This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
File: aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft (raw, json)
Hash identifier: D8mXrXCvt1tVJ4dLfSzlh/nseZ9idDL+VUthwl34QDE=
Subject key identifier: 61:4A:26:64:C7:2E:5D:B9:92:31:FE:EC:E3:7C:E4:8F:FF:89:3E:32
Authority key identifier: 68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
Certificate issuer: /CN=A913B243/serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Certificate serial: 13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
Manifest number: 12
Signing time: Sun 07 Dec 2025 05:54:28 +0000
Manifest this update: Sun 07 Dec 2025 05:54:27 +0000
Manifest next update: Sun 14 Dec 2025 05:54:27 +0000
Files and hashes: 1: aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl (hash: bZkdqOLBQz9Au+E4DluLS0r2eWklNK03sFhjgL/5JG0=)
2: F800618EBBA511F0B0EA597FC4F9AE02.roa (hash: Yw6c7WUM5QYHlwQT+zvf4O1cT4XiBTAyty4UdU8rvsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B243, serialNumber=687FBA20E2F78917E0FB03B912B8C85637C5373D
Validity
Not Before: Dec 7 05:54:27 2025 GMT
Not After : Dec 14 05:54:27 2025 GMT
Subject: CN=69351694-f069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:8c:ca:e2:60:fe:7d:2e:72:1a:d5:d0:ba:
4e:78:87:89:2e:7f:4f:49:f9:2b:a1:a2:44:e3:09:
4f:d8:d9:b2:6f:b8:da:2f:97:d9:50:94:a8:f1:06:
ce:c9:54:be:a9:53:f2:ac:6b:61:b0:71:1d:84:10:
50:9c:80:fb:57:4d:54:ec:9d:00:9e:65:99:a4:69:
16:e2:78:91:c0:82:42:ce:a4:63:14:bc:6c:98:59:
72:c2:33:dc:eb:45:67:e3:f9:85:26:01:45:1d:68:
cc:3f:49:8b:d3:c5:ad:f9:29:21:52:05:ec:c8:00:
df:09:a6:45:94:65:fb:9b:94:cb:da:7c:ac:4b:b5:
66:77:63:61:7b:e4:ec:25:f8:df:b7:b3:fe:5a:6d:
88:12:ed:5f:ca:1a:c5:d6:a5:77:ae:99:40:31:53:
e0:cc:37:19:92:4e:ad:b2:80:4b:b6:df:f9:3b:86:
18:6f:2f:b1:13:24:60:e9:a4:fd:92:5a:30:b8:34:
bd:fe:8d:06:f2:33:3b:95:ce:08:51:fc:bb:cc:6f:
70:04:1b:85:8c:6e:1d:bd:c1:fa:80:04:84:08:3c:
46:1e:f4:ca:5b:4a:d8:e2:02:f7:91:cf:2f:76:ab:
bb:5f:ce:ce:cc:f1:32:88:24:35:78:87:9d:dd:2f:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4A:26:64:C7:2E:5D:B9:92:31:FE:EC:E3:7C:E4:8F:FF:89:3E:32
X509v3 Authority Key Identifier:
keyid:68:7F:BA:20:E2:F7:89:17:E0:FB:03:B9:12:B8:C8:56:37:C5:37:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aH-6IOL3iRfg-wO5ErjIVjfFNz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B243/A9A753A0BB9911F0B5FB696AC4F9AE02/aH-6IOL3iRfg-wO5ErjIVjfFNz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f6:24:53:20:46:6d:2b:cb:db:2e:c0:c1:03:b2:83:a1:53:
5f:bb:74:28:81:db:4d:e0:c1:51:04:42:1d:50:96:5c:66:b4:
81:2e:ab:95:c1:1b:c8:89:00:cc:68:d3:ae:41:10:3c:53:b3:
8f:65:ec:d3:80:59:5a:49:f3:ca:05:43:32:31:9b:70:fc:05:
8f:e2:1c:0f:98:6d:38:87:14:3a:1f:74:45:ed:4f:5c:61:89:
c6:7e:7f:bd:c6:ae:2f:9c:48:8c:e2:85:46:d4:1a:27:c3:d1:
03:0e:86:80:39:34:17:5c:c6:68:ff:de:99:7c:16:89:d2:04:
27:27:ae:60:93:e8:39:42:0f:ee:d3:36:8b:ba:27:f1:42:09:
92:d0:0b:9d:02:85:9a:36:c8:82:67:d0:75:c7:d9:d8:09:11:
87:2b:98:9c:61:9b:c5:f2:8b:38:50:06:a2:5d:ee:06:10:72:
7a:fa:d0:8e:3f:35:05:6c:46:67:a8:69:22:1d:59:61:71:4a:
c5:0a:1d:fe:e2:25:c1:ba:f6:3e:b6:40:df:0e:b3:c4:9b:ce:
ee:18:d9:6d:1f:0b:41:bb:f3:f5:0f:02:ed:cf:13:3f:c9:7f:
24:fc:a8:bc:3a:14:b8:85:ed:51:06:59:db:39:24:b1:9a:fc:
42:7c:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 05:57:43 2025 by rpki-client