This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json)
Hash identifier: 7WBgKOodF701SO2IVU21IouYab2+FZaYEWwF6Imsbb8=
Subject key identifier: 07:F7:3F:8D:6D:D6:95:F2:84:D0:46:20:C8:E2:BB:91:24:DD:96:4E
Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4
Certificate serial: 0638
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
Manifest number: 0629
Signing time: Wed 31 Dec 2025 22:20:36 +0000
Manifest this update: Wed 31 Dec 2025 22:20:35 +0000
Manifest next update: Wed 07 Jan 2026 22:20:35 +0000
Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: CKU9WyeL4J1MNKbSiXPEiOWjAzg65vhapbrRT6zPMxM=)
2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: a4WQSUXqPLBs6hBYXUzBgrWs1nsWnI2pLDicQNKog6o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 22:20:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4
Validity
Not Before: Dec 31 22:20:35 2025 GMT
Not After : Jan 7 22:20:35 2026 GMT
Subject: CN=6955a1b3-a810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:83:34:a6:77:ea:e8:ee:85:7e:65:3f:74:
e7:11:2f:2b:15:49:46:ee:72:6d:5d:b7:15:d1:c8:
a6:1b:47:e7:d0:51:66:22:68:ce:cf:2c:16:b7:61:
32:24:c7:19:ac:78:33:6e:0f:f6:f7:dd:ee:89:92:
90:c9:85:8e:69:87:43:4b:b5:46:65:d8:2d:2b:0a:
18:be:bb:ab:00:12:d2:cd:0c:08:49:3e:75:5d:f9:
db:d3:15:d3:13:b0:66:e7:33:66:11:65:89:8f:fe:
05:94:c0:d5:85:3d:ea:37:b4:46:f1:ae:b3:d0:ff:
06:ba:0c:ab:e1:ab:55:ca:8a:a5:5e:60:0b:db:04:
2d:b5:d0:90:f4:b0:93:89:cb:11:04:f2:3a:5c:39:
96:56:f8:9f:e6:c4:8d:67:3e:8f:fd:b1:af:2e:fa:
37:d4:50:b3:59:90:e6:31:f5:7a:05:5f:50:8b:65:
9a:5e:65:d0:18:72:3c:99:8f:70:31:a2:7a:55:bc:
60:cb:e2:fb:b5:b7:94:60:78:7a:a3:3c:fb:bc:1a:
2f:9e:b6:02:59:ff:b4:0b:07:4b:96:67:78:46:79:
af:aa:71:97:1c:e4:36:de:dc:ac:9a:9c:89:0d:31:
3c:d1:8f:9e:74:12:36:6f:88:75:9a:d0:95:08:a2:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:3F:8D:6D:D6:95:F2:84:D0:46:20:C8:E2:BB:91:24:DD:96:4E
X509v3 Authority Key Identifier:
keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:93:24:b3:2f:90:9b:04:04:62:d3:d8:bb:b5:91:6c:5c:
c6:f4:4f:37:3d:4e:77:8e:92:e0:33:46:4d:79:25:ac:ee:72:
de:3e:d1:c8:db:8e:2d:81:a5:74:ec:56:1b:f0:19:62:3c:8a:
11:31:0b:36:d5:1d:ba:12:84:3e:f6:b3:42:e1:1d:82:c3:42:
81:7c:8f:ae:9f:e2:78:2c:48:11:d0:20:f0:63:79:bb:6d:35:
9b:84:45:75:5e:86:3d:81:87:61:82:a8:6d:1d:10:32:b1:d8:
43:11:05:ea:3c:39:ce:f1:9e:1f:c4:92:f7:db:47:f9:7a:93:
59:ab:b5:05:95:5d:18:47:36:43:e0:67:a2:c5:7b:bb:9d:06:
c7:13:66:69:6d:1a:8d:63:b3:70:ac:3f:c9:75:07:0a:5c:e5:
89:a5:32:d5:7f:f5:18:87:63:31:87:d6:d3:8b:64:94:5c:17:
d0:ea:54:1a:de:7a:76:38:0d:40:10:35:87:cf:0d:31:03:3d:
bd:8f:6c:22:07:96:26:b8:a1:04:53:c6:1a:84:70:8b:f9:a7:
c6:c7:23:50:ab:7e:a9:02:e2:77:48:23:99:53:42:41:5d:4c:
4a:6c:39:26:71:08:e6:8c:b5:4f:96:ea:02:38:95:02:ab:7a:
79:eb:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:26:13 2026 by rpki-client