This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json)
Hash identifier: Wn4fzWRNnwRG5tox3Q44DKdvZOxbpBpdzlv6+UCi1OI=
Subject key identifier: F9:B2:3D:F8:2E:75:FD:B7:3F:88:FD:AF:BC:C3:A9:19:6D:85:BE:33
Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Certificate serial: 0C2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
Manifest number: 0C22
Signing time: Mon 22 Dec 2025 18:20:12 +0000
Manifest this update: Mon 22 Dec 2025 18:20:11 +0000
Manifest next update: Mon 29 Dec 2025 18:20:11 +0000
Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: 9pIiXRpU3hTO24rqGM3RpK6qC4PLvFJ70ISNrJQ6Ab4=)
2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: hA+WjNUTeG1AnXZuvAjzzld8pq8Hs2wTD6vIEKRFdS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3118 (0xc2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31
Validity
Not Before: Dec 22 18:20:11 2025 GMT
Not After : Dec 29 18:20:11 2025 GMT
Subject: CN=69498bdb-1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:93:ed:67:c1:7f:ef:b5:45:10:9a:7b:02:
fa:c3:0f:99:98:86:26:82:31:a8:55:ee:bf:5f:41:
88:46:d5:8a:46:0c:e0:d7:60:3f:d2:23:63:fd:85:
60:0d:9e:3a:35:09:eb:43:96:64:fd:43:72:78:20:
04:da:bd:15:c3:1d:ce:b9:26:c4:10:9b:35:0a:1f:
d9:e3:9e:64:33:f7:3b:a7:48:09:03:e9:c8:25:96:
98:19:a1:03:3b:08:77:3a:cb:c6:e0:af:63:da:7b:
7a:67:34:02:ae:4d:28:ce:9d:fc:0c:94:0c:33:75:
a6:82:ed:86:9f:ed:ca:c4:29:6e:2e:bd:24:dc:36:
b7:a8:89:7c:52:5a:43:cd:0e:e5:e2:46:62:95:8c:
03:50:20:60:2a:c3:a0:08:3a:04:6b:90:3e:93:67:
ec:4a:39:9e:a7:3f:03:18:b0:7c:77:d1:02:67:94:
0f:a2:28:84:fe:95:f3:71:92:83:fe:32:06:77:87:
bb:fa:0d:4e:f4:c0:0a:89:65:b6:da:df:9e:e5:8c:
64:c1:06:0f:9f:00:da:47:75:f7:81:28:37:e0:85:
82:36:99:a4:36:95:3b:a5:51:99:74:01:17:98:65:
7c:a8:38:0e:38:3b:97:04:72:60:e0:17:52:18:20:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:3D:F8:2E:75:FD:B7:3F:88:FD:AF:BC:C3:A9:19:6D:85:BE:33
X509v3 Authority Key Identifier:
keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fb:0b:c8:2c:e3:56:ed:e2:86:4f:2e:e8:83:ea:70:b5:7b:
dc:8d:fe:a7:7b:cb:26:c2:a3:a0:8f:89:36:d0:31:01:2d:13:
bf:5b:46:ee:27:02:ea:32:6e:41:7d:01:d7:07:b5:e6:a6:b7:
26:47:72:8d:4c:db:fc:44:26:70:7d:77:47:ce:dc:20:ae:b3:
1c:fb:e2:4a:ab:62:aa:2a:58:78:00:a2:b6:03:8a:b4:8b:2b:
c1:60:a7:51:81:dd:85:25:c1:73:6f:dc:33:c9:f5:80:67:df:
e8:50:94:b2:cc:30:59:74:8a:b9:80:86:32:9d:39:2e:2b:0d:
00:dc:9d:9f:28:5a:ec:e4:ba:c9:a5:b2:ab:08:a4:e3:7e:41:
4c:74:57:60:da:11:b4:62:46:7d:25:76:2b:d4:23:61:5c:f5:
f5:0b:ad:90:ae:00:c6:e7:52:af:2f:a7:45:f5:61:6d:6d:13:
0b:4b:39:01:b7:90:5b:5f:c9:f4:e4:6f:a6:f1:bd:5d:91:8f:
fe:8f:d6:ba:4e:11:63:1d:67:24:e5:df:88:52:da:46:ff:23:
27:b7:33:fc:c9:df:c1:64:47:2e:4f:b2:d4:a4:89:c8:c8:87:
d8:e1:aa:c8:53:d9:e7:7a:10:82:70:24:3d:85:02:13:c9:54:
a3:7c:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:27:28 2025 by rpki-client