This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
File: -1rPvPn87wNLipO9MZ5iBELWZn8.mft (raw, json)
Hash identifier: 014X9z/ldXEIdTUPCruTy5SgihnjNoYfoq9LfHiyVNA=
Subject key identifier: 2C:27:71:9C:57:6B:EE:E6:D1:60:59:4F:59:24:94:F8:0B:55:CE:3E
Authority key identifier: FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F
Certificate issuer: /CN=A912F515/serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
Manifest number: F1
Signing time: Tue 23 Dec 2025 04:19:32 +0000
Manifest this update: Tue 23 Dec 2025 04:19:31 +0000
Manifest next update: Tue 30 Dec 2025 04:19:31 +0000
Files and hashes: 1: -1rPvPn87wNLipO9MZ5iBELWZn8.crl (hash: 9/Lqn8i3KCV0DfF1Q2NplKA+0tW2bmgNP/YvKxZwCaI=)
2: 6A8E3C9474A811EFA3123A41C4F9AE02.roa (hash: 3DRrxdG8LfKAYdtHGcco//4+Q6X+ndXhUkgJbiWj/MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl
rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F515, serialNumber=FB5ACFBCF9FCEF034B8A93BD319E620442D6667F
Validity
Not Before: Dec 23 04:19:31 2025 GMT
Not After : Dec 30 04:19:31 2025 GMT
Subject: CN=694a1854-0fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ac:1e:8a:73:24:80:26:fe:d2:85:28:79:a7:
39:8f:df:71:94:f6:8d:cf:28:25:1a:cc:c4:63:7f:
41:5a:31:cd:3d:2a:46:98:56:d7:9c:c9:bc:a7:45:
f9:eb:56:3e:24:dc:18:61:b1:a2:bd:59:3b:d6:62:
fc:d3:d8:28:b7:24:e7:c8:e6:3c:9d:08:25:c6:00:
14:7e:ea:12:4c:f1:0e:4a:ff:b3:e8:e6:6c:b9:4f:
92:4d:95:d1:7f:5f:35:60:f1:50:93:e9:b3:cb:dc:
f1:76:f5:48:6b:a3:4a:2f:c8:80:69:e5:d6:e4:d5:
2e:67:e8:72:d0:72:2a:c5:52:17:d0:7d:bc:46:ec:
65:9d:31:26:0e:5c:98:ac:32:0d:37:d9:f7:e6:23:
75:92:7a:49:f1:69:f5:9d:67:bb:43:31:f6:f7:ba:
0a:eb:da:5f:f7:82:38:4d:5c:e6:5d:2e:d8:1c:41:
45:12:33:35:9d:09:09:17:25:3b:1e:4e:a0:64:2d:
f7:a0:a0:0a:5c:d2:e2:25:98:06:0d:2f:ea:ef:91:
0c:af:5c:78:00:20:26:7f:f5:c0:08:c8:12:7c:97:
90:fb:59:9d:9e:d0:81:23:1e:b1:12:eb:80:82:a7:
7a:d1:22:5e:93:32:f5:b8:fa:60:50:d2:9a:2e:c6:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:27:71:9C:57:6B:EE:E6:D1:60:59:4F:59:24:94:F8:0B:55:CE:3E
X509v3 Authority Key Identifier:
keyid:FB:5A:CF:BC:F9:FC:EF:03:4B:8A:93:BD:31:9E:62:04:42:D6:66:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1rPvPn87wNLipO9MZ5iBELWZn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F515/3D3CA30874A711EF8EA2C53DC4F9AE02/-1rPvPn87wNLipO9MZ5iBELWZn8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
f1:c9:53:ea:3d:41:bf:06:00:03:c3:e0:9f:73:c8:cf:a6:4b:
ae:49:fe:8c:24:5f:ff:5d:b0:f6:de:86:7d:84:1d:85:49:b9:
4c:17:28:48:63:1c:45:23:c7:ab:0c:61:a1:1d:7b:ce:e2:0c:
bf:b0:32:0a:1f:c2:76:9d:5b:3a:9b:c0:6c:f8:2c:79:62:e6:
d8:e2:5f:02:3e:80:45:98:92:65:ef:65:bb:4b:ba:76:27:57:
b2:84:e4:ff:b7:65:ae:8c:15:38:8a:59:3b:3f:97:c5:85:01:
12:79:67:74:c3:94:9b:f1:2d:ba:89:db:98:3f:0b:1b:51:21:
ea:2b:4b:3b:03:f4:d4:70:f9:73:a3:ca:4a:96:24:ec:d7:80:
47:97:0d:ad:81:bd:fa:07:89:3a:f0:66:9d:cb:bb:f4:b1:4d:
d3:ce:74:2f:de:22:a7:a4:e2:09:bb:50:e8:cf:cf:ce:cc:1b:
fa:e1:6d:5e:84:3a:a7:a1:32:9c:75:9e:bf:98:8f:d5:b1:5c:
8a:fd:9d:57:54:c1:2c:e0:ad:d4:46:dd:fe:49:d6:59:23:1b:
60:e4:44:e3:85:75:15:0a:6a:52:7a:70:24:e1:fd:43:fe:24:
b1:56:0f:24:c1:31:17:28:84:3c:6b:7b:86:05:63:a7:e8:53:
4f:49:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 19:46:00 2025 by rpki-client