This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File: exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier: LR9A31vksEClitVpg7AzW13rQLrLdL+qamAr1XYF3jU=
Subject key identifier: A3:08:5F:6F:85:C2:C8:35:B4:80:23:A7:54:89:1B:19:99:C4:B8:23
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer: /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number: 0255
Signing time: Fri 19 Dec 2025 00:55:43 +0000
Manifest this update: Fri 19 Dec 2025 00:55:43 +0000
Manifest next update: Fri 26 Dec 2025 00:55:43 +0000
Files and hashes: 1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: mG6EN++/EZTvtxSdvbGbwAMOdaETqj3Mohn/5Yz8jt0=)
2: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: uCYT4lQMur/tG8/It9xxnzgoilgSXb5cLxgwmOVEMs8=)
3: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: G6Wgfmuf7isN39qtMPKHSSoxC3J+volHlymr2bVvLnQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:55:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Validity
Not Before: Dec 19 00:55:43 2025 GMT
Not After : Dec 26 00:55:43 2025 GMT
Subject: CN=6944a28f-befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:14:d7:1f:4a:b6:5c:47:67:7a:9d:3f:9a:
7a:59:44:4f:cf:04:29:77:bb:dc:77:18:55:c9:92:
47:be:0e:36:7a:49:68:ce:2f:be:04:ae:a9:e3:c3:
ab:ee:02:6c:86:ea:c1:82:4d:e8:d1:75:d4:69:52:
aa:f0:77:32:30:fe:31:91:f1:96:8a:c1:ee:67:64:
85:69:ff:3c:2a:22:c5:ec:ef:a8:20:8a:0b:e7:53:
71:04:05:9b:29:8a:8b:7a:65:92:77:3f:51:78:ff:
7d:39:ec:c5:bb:69:61:28:ba:c8:7f:00:a8:61:eb:
a7:48:d7:15:33:d1:c1:82:02:88:00:b9:da:58:5b:
bf:51:66:dc:ae:90:3d:f7:1e:3e:fb:60:a7:c1:f1:
c1:34:3a:11:cc:ea:28:bc:5a:f2:c5:9f:3b:b3:47:
00:f3:b0:cf:b4:da:dc:cd:bc:01:6a:a5:d5:ac:f8:
b9:80:6f:a8:66:42:93:80:86:75:f3:a8:2d:d8:10:
ac:27:99:51:66:50:37:27:18:f6:46:d4:08:dc:09:
6e:d9:e2:6d:44:91:54:83:6b:fd:f6:79:50:25:c4:
b2:8a:12:ef:f0:18:fd:a9:9a:0c:d2:63:fd:15:7e:
bb:7f:9d:ae:d4:1b:5a:40:9d:9f:4d:78:e8:df:a1:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:5F:6F:85:C2:C8:35:B4:80:23:A7:54:89:1B:19:99:C4:B8:23
X509v3 Authority Key Identifier:
keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:00:51:66:8d:98:6a:1c:7e:d8:82:1f:5c:2e:b7:94:3a:d6:
45:e1:04:40:a3:04:31:b2:ca:43:9b:d2:ac:68:30:73:96:bf:
58:de:6b:7a:c6:39:a5:fc:3c:2c:2c:04:31:7f:8d:45:5d:63:
99:19:fc:b3:5d:00:8b:a4:a2:69:3d:46:e1:84:96:5a:13:8c:
20:2d:4b:59:14:e6:9a:1f:a8:3c:64:49:8f:25:55:84:84:fb:
f1:9e:c1:b3:a7:d5:61:67:f6:6e:89:28:a6:9a:59:2e:00:03:
ac:aa:a7:48:ed:53:0b:16:7c:df:d9:98:ef:0e:a8:ec:1e:0c:
18:68:f0:fa:38:b4:34:59:6e:1a:96:d2:eb:7f:92:93:f2:b7:
c6:e8:40:ee:3c:b8:05:b2:0f:5e:2f:82:db:5f:41:1d:9b:2d:
dd:76:de:03:aa:77:b8:e5:95:2d:cc:6b:d3:df:f2:a4:e7:d3:
04:db:c2:ce:75:e5:62:43:d0:ce:4b:74:7d:5e:34:2c:22:d3:
cf:46:eb:1f:3c:3c:f2:c1:6a:70:db:a7:50:55:90:fe:48:96:
29:02:c5:a8:a3:db:fb:60:1c:b2:c9:8a:e3:cb:47:32:ff:c9:
dd:f7:5e:9e:ed:43:17:a9:53:f4:87:8b:29:2a:37:49:46:74:
46:2e:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:22:45 2025 by rpki-client