This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
File: xGxDuid9LBDufR7_PfDi78iFGh0.mft (raw, json)
Hash identifier: 6oUJQlC+wCKNqgQdlRMEeOHkwuDLpIacuGWyLWqWnYo=
Subject key identifier: A9:95:5A:94:E7:DB:55:53:BB:58:2D:7A:16:23:09:9B:6D:F3:26:33
Authority key identifier: C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
Certificate issuer: /CN=A913638A/serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
Manifest number: DA
Signing time: Tue 23 Dec 2025 04:35:37 +0000
Manifest this update: Tue 23 Dec 2025 04:35:37 +0000
Manifest next update: Tue 30 Dec 2025 04:35:37 +0000
Files and hashes: 1: xGxDuid9LBDufR7_PfDi78iFGh0.crl (hash: jYT4k6YF9KasXbBE3JtYoPSek8IQy3B2f+fqWDRhgm8=)
2: 9D7ED59A954711EF9830412DC4F9AE02.roa (hash: ijUv0+puTZ+N4j9fhEKBY9wHAWPDCsnAi/IUGHnumK4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913638A, serialNumber=C46C43BA277D2C10EE7D1EFF3DF0E2EFC8851A1D
Validity
Not Before: Dec 23 04:35:37 2025 GMT
Not After : Dec 30 04:35:37 2025 GMT
Subject: CN=694a1c19-138e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:ad:d9:58:96:30:ec:3b:29:d9:4b:fc:9e:
b3:de:c8:0f:11:b7:c8:2d:2c:54:b2:ea:ab:f9:3d:
27:98:19:64:04:3a:73:75:64:47:82:b8:bb:f5:c7:
34:21:62:71:97:62:e2:5b:d5:cb:11:57:1e:b3:42:
93:58:53:ce:f6:80:97:53:73:02:64:38:65:1d:f1:
1f:5b:99:8e:de:3d:a4:9c:57:8c:09:fd:59:a9:84:
92:5f:0e:48:47:79:6d:ea:ec:8a:ff:87:38:7c:78:
91:2b:24:e5:eb:93:37:f8:d5:9c:d8:1d:aa:d9:07:
a6:dd:e3:78:5f:81:f4:21:32:d1:1b:99:bc:86:d6:
da:25:71:6c:c0:78:d7:f2:17:1b:a9:c5:f0:4f:d0:
29:25:b5:f6:4d:a9:d7:db:e3:56:c8:24:02:c5:8f:
53:d2:f5:88:12:25:6b:b5:63:d6:30:a4:5c:24:22:
f5:6e:28:7e:93:c3:b6:3c:3b:70:2e:df:4c:f0:b9:
3b:0f:f6:89:c5:42:7d:aa:84:28:08:af:be:e4:9d:
07:f4:c2:02:9c:22:36:2c:e4:a8:08:c5:85:90:26:
45:34:49:67:f3:c7:01:f9:be:2c:5e:31:bb:e4:cf:
58:42:e8:08:a8:95:c1:e5:ea:ef:cf:0e:6e:ce:22:
b2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:5A:94:E7:DB:55:53:BB:58:2D:7A:16:23:09:9B:6D:F3:26:33
X509v3 Authority Key Identifier:
keyid:C4:6C:43:BA:27:7D:2C:10:EE:7D:1E:FF:3D:F0:E2:EF:C8:85:1A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGxDuid9LBDufR7_PfDi78iFGh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913638A/5BDD2CAE954711EF96808F2CC4F9AE02/xGxDuid9LBDufR7_PfDi78iFGh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:43:c0:b9:40:d7:81:a6:6a:3e:f7:33:37:aa:b6:38:dc:
b3:df:f2:12:f3:49:20:cb:0f:75:f3:5a:fd:5a:3d:a0:57:06:
00:ed:c5:af:e2:0c:42:67:8d:bc:8a:c1:89:b2:53:31:00:a5:
54:9f:29:2f:3f:b5:46:13:f1:ca:e2:79:94:86:48:ae:ec:25:
7c:23:06:f8:06:f6:47:0d:67:23:5a:ac:98:44:dc:49:4e:59:
18:7f:9d:c5:61:fa:09:95:0b:1b:28:e9:8f:28:06:79:6a:da:
fe:d9:65:d9:b3:83:6e:cd:ca:4f:b3:0e:5c:85:0f:32:37:d2:
11:ce:0e:16:2c:bf:10:24:0f:56:47:91:3a:0c:43:c5:e2:68:
53:c3:91:5a:1b:a5:0d:ea:d7:3b:d5:84:a0:c9:47:48:f8:49:
d1:2e:23:59:bb:ae:46:7f:c3:dc:2d:09:ad:16:b8:ba:e9:9b:
95:64:04:5c:ea:d2:25:8f:ef:dd:fc:23:74:b9:22:59:14:45:
1f:ac:c7:a5:7f:17:b4:1e:df:28:1a:d3:21:37:74:5c:42:9b:
99:56:c2:c2:28:72:9c:c5:76:25:90:92:53:a5:76:4e:0d:01:
be:78:29:c3:77:c2:48:ef:3c:31:bd:2d:03:2f:ad:97:59:12:
07:38:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:40 2025 by rpki-client