This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
File: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft (raw, json)
Hash identifier: Csr6oCJwMjBtAfxqFZdijW4gCw5lvmaEnEtMbxflOZw=
Subject key identifier: B4:1A:81:AF:D5:4A:7F:7E:84:D4:A9:A8:B1:72:31:01:B4:F7:E7:E4
Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Certificate serial: 013F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
Manifest number: 012F
Signing time: Tue 23 Dec 2025 03:46:58 +0000
Manifest this update: Tue 23 Dec 2025 03:46:57 +0000
Manifest next update: Tue 30 Dec 2025 03:46:57 +0000
Files and hashes: 1: rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl (hash: r+Tq6xoptKTILW0//L4GlOkyeSgoSKB07omYv7cGKk0=)
2: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (hash: /VsZS9ufttBO1fjkHbj0xKp60CqOiBgm395Efx5G+zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Validity
Not Before: Dec 23 03:46:57 2025 GMT
Not After : Dec 30 03:46:57 2025 GMT
Subject: CN=694a10b2-adb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:a6:22:72:c7:6b:33:81:77:cf:e9:a1:a7:
82:8d:d2:7a:d3:7f:f2:aa:a7:b0:3b:62:5b:8c:0f:
0e:9c:d8:81:21:0c:92:2b:fc:b8:6c:88:cf:4f:ef:
a5:0c:40:6d:26:30:6b:0e:23:27:91:bf:88:57:5f:
5d:c7:ce:41:60:8e:4c:a3:75:bd:c9:82:19:1e:35:
13:c1:fb:54:15:dd:84:61:2d:e3:2e:2d:e5:0e:fa:
f4:92:76:5d:b9:72:88:01:06:22:1d:13:3a:c5:1b:
4e:3d:92:1c:d4:2f:53:0c:54:ee:b0:92:34:dc:00:
28:16:e4:30:4a:3c:82:0d:ab:8b:88:df:76:be:84:
4a:5e:4c:8b:9e:78:f6:25:4d:ad:bb:5b:f3:f7:2e:
30:10:bb:c2:eb:1a:a0:60:43:0e:09:3c:62:79:b8:
89:42:d4:c9:a3:3b:1a:8e:39:5c:48:50:ef:d9:8a:
44:34:43:00:f8:54:b4:a5:95:47:11:08:4a:b1:0c:
e1:c2:be:69:55:18:eb:ab:7b:8e:c9:ae:da:b1:02:
04:e8:13:f4:14:ac:82:c0:ae:ec:d3:92:1e:a9:52:
69:8d:25:61:dd:f3:fa:84:7b:42:aa:f6:dd:3d:0f:
08:2d:3c:6f:f6:f6:a3:ac:01:93:d9:e6:f6:cc:48:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:81:AF:D5:4A:7F:7E:84:D4:A9:A8:B1:72:31:01:B4:F7:E7:E4
X509v3 Authority Key Identifier:
keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:e1:0d:70:dd:2e:c1:b0:15:e7:ca:6e:e4:45:42:17:5f:
3c:f0:e9:de:31:b2:c9:2a:58:be:0f:54:31:a6:b0:04:23:95:
5b:31:f5:c1:c5:7c:9b:ff:5c:36:33:0a:a0:88:1d:84:3b:fc:
fe:a0:95:9d:b4:23:17:fe:ab:1f:92:2b:b1:b2:61:b1:fa:85:
2f:6a:df:a9:f7:ac:bf:48:a8:61:08:c3:b2:c8:79:3a:b9:44:
19:86:80:9b:85:ef:3b:53:60:00:0e:fb:e7:c0:e0:8a:da:f0:
41:f4:42:df:50:73:3e:21:9a:b3:ef:96:88:50:6a:90:46:a9:
0f:67:89:3d:4c:7f:fd:70:b1:cb:5e:f1:77:ba:c9:af:9f:92:
fc:aa:ee:3c:cb:e5:7e:59:16:1c:b1:cb:0f:09:a9:b4:f6:e7:
10:99:b1:6e:fa:80:ef:a4:89:87:c9:dd:91:9d:b8:83:bb:5b:
ad:14:19:64:a1:2c:8c:13:87:bd:ed:ee:ee:9e:88:87:d1:c8:
45:0c:0f:bb:2d:f4:24:dc:a1:2c:2f:0e:7d:7d:bc:77:77:40:
80:94:a6:1e:63:1e:cb:2d:58:8f:a4:4f:f9:ea:74:ea:ef:c9:
29:3a:0f:c7:01:7b:90:a4:f6:76:53:2e:2a:0a:10:0e:f9:cc:
06:51:2a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:35:37 2025 by rpki-client