This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
File: -lmybsZZeADDV53XBz-ktoWnwtI.mft (raw, json)
Hash identifier: BDzRD0LVBiyVKNIDfNylIwEQuTscTEXHTTPQ4elGigU=
Subject key identifier: 60:71:8B:E9:CE:E6:52:3D:0A:7A:0B:52:EB:18:5E:05:35:EE:17:E7
Authority key identifier: FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
Certificate issuer: /CN=A9131B38/serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Certificate serial: 0457
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
Manifest number: 0451
Signing time: Mon 22 Dec 2025 23:14:42 +0000
Manifest this update: Mon 22 Dec 2025 23:14:41 +0000
Manifest next update: Mon 29 Dec 2025 23:14:41 +0000
Files and hashes: 1: -lmybsZZeADDV53XBz-ktoWnwtI.crl (hash: oappsJ7mFJihDPtGW/Y1hFKr4pXCBwmeRllINAhDojo=)
2: 445C8236B69311EC9650A57CC4F9AE02.roa (hash: /iDRAphVdSgU2e36vGmGSufKHFaLvSp39p6b7uKMJro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1111 (0x457)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131B38, serialNumber=FA59B26EC6597800C3579DD7073FA4B685A7C2D2
Validity
Not Before: Dec 22 23:14:41 2025 GMT
Not After : Dec 29 23:14:41 2025 GMT
Subject: CN=6949d0e1-a23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:81:78:4c:50:20:23:1c:06:03:68:f7:8b:
52:05:45:8c:19:75:5d:80:27:9a:65:6d:b1:14:58:
bb:84:f1:27:a7:fd:9e:06:52:95:33:35:31:2c:72:
10:e6:c0:c5:7c:dc:c0:ac:ee:dc:eb:e3:14:28:3d:
e2:00:23:14:ab:59:fc:c0:67:93:27:da:4a:2d:0a:
e0:82:60:e4:21:81:2e:b3:ed:4d:8b:62:25:c0:05:
b9:34:df:16:8e:00:75:9b:fd:aa:fc:28:62:bd:64:
3a:90:4b:bf:e2:27:eb:4a:67:13:b0:02:e5:85:df:
db:35:ab:98:fa:7c:a4:3a:18:f9:3d:17:58:ea:c3:
71:19:26:67:63:f4:9a:b0:c7:91:f4:9e:b5:18:b4:
5c:bc:b6:46:f2:32:36:30:c5:13:f2:55:18:bb:e1:
47:f2:b9:2e:eb:8a:28:54:6b:b0:af:cd:d9:8a:be:
cf:28:61:b2:99:45:c4:c3:f8:d2:1a:84:51:7f:6f:
a0:dd:ae:05:db:49:94:d1:2a:88:41:ff:27:6e:73:
b6:41:a6:9d:13:26:28:d9:5e:02:07:69:b0:d6:73:
e3:f8:55:41:ac:b8:ed:ac:83:12:97:53:6d:66:eb:
7c:70:e0:2b:9e:85:3c:16:8d:29:94:0f:9a:0e:d2:
f2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:71:8B:E9:CE:E6:52:3D:0A:7A:0B:52:EB:18:5E:05:35:EE:17:E7
X509v3 Authority Key Identifier:
keyid:FA:59:B2:6E:C6:59:78:00:C3:57:9D:D7:07:3F:A4:B6:85:A7:C2:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-lmybsZZeADDV53XBz-ktoWnwtI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B38/2DF544547D0B11ECBA239433C4F9AE02/-lmybsZZeADDV53XBz-ktoWnwtI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0b:42:c2:bf:66:70:0e:81:21:fe:13:de:8d:8f:ad:5e:c4:
b0:89:8b:6f:51:21:f9:c9:db:bb:db:7e:79:47:cb:0d:3c:63:
e4:47:5c:e3:de:05:ca:65:98:91:20:c8:9d:80:02:b8:88:1e:
cf:a0:c8:55:33:b4:1e:05:20:cc:f6:c6:8e:48:e7:7c:ea:e9:
a9:a1:38:ea:53:54:62:e7:5d:40:6e:21:d0:cd:a5:12:3a:a0:
a1:e1:a1:34:31:ad:d7:29:c1:02:c9:84:91:af:ad:65:e7:6e:
4e:31:02:b6:cb:aa:5a:25:82:a6:87:31:83:5b:34:57:3c:71:
34:b9:a4:b8:f6:98:7e:f5:c4:d6:2a:35:b4:f1:33:c1:b7:15:
3c:68:aa:32:b0:ba:89:e8:85:35:d1:68:cf:d7:fd:ce:4d:f3:
1a:12:3a:16:14:dd:36:c2:e1:6d:29:f9:98:cb:21:85:60:30:
8e:8b:12:84:22:5b:e1:2a:e7:d9:34:19:c3:c1:26:aa:48:ac:
2d:0d:41:1d:77:70:ae:e4:f6:dc:f4:1d:27:f2:b3:84:04:28:
d3:e7:f5:62:b7:46:5e:13:1d:73:36:cf:cc:5e:af:65:b3:5a:
87:f5:b4:78:4b:68:48:b3:00:1b:11:9e:da:4f:22:91:b0:ec:
e2:f7:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:12 2025 by rpki-client