This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
File: 7fcsXLhSsiwvD1JSESKNRQej-cI.mft (raw, json)
Hash identifier: ITUkN9n1BwuwOZ9A1Fo3YZWkkw/7ekrPrhwAJeNsjT0=
Subject key identifier: 83:B7:8D:BE:23:46:52:87:C5:ED:51:44:38:E2:30:6E:25:71:86:34
Authority key identifier: ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
Certificate issuer: /CN=A9130CD3/serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
Manifest number: 0804
Signing time: Tue 16 Dec 2025 20:34:33 +0000
Manifest this update: Tue 16 Dec 2025 20:34:32 +0000
Manifest next update: Tue 23 Dec 2025 20:34:32 +0000
Files and hashes: 1: 7fcsXLhSsiwvD1JSESKNRQej-cI.crl (hash: GIIrculfW8EGRkZnQvXz/RB/krWpmeeHl4NBaXCo45s=)
2: FACAB78805DA11EB9E484F71C4F9AE02.roa (hash: a2mvDw9+17HnzgD52FVNiOdxSzmsbcWIVBVCcOw0u9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 20:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130CD3, serialNumber=EDF72C5CB852B22C2F0F525211228D4507A3F9C2
Validity
Not Before: Dec 16 20:34:32 2025 GMT
Not After : Dec 23 20:34:32 2025 GMT
Subject: CN=6941c259-b394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:48:14:0a:14:60:47:ba:bf:08:29:6b:6a:
12:64:ae:7d:36:09:a3:55:2f:bd:3a:1f:78:6d:11:
a7:e5:c7:10:c9:37:22:fa:40:ac:1e:99:42:79:01:
0d:3a:fd:b2:80:f2:8f:a9:3b:d4:be:df:77:d5:bd:
de:9e:c1:99:a7:e0:db:cd:35:e9:1f:8e:a4:31:39:
82:fe:7c:e8:96:99:29:a3:85:73:03:91:cf:e9:cf:
64:29:8e:ed:a6:04:d8:74:e9:44:73:b0:44:08:4e:
5a:c5:5b:0c:92:a7:8b:c2:28:ba:23:d4:19:3e:93:
97:58:fd:0a:90:52:a6:7f:8e:9b:ae:c8:f2:c5:7c:
24:06:2b:8f:5f:54:47:50:9c:a8:b7:65:7e:15:ab:
99:fb:bd:9a:e4:90:0f:fe:10:b4:ed:7e:4a:b4:e4:
1a:dd:9c:11:3a:8d:7a:c9:89:00:75:74:13:9b:e5:
dc:68:3d:74:1b:11:f9:7f:b0:1b:9c:4b:10:e4:8f:
89:f8:d1:3c:78:52:c2:62:ab:41:11:b8:a5:f8:7a:
ac:99:4d:60:1d:e8:a0:8a:77:1d:a7:ed:89:b5:fc:
f0:36:2d:9c:d7:86:1a:13:32:f3:5c:19:78:d6:72:
a0:44:46:54:d9:31:af:9d:93:20:37:e0:c3:77:a9:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B7:8D:BE:23:46:52:87:C5:ED:51:44:38:E2:30:6E:25:71:86:34
X509v3 Authority Key Identifier:
keyid:ED:F7:2C:5C:B8:52:B2:2C:2F:0F:52:52:11:22:8D:45:07:A3:F9:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7fcsXLhSsiwvD1JSESKNRQej-cI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130CD3/9F930DB205D911EBAFF94970C4F9AE02/7fcsXLhSsiwvD1JSESKNRQej-cI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ac:22:d1:b0:6f:0c:ec:c1:3d:a8:ce:16:1a:89:44:cc:e2:
2a:b5:30:31:60:35:d9:b8:d7:ae:f5:51:65:f0:09:b7:27:54:
c8:88:5b:79:e0:c1:ab:7c:8d:f0:da:0f:58:7c:13:ad:e7:98:
d8:d5:97:10:78:21:5d:1c:3a:57:00:31:44:05:ac:af:08:09:
44:ff:60:e4:f4:3e:30:e6:90:d7:49:8e:d9:87:fa:dd:46:89:
0c:e5:b7:df:d1:ae:c0:3f:00:90:ac:62:9c:75:ce:b4:7e:35:
90:2e:1b:1c:aa:69:17:7b:6a:cb:2e:05:34:77:da:90:44:22:
42:1e:a5:2d:24:07:89:5f:22:ea:28:1e:c1:2a:f8:65:05:d5:
d7:3b:5c:db:3c:5a:6d:be:a8:eb:8e:1b:a0:ea:e8:e2:92:9c:
38:5e:30:d6:ef:57:96:e8:9a:74:f7:27:08:3c:63:34:97:e8:
bf:5e:e7:a3:37:9a:ad:2a:fe:82:86:cd:99:6b:27:f0:67:af:
76:b7:a5:70:0d:a3:b6:cf:7d:6a:15:a3:b8:87:a7:c4:3d:c7:
7a:07:1b:03:69:2d:6c:74:cc:3d:aa:41:eb:1b:7d:9d:68:b7:
24:af:38:d9:8b:24:3e:3a:72:2f:c7:dd:79:c1:7a:3d:e7:6d:
76:dc:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 19:10:05 2025 by rpki-client