cc:72:8a:9e:f9:33:
6a:d6:37:7e:85:ee:a4:a5:e9:68:09:22:5d:0e:85:
49:b7:85:36:f6:90:23:cc:a5:af:d2:44:c2:50:e8:
f1:ae:d7:3a:04:53:5c:d0:21:90:47:a7:1a:6c:ae:
f3:3e:10:21:c9:e1:a9:b5:dc:8b:d9:9c:92:5b:42:
f6:b0:23:6f:b0:af:9d:ba:76:ab:8a:ae:6e:6a:27:
eb:78:97:06:45:4a:5c:4b:c9:e6:3b:0e:0c:20:f2:
de:f5:10:63:4d:e9:dc:4c:ba:3b:fb:37:da:90:e3:
2e:2c:2e:c3:5a:19:15:77:d5:ef:9c:c9:bb:75:8b:
cf:d8:b4:28:63:fa:16:e8:c4:7a:36:1c:4e:50:bc:
2d:99:fd:9b:90:f5:2f:b9:e9:6e:39:35:9f:21:9a:
b1:07:4d:14:34:1c:47:db:87:bb:1d:78:11:59:52:
41:2a:68:e2:86:a4:1a:be:f4:89:27:72:26:57:ed:
f1:77:dd:8a:98:39:12:c6:09:cc:d2:05:40:56:c6:
a3:9c:ed:81:10:61:06:58:b1:ac:7c:02:d6:f9:6b:
dc:8f:52:3e:8d:3b:cf:ad:cf:fd:53:68:16:11:55:
16:77:e5:6d:99:ed:e4:cb:44:6b:35:80:8e:28:2d:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C0:1E:E0:69:35:34:CA:7D:65:79:EF:D6:BB:B8:EB:2C:12:F3:1F
X509v3 Authority Key Identifier:
keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:c8:b4:b0:f6:d7:75:bc:00:4d:f0:ec:77:cb:df:2e:df:
3f:d9:82:26:a1:3d:6e:69:40:f4:be:45:5c:f9:ad:60:ec:51:
d0:8e:15:0a:07:9e:e2:a2:d6:e2:a3:cf:02:76:b4:38:1e:49:
86:b2:d4:5c:af:36:6e:ff:9a:dd:97:bb:03:d2:2d:c5:d0:38:
8f:3a:d8:31:02:59:b7:64:de:bb:89:da:35:8c:bf:c6:78:f0:
6a:3b:a5:85:fd:85:62:bd:c1:5f:c4:28:a8:c8:7a:20:67:eb:
51:24:04:2a:e2:c0:79:f6:2e:c3:b3:8f:84:dd:68:72:a1:02:
73:85:ae:f5:ce:01:2f:8c:52:64:e4:96:60:bc:19:5c:47:31:
e3:ed:f0:a0:4e:1a:ea:9d:6a:c9:b4:c9:75:dd:5c:3b:1a:fc:
20:3f:7a:44:91:ca:80:00:54:da:71:8f:a0:3d:6e:aa:41:d6:
8b:03:5b:93:bb:a3:55:64:d1:09:9d:60:a6:4f:f9:61:ff:53:
2d:e3:b4:56:6f:5d:6f:fa:cd:f4:cd:c3:9a:f3:45:11:a0:8a:
76:3e:45:6f:99:44:31:68:67:75:bc:f9:30:3b:34:d7:01:1e:
3d:ac:86:95:a9:bb:70:f9:ee:5d:95:70:50:84:62:6c:2c:0a:
8d:9f:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 18:57:12 2025 by rpki-client