This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json)
Hash identifier: KrjPfs/ivHVY6jPIQNOsxq7B+JaN6rh5tUnDhyFOBHc=
Subject key identifier: 93:8F:A5:AE:9D:90:47:C2:7B:3E:E1:2D:43:23:FE:87:D6:6B:4A:38
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 1081
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
Manifest number: 1043
Signing time: Wed 10 Dec 2025 16:53:47 +0000
Manifest this update: Wed 10 Dec 2025 16:53:46 +0000
Manifest next update: Wed 17 Dec 2025 16:53:46 +0000
Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: 0FEQzVBLNLoj5MolX+P52FsUl+sQVJmUn4dz/6U6oJo=)
2: C1313974CD3611F0AF85B537C4F9AE02.roa (hash: ppc/7vtWbXh6lIBiWqey83fiaRTt71rWU/oO4/Z9TxE=)
3: 8030E8628FD211F0924FE573C4F9AE02.roa (hash: uKLFwAF6OPU48tvtT2EBR+YQZKAwbAGiUD5OlNlMeM8=)
4: 912FB56E7E7811F08636DF33C4F9AE02.roa (hash: 0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=)
5: 390C84E8CD3811F09B08A83DC4F9AE02.roa (hash: 2tXGkSgH+XrWMKUB7Bk9Mor4TTpyKPAaQzZ2GF5++1I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 16:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4225 (0x1081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: Dec 10 16:53:46 2025 GMT
Not After : Dec 17 16:53:46 2025 GMT
Subject: CN=6939a59b-88e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:c9:3a:ef:2b:0c:37:8c:86:12:53:ad:0c:
ff:35:eb:f2:11:9f:37:2f:07:bb:60:97:0f:d3:7d:
c7:30:fe:82:cf:ac:55:01:bb:57:2d:7a:e0:61:56:
b2:c5:9d:74:8a:71:09:28:29:c9:a5:3a:f7:6d:3e:
4c:0f:a2:2e:2b:7e:25:25:06:d9:1b:d7:11:8d:6f:
71:8a:12:cd:c7:9f:21:c4:ee:c5:b8:a2:cb:e8:41:
6c:4e:e1:e9:0e:97:45:49:f8:38:e6:3b:fb:7c:d3:
db:61:e1:ec:df:40:25:08:40:47:32:c0:f3:18:88:
49:57:f0:46:7e:39:8d:70:35:73:b7:dc:6e:8d:54:
a2:e7:74:e0:8d:6e:8c:50:cb:81:21:87:9c:11:ee:
1e:58:80:71:02:e5:78:e2:28:cb:1f:5e:a6:45:7b:
15:0e:b9:6a:bb:93:1c:46:75:1a:60:40:40:ae:c7:
aa:9b:54:6a:bd:ba:1f:82:59:38:d0:29:f1:b8:f8:
94:3f:cf:a3:53:2d:16:7c:14:99:8a:79:60:dd:43:
a8:00:1f:c2:b3:91:2b:55:dc:eb:b4:dc:51:0a:37:
8f:5c:be:02:b1:41:2e:0e:8d:ae:2b:4a:f2:6e:5a:
6e:3c:e5:b5:de:f2:0f:78:38:69:b1:eb:f9:e4:21:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8F:A5:AE:9D:90:47:C2:7B:3E:E1:2D:43:23:FE:87:D6:6B:4A:38
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:db:c7:0d:e5:89:ea:30:f7:8d:ab:78:20:b8:7f:f5:b6:97:
ae:90:6c:11:dd:42:72:9d:37:0e:ad:bb:a6:44:4a:c5:81:4d:
81:4b:49:b3:4c:85:41:c0:ed:63:d4:34:4e:ea:a4:b0:6d:33:
e8:ab:5a:dc:33:8b:fb:99:4b:69:88:6a:13:60:3f:e3:44:d4:
b1:8c:96:45:1b:e2:6b:8a:4a:a7:99:9a:3d:4c:f1:1e:dd:7b:
6f:61:62:05:f4:af:87:eb:de:8b:d9:a1:f6:8c:f3:cf:0d:0b:
be:d2:90:b4:8e:7b:ac:9b:27:3d:62:a3:4f:dd:51:3b:96:47:
74:50:60:4e:86:2a:e6:a8:3c:c6:cd:c2:18:30:75:2f:a8:c0:
1c:b6:36:c0:fc:1a:f0:92:9b:41:48:e5:c6:00:47:2d:41:68:
69:78:15:7f:28:9d:14:9b:a8:de:4b:17:0d:79:ca:d0:a3:06:
2d:42:1c:1e:ee:7e:7f:9f:18:8b:01:14:fc:71:f1:f4:1a:20:
7a:b4:be:c5:b5:bf:36:95:06:6f:f1:1a:ec:4b:b4:e0:e5:39:
dc:f9:6e:a0:8c:32:0b:5c:82:f5:1c:d4:14:92:5d:69:71:65:
3f:fa:e6:7d:3b:77:af:7d:b4:29:08:5b:a9:c7:4c:ed:f0:5f:
57:2a:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:16:41 2025 by rpki-client