This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
File: c0XTOFGViQaITYcWQKS-0shG0U4.mft (raw, json)
Hash identifier: hz7Q3Dh0DER1/1XP03utbN3xd7qyBbanvfQaPmZIJBM=
Subject key identifier: 8B:29:E5:BB:66:BA:54:6E:FB:34:1A:4F:73:FB:A7:F2:18:DF:D3:73
Authority key identifier: 73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
Certificate issuer: /CN=A912F3B6/serialNumber=7345D33851958906884D871640A4BED2C846D14E
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
Manifest number: 0107
Signing time: Fri 19 Dec 2025 04:09:40 +0000
Manifest this update: Fri 19 Dec 2025 04:09:39 +0000
Manifest next update: Fri 26 Dec 2025 04:09:39 +0000
Files and hashes: 1: c0XTOFGViQaITYcWQKS-0shG0U4.crl (hash: DtGI2W2zCVoXWgVsVY5zuFF+YSJjP+rAQkU6CMd7GRs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F3B6, serialNumber=7345D33851958906884D871640A4BED2C846D14E
Validity
Not Before: Dec 19 04:09:39 2025 GMT
Not After : Dec 26 04:09:39 2025 GMT
Subject: CN=6944d004-6d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:b0:92:d8:66:83:05:57:17:8b:4c:27:b5:
bb:01:5f:2c:ee:94:ad:c0:03:d6:c1:71:18:94:5a:
b8:e0:04:de:f9:46:07:f0:7e:d5:7d:a4:26:28:19:
ee:9a:86:cf:28:2a:17:e4:5b:aa:7d:83:3e:0c:d4:
7b:07:90:12:4a:3e:d0:16:e7:58:33:7c:2f:b9:60:
6a:7e:27:0c:eb:39:bc:a7:be:6a:7b:67:47:23:b7:
db:b9:31:39:c7:a6:59:c0:e3:08:11:89:3e:59:39:
d4:d0:e8:d0:75:83:0c:9e:a2:b5:18:37:ff:88:35:
e5:61:e9:d0:17:d9:11:26:c0:49:3e:07:9e:95:38:
38:42:bb:e1:eb:c9:71:c4:52:d7:8e:aa:3d:b9:1b:
2c:4f:8a:2d:bd:cb:b4:ac:2f:82:c6:30:f7:ef:11:
38:7a:d0:e2:81:40:f5:c7:e0:99:3d:9d:5e:00:b5:
cf:60:f8:cd:1c:a9:db:21:48:9c:c7:82:20:40:26:
7e:41:75:2d:7a:c7:7f:3d:55:de:25:f2:5d:e9:08:
54:24:46:c3:33:5a:d5:05:fa:80:e7:d8:d8:ca:ec:
fa:80:4c:94:ab:7a:6c:d2:01:1b:3a:20:38:af:59:
5d:b9:19:22:9f:da:1b:65:b9:bf:59:f4:d8:57:d1:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:29:E5:BB:66:BA:54:6E:FB:34:1A:4F:73:FB:A7:F2:18:DF:D3:73
X509v3 Authority Key Identifier:
keyid:73:45:D3:38:51:95:89:06:88:4D:87:16:40:A4:BE:D2:C8:46:D1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0XTOFGViQaITYcWQKS-0shG0U4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F3B6/59C4AD4A48BA11EFBD45163DC4F9AE02/c0XTOFGViQaITYcWQKS-0shG0U4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:bd:a3:b5:93:05:25:21:83:cb:42:cc:a0:80:fe:06:87:07:
bf:75:24:70:ed:68:b8:0a:b7:93:1c:8c:03:74:f2:77:77:34:
8b:56:9a:95:76:98:0f:8d:c7:91:a0:01:1b:d5:0f:c4:9d:8f:
29:77:6a:ff:b8:04:44:32:eb:b7:25:c9:0b:72:a2:44:47:84:
7f:d0:cd:82:8f:a0:64:a7:43:f8:1b:2b:f0:f3:86:de:af:4b:
1a:ed:42:f5:12:ce:19:83:ed:16:d9:8d:83:7e:6f:bf:33:e6:
00:dc:a6:57:ef:a4:d9:19:9e:4e:66:3f:16:cf:bd:25:89:fc:
14:f4:f8:df:c9:7c:3f:a7:33:b1:ca:7f:de:94:b7:31:f9:9f:
21:6f:1c:21:63:a9:b1:45:f9:9a:8b:20:0a:67:76:5b:bf:bf:
9d:58:67:52:06:2b:bd:b8:02:70:95:f1:98:ec:b9:5d:cd:53:
23:3a:df:75:8f:fb:84:01:5f:ae:b4:e1:7f:44:24:ae:cc:76:
79:68:bd:80:ac:58:8a:00:ec:6b:75:09:d4:2e:1a:34:c2:0c:
f1:6a:d4:21:de:c6:73:35:49:b2:aa:1a:67:75:36:e5:61:07:
00:50:83:c0:1d:d6:7c:6c:f5:4e:c5:ba:60:7a:f5:f4:79:39:
1b:52:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:11:24 2025 by rpki-client