This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json)
Hash identifier: TDOGspGVC4BZah2ryzqeB/HFA9r3ixEm7xShy7prPXg=
Subject key identifier: C5:93:9A:E3:92:6D:6E:A7:C9:3D:27:08:65:19:9E:0C:9B:A9:5A:BA
Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
Manifest number: D3
Signing time: Tue 23 Dec 2025 04:39:13 +0000
Manifest this update: Tue 23 Dec 2025 04:39:13 +0000
Manifest next update: Tue 30 Dec 2025 04:39:13 +0000
Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: GgCnVLNoy1Qr6Zm0xmL+SWeEfrBlQOdnVEN2SCO0qok=)
2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: 5WrzMYaUrL3FPrZPq0ysO7bbUxzHeHkTODk3iwC0/rs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327
Validity
Not Before: Dec 23 04:39:13 2025 GMT
Not After : Dec 30 04:39:13 2025 GMT
Subject: CN=694a1cf1-3eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:6d:b9:38:38:8b:1e:7b:a9:0f:8c:be:bc:
38:26:d6:33:c4:ee:da:61:af:45:2b:fe:72:f8:92:
ed:f4:aa:5f:8f:24:c3:09:59:3f:29:9d:23:79:69:
c7:50:ef:da:6a:c2:8e:6c:b9:8c:28:d7:8c:be:fc:
8c:a1:b4:2c:2d:90:13:dd:9f:f8:79:00:28:97:f8:
f7:a0:51:56:0c:90:1f:4d:13:73:1f:6e:cd:41:08:
26:c3:48:df:3c:52:0b:11:75:d2:1e:9d:91:af:b1:
24:89:20:30:cd:f9:96:5d:42:55:64:18:e6:40:2e:
0e:51:02:02:c5:d3:45:de:e5:04:86:29:b2:ce:e1:
d2:98:2d:fb:37:97:8b:f7:f3:50:3c:12:7a:f8:f7:
fd:80:df:6a:6d:77:b8:aa:2a:09:17:7d:e3:e3:e7:
7d:03:d4:19:4c:f9:9d:ea:5a:43:85:9a:1e:79:40:
cb:55:13:90:42:78:45:0c:a4:76:1a:7c:c0:83:46:
97:be:d1:c8:d4:4d:4e:78:5c:4d:6f:ea:69:c7:b3:
3e:a0:92:01:00:19:bb:5b:f9:6d:30:b3:e6:db:bf:
07:f3:d9:87:e0:1b:04:bd:21:15:6c:15:ae:60:98:
18:bb:e7:fb:33:31:25:7d:c7:db:9f:89:5c:01:40:
a4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:9A:E3:92:6D:6E:A7:C9:3D:27:08:65:19:9E:0C:9B:A9:5A:BA
X509v3 Authority Key Identifier:
keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:42:b1:48:ee:3e:f2:b2:03:30:05:fc:6d:4d:74:1f:79:4d:
a2:66:46:b0:08:99:1f:1a:6d:50:e2:4d:33:a5:ce:6a:da:fc:
5d:ee:c1:f0:0c:a7:ac:0e:3e:89:ee:e0:1f:77:30:31:76:12:
5b:c9:20:b5:70:b4:b1:3b:c4:69:92:2b:57:2d:37:6d:71:47:
aa:7f:e8:8b:fb:c3:6d:fb:1e:33:3e:c9:70:fe:52:e2:a6:b9:
a2:35:7a:f5:41:13:a6:23:c9:12:a7:38:8c:d3:00:62:8b:83:
40:5a:e3:94:80:05:30:09:de:13:6b:84:62:bc:a0:2e:25:3d:
43:db:a2:78:7a:a7:03:40:9e:b6:a5:5d:fe:06:41:0c:ad:87:
57:c2:52:7f:8d:94:85:70:7d:bf:7e:62:49:a4:d9:41:7f:9f:
13:29:fe:e4:f5:60:7b:23:a2:52:2c:d9:ae:27:ef:df:46:18:
4b:48:63:e6:46:b7:3a:c5:30:ac:33:a5:8b:90:ce:57:91:84:
55:df:4c:0a:d3:7d:63:f2:eb:f1:55:17:35:95:8d:dc:13:ed:
59:2a:ed:81:c3:b7:4d:bd:b6:c5:d9:38:5f:3c:47:f5:7d:d8:
af:30:31:10:0e:10:47:54:77:e8:a2:c7:f9:14:9e:6d:c3:b6:
03:d4:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:05:30 2025 by rpki-client