This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
File: 60SnxtcuZG2Eose20umnMhAbgTo.mft (raw, json)
Hash identifier: KLUsSHdgZGrRi/sHeWoiQLzv10lMsouP71W8i9IkmGU=
Subject key identifier: EA:62:B9:2B:DB:B8:89:26:0F:3F:83:AB:D9:44:54:24:16:1E:4F:35
Authority key identifier: EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
Certificate issuer: /CN=A912A10A/serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Certificate serial: 02DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
Manifest number: 02D4
Signing time: Tue 23 Dec 2025 00:22:02 +0000
Manifest this update: Tue 23 Dec 2025 00:22:02 +0000
Manifest next update: Tue 30 Dec 2025 00:22:02 +0000
Files and hashes: 1: 60SnxtcuZG2Eose20umnMhAbgTo.crl (hash: Ke5PFcHJ/XJcJ365UWWDsBITjAsIyl+Kz2slxcM1ynA=)
2: 8C286648818611ED8D1C5824C4F9AE02.roa (hash: K2eRSWaNhgeJAJT+eZoCaSCPtQt1cFG3OtTWO7vDxZc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:22:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A10A, serialNumber=EB44A7C6D72E646D84A2C7B6D2E9A732101B813A
Validity
Not Before: Dec 23 00:22:02 2025 GMT
Not After : Dec 30 00:22:02 2025 GMT
Subject: CN=6949e0aa-5669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:17:4d:a4:fd:5e:9e:61:ec:39:3b:06:8b:bd:
26:1e:1e:74:8c:17:56:ea:9e:d4:01:02:15:47:8e:
f6:88:9e:30:61:87:40:86:02:32:7c:85:ea:d4:9b:
51:24:8c:82:0f:5b:f4:a2:d1:8c:4f:00:64:4a:fe:
69:ff:82:e5:bc:b6:ee:13:da:27:aa:0e:3e:cd:1c:
77:29:4a:85:d0:a6:52:11:18:a5:e1:b4:25:a2:35:
19:bc:80:4b:b0:03:6c:3e:f8:a7:19:2f:ad:1e:41:
58:3a:df:d8:66:ce:a7:76:f4:1f:fc:66:b6:e9:59:
50:53:17:d1:d1:f8:52:5a:ea:c0:6d:34:93:c1:a1:
18:be:f1:90:d0:54:32:ba:9d:37:a6:35:62:44:16:
69:20:3a:0a:23:0c:b7:64:50:f1:25:6c:28:79:13:
67:01:c2:91:d6:36:a6:c1:11:c3:25:c7:b2:ed:16:
59:56:d6:f8:ec:3f:4e:06:9e:89:b1:a6:ff:48:24:
f5:f2:c8:7f:18:ef:47:0c:5e:46:72:50:12:78:02:
c7:06:9b:ec:25:b7:bf:ba:f3:75:2e:a2:02:a8:c3:
1b:ec:22:f0:96:53:f8:f2:0d:61:95:d5:a6:bc:02:
06:4a:41:6d:87:dc:9c:d2:7e:90:0c:35:02:82:fb:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:B9:2B:DB:B8:89:26:0F:3F:83:AB:D9:44:54:24:16:1E:4F:35
X509v3 Authority Key Identifier:
keyid:EB:44:A7:C6:D7:2E:64:6D:84:A2:C7:B6:D2:E9:A7:32:10:1B:81:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/60SnxtcuZG2Eose20umnMhAbgTo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A10A/E518B076139211EDA052021FC4F9AE02/60SnxtcuZG2Eose20umnMhAbgTo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:23:2d:81:9c:8e:6d:5c:9a:e3:2b:e2:25:10:2d:51:fe:8c:
c0:aa:dc:68:0c:a0:49:2e:1f:5b:d6:65:2a:b9:50:a4:98:1f:
2d:4a:53:89:27:c5:58:f1:c7:26:82:02:a7:23:af:04:5a:f7:
b3:25:72:23:75:93:6a:a1:24:b5:56:88:be:5f:97:99:bb:7e:
d0:5e:26:af:75:d5:46:77:c9:6a:de:42:cc:2d:5e:0a:d7:c7:
fc:66:0a:be:51:c9:4b:5b:7e:45:ae:d1:6a:b6:8f:67:e4:c9:
c8:d4:28:5d:f4:21:44:6c:e0:64:c2:d0:3b:1b:e6:84:73:19:
b2:ff:5b:ec:35:03:4c:ad:47:56:75:99:22:18:b8:fb:60:27:
77:ec:f1:97:38:c7:b9:48:60:63:32:0e:d8:9a:fa:ca:19:cf:
93:5e:1f:f9:b9:c2:cb:a9:00:ae:d9:97:9f:cf:73:d8:23:fb:
38:03:6e:59:ee:f7:40:95:7f:21:dd:cb:10:bd:bb:48:ce:0a:
61:9b:fb:b8:cb:77:3a:db:94:d9:15:86:5d:3b:e8:83:af:ac:
c1:f9:f3:3f:d1:ea:e9:60:40:b2:94:6e:48:00:69:a7:0d:f2:
91:5d:66:c6:92:31:18:01:eb:29:4f:6e:34:b4:57:b7:6c:b4:
60:e7:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:03:24 2025 by rpki-client