This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier: FhTyGBhvhLb2TzhZ8XnW1EFHziWm2xqqE1bQzrrHJRw=
Subject key identifier: A5:C0:68:28:8F:4B:59:59:74:4E:E7:22:E2:7A:BC:05:F9:29:19:FC
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number: 01B0
Signing time: Tue 23 Dec 2025 02:09:32 +0000
Manifest this update: Tue 23 Dec 2025 02:09:31 +0000
Manifest next update: Tue 30 Dec 2025 02:09:31 +0000
Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: Tr//wkry8nbw2KJUqXL1IeZFUXBoYbcX3ZYmsCqvSCk=)
2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Dec 23 02:09:31 2025 GMT
Not After : Dec 30 02:09:31 2025 GMT
Subject: CN=6949f9dc-edd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3a:33:58:09:7d:69:9a:18:8a:5b:14:0a:6b:
22:87:fb:5d:81:36:0a:2e:6f:4c:0d:19:54:72:8e:
fc:3f:86:54:74:d1:13:59:be:59:18:ea:56:78:13:
15:f0:65:1e:e7:20:7d:c2:16:32:2d:f3:77:f2:fb:
8d:26:aa:7c:1f:1a:66:a1:da:b7:de:c9:f0:7b:eb:
05:f0:59:1b:d6:7d:3f:50:19:0f:fe:b1:2d:c6:2d:
36:a1:a3:1a:f3:c8:44:76:cc:7a:33:c8:6e:a5:40:
16:0a:ae:f3:ee:34:fe:1a:ba:3a:91:29:7d:27:d2:
2f:28:2b:fb:4e:0c:18:02:60:1a:f6:c9:cc:a6:39:
d4:e2:f4:bd:e9:c2:c7:04:1c:e9:d2:2c:de:38:7e:
af:37:f1:1a:dc:23:67:c6:ae:97:a4:f3:73:d2:0e:
a4:88:80:c1:bf:5e:02:44:f9:b0:c2:42:e9:c7:b4:
39:78:b2:8b:3d:59:df:99:ea:ac:1a:b9:44:f7:4d:
7d:60:2e:83:8d:83:4f:96:74:09:81:8d:b3:d7:09:
2f:8a:e4:4e:73:79:07:14:a2:66:e4:1d:cf:e1:62:
21:ed:54:0f:12:10:1c:d5:74:01:9f:4d:a6:19:fe:
ac:77:bc:c7:6c:48:70:e0:e2:00:b2:c4:e4:dd:24:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:68:28:8F:4B:59:59:74:4E:E7:22:E2:7A:BC:05:F9:29:19:FC
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:24:d8:39:a7:36:44:7a:e6:07:d3:5a:09:c6:01:07:50:0e:
90:01:ea:39:47:39:63:a5:36:96:6e:fb:5a:1a:e7:db:e6:97:
34:58:a1:e2:a6:82:03:2e:74:ea:cd:e6:68:ee:84:f0:97:0d:
6c:a0:39:8e:1a:88:d2:f4:ba:fb:0c:bf:70:c9:30:bf:1b:37:
2a:4e:4b:2f:20:b8:d3:0e:f6:98:14:aa:b7:a3:9e:5e:d7:69:
54:26:8b:33:fb:5c:2a:74:dc:40:14:7b:1e:99:60:21:de:39:
18:89:ce:0e:37:3c:7e:37:66:41:78:44:dc:81:b0:bd:7d:bb:
9c:c9:4a:82:7d:a7:c6:c4:7c:a0:cc:71:82:f6:c4:d6:9d:32:
36:19:61:57:4c:96:93:06:bb:e8:33:c0:e0:78:88:fe:04:e6:
06:4a:28:3e:1b:92:ae:1f:62:79:dd:3b:83:67:a4:4a:91:5e:
4a:bf:92:98:ee:de:21:08:db:8e:e2:a9:12:15:0b:fe:96:39:
74:fc:4c:e5:8a:ae:76:5b:1f:aa:17:aa:7e:37:db:75:a2:69:
7e:44:08:31:5a:1a:a6:1e:98:16:5b:81:cd:4f:bc:27:3f:3b:
60:06:9e:74:c2:a1:40:3d:67:83:9f:f1:43:a7:50:53:d2:e9:
ca:6a:ff:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:31 2025 by rpki-client