This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json)
Hash identifier: wD+e334Jy/2BsrVIzc3OAa9EWjiSbpHfTaHUrYP8ijc=
Subject key identifier: 36:54:F4:02:EB:CE:46:2F:97:25:0E:C6:D1:CE:97:29:5C:5B:15:42
Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
Manifest number: 0108
Signing time: Sun 21 Dec 2025 04:10:44 +0000
Manifest this update: Sun 21 Dec 2025 04:10:44 +0000
Manifest next update: Sun 28 Dec 2025 04:10:44 +0000
Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: EOq7zxAZjoIcUWaqriTHhuScGLbP7IOov7c3LkYyJlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E
Validity
Not Before: Dec 21 04:10:44 2025 GMT
Not After : Dec 28 04:10:44 2025 GMT
Subject: CN=69477344-5955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:24:25:7f:09:90:a1:2e:80:8a:91:78:27:
3b:31:ea:d4:2f:de:2f:9d:18:c1:6f:e8:48:b9:f3:
64:24:1d:a2:13:c7:3d:66:a4:42:52:48:d1:9e:7a:
f0:80:bd:d1:86:3e:3c:d5:8b:08:02:be:55:56:aa:
d6:40:e4:0f:3f:1a:10:03:ee:d2:28:67:94:78:a6:
2f:15:13:c7:d3:fc:10:67:de:48:50:da:df:25:27:
28:24:bf:47:eb:5e:68:ff:81:1b:fb:b7:ca:91:9d:
72:be:a0:d4:19:ba:5d:23:c4:33:01:dd:6a:f7:ea:
83:c6:83:79:29:e5:07:fc:5d:16:5d:8d:79:19:25:
b2:0f:f6:59:14:08:3d:aa:c2:ba:9c:be:30:b6:3b:
94:c5:74:53:ec:4f:08:df:5e:7b:e7:6a:14:ec:66:
3a:3d:ed:1f:9e:3e:57:fc:aa:8e:53:0a:21:0b:d4:
c2:8f:49:cd:6f:05:e1:89:21:00:19:34:a5:d5:de:
b1:35:b8:f1:99:c3:00:cc:44:21:fa:51:a6:fa:b5:
a0:14:17:2c:8f:21:3e:c4:11:05:33:1f:82:25:ba:
b5:aa:b1:60:b7:6a:57:e2:56:4c:79:e2:6f:99:0c:
e0:b7:2b:9e:cf:74:7b:7a:d0:ab:ea:6d:43:4c:a0:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:54:F4:02:EB:CE:46:2F:97:25:0E:C6:D1:CE:97:29:5C:5B:15:42
X509v3 Authority Key Identifier:
keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:36:1d:79:76:bb:c3:89:9f:77:a5:8e:0d:a1:82:40:ea:8e:
1c:1c:20:2e:88:0f:65:2f:4d:a1:9d:56:d9:76:cf:35:bd:32:
d2:25:e8:57:1e:fe:70:2d:99:ec:07:09:c0:d1:8b:b1:1a:7e:
42:83:de:24:14:8f:06:26:44:55:21:b8:59:f2:e4:fb:73:9b:
52:16:9c:7a:69:93:b3:6d:07:cb:36:d2:bc:df:1b:01:5d:57:
11:c5:d5:c9:c4:73:21:0d:01:54:36:6f:ae:d8:9b:f0:b9:80:
8d:a5:9d:c4:88:27:92:68:d6:9b:dd:94:42:aa:41:74:99:c5:
fe:76:d0:c8:44:7f:93:0c:55:6e:c8:7e:7d:06:86:5e:7e:ef:
1c:6a:6e:37:db:3c:99:84:79:bd:cc:9e:02:ae:d3:5c:78:46:
90:19:4d:a1:9b:08:10:6b:ff:74:97:1e:a5:6b:23:00:8e:e9:
b9:cd:6a:1e:12:7f:d5:38:d1:5d:94:83:c7:7b:5a:df:1d:5c:
89:99:70:cc:b7:db:28:89:04:53:04:4f:50:83:e2:08:a9:d1:
c0:70:a1:fe:55:5e:89:37:cf:6e:36:8c:a4:8e:05:ab:d7:88:
96:1e:3a:a3:9f:04:5d:e9:59:1e:b4:a3:26:95:a0:44:e8:4f:
3c:ad:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:39:05 2025 by rpki-client