This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
File: AXJLovQFMrfgjXIPTAlmQbShyMQ.mft (raw, json)
Hash identifier: whDRTgHuGs0RJl4V1QXoajxkmPNmAvkK6P0n5hG4tmQ=
Subject key identifier: 0A:95:EC:0E:9B:67:69:60:05:CB:5A:43:8B:24:C1:9A:CB:91:9B:E8
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial: 054A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
Manifest number: 0545
Signing time: Mon 22 Dec 2025 22:33:45 +0000
Manifest this update: Mon 22 Dec 2025 22:33:45 +0000
Manifest next update: Mon 29 Dec 2025 22:33:45 +0000
Files and hashes: 1: AXJLovQFMrfgjXIPTAlmQbShyMQ.crl (hash: 6T0ebLcXzjJ0cHDB/B+CB/Id9Ft6zEYCD9DjvsqQ/KU=)
2: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (hash: gvY7yNXsc8f6BaNnDgo1s6r58BRk/opgVjfKstxIGuo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Validity
Not Before: Dec 22 22:33:45 2025 GMT
Not After : Dec 29 22:33:45 2025 GMT
Subject: CN=6949c749-2925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:ad:dc:1a:3c:df:85:a2:e9:94:5b:08:af:
3c:32:e5:85:11:72:91:80:9b:c1:30:20:bc:c5:56:
2a:c8:7a:34:60:c4:0c:e2:8d:52:a6:52:b0:e8:5d:
d5:22:c7:5a:13:2d:0f:4f:2e:26:50:c1:9d:6d:5c:
66:3f:9b:36:88:4b:86:c2:02:00:6d:c8:ce:c5:c4:
64:2e:32:ef:d0:2b:66:80:c4:b5:ec:de:b7:17:83:
66:39:13:57:ab:6b:fa:e4:10:7d:c5:8b:da:fa:60:
f8:bc:ee:15:0e:7a:a2:1b:35:5e:b6:6e:b7:ae:3c:
26:ba:76:81:40:4e:ef:1c:61:41:d7:4e:46:92:72:
c0:9f:ff:7c:4b:5b:78:ca:76:d5:d7:bf:e2:4b:2e:
e5:3b:9f:c1:00:27:49:20:2b:c0:75:02:f1:92:2b:
d8:9e:70:f2:a6:85:7f:8a:85:78:5d:68:50:3f:c8:
12:59:0a:05:6d:e9:d8:71:6b:0e:f1:b6:76:cd:2b:
0d:77:ff:1d:ad:33:e9:84:be:65:3a:78:00:e8:df:
a0:9b:b3:38:15:50:f9:26:25:91:18:cc:5b:0f:7a:
78:f8:4c:f0:9c:e9:2e:92:e6:d6:29:72:6b:b0:18:
43:40:4b:37:58:42:3d:00:7c:ec:1b:8b:33:ee:fd:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:EC:0E:9B:67:69:60:05:CB:5A:43:8B:24:C1:9A:CB:91:9B:E8
X509v3 Authority Key Identifier:
keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3e:c3:aa:40:25:71:41:52:20:ba:b8:f7:e7:e8:f3:00:39:
55:0c:b4:f4:cf:58:2f:27:f0:3f:f4:f2:4e:e8:7f:06:ea:b4:
4e:a5:fc:66:3d:20:fa:a9:aa:70:e5:58:53:4a:53:68:6f:cc:
ee:de:ec:11:b6:83:17:f1:40:e3:11:66:d0:15:b9:2b:b8:6c:
5c:50:65:70:19:4b:d1:09:6e:27:6d:b5:83:f3:79:28:23:1f:
da:88:76:51:17:63:03:73:b9:d5:37:aa:ce:b0:54:fd:60:ef:
dc:8d:b2:b4:8f:09:4d:f3:dd:59:63:a1:b1:63:98:a6:11:c2:
b7:d4:98:08:ef:f2:27:d5:fe:65:91:58:61:bd:50:7b:35:6a:
49:02:8a:af:bd:6e:c1:05:3a:c0:77:a6:b2:05:c3:67:92:6e:
94:4b:dd:af:f9:ca:bf:87:ae:53:31:b8:1a:85:35:0f:05:50:
4d:6f:15:b7:2a:6a:09:23:a6:55:0e:0d:9c:af:1b:1d:e8:e5:
28:ac:23:52:5a:ce:6f:b5:c6:59:af:84:f3:4a:b0:de:dc:6f:
04:53:a3:2d:db:e6:b1:41:1f:cb:02:f2:cb:df:93:ca:1c:ad:
98:97:29:e6:2b:45:8b:ef:af:bf:07:39:6e:ac:4e:72:33:75:
a4:d8:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:02 2025 by rpki-client