This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
File: ed8QJTU18NZ_oR22ikx2NKpqRHw.mft (raw, json)
Hash identifier: pU7f4qMj5CkSHTS2Ir5d6pgW/8iqbMqTeIFEsZaTW84=
Subject key identifier: C9:A4:6B:00:A8:B8:61:3E:40:52:C9:89:77:D9:05:81:C2:8D:3B:0F
Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C
Certificate issuer: /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
Certificate serial: 0694
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
Manifest number: 068C
Signing time: Mon 22 Dec 2025 21:41:08 +0000
Manifest this update: Mon 22 Dec 2025 21:41:07 +0000
Manifest next update: Mon 29 Dec 2025 21:41:07 +0000
Files and hashes: 1: ed8QJTU18NZ_oR22ikx2NKpqRHw.crl (hash: SdDAGluf5TOV5o7ZRU9dRNCmmsZF3mCHTIuXGMRbRZs=)
2: BF195C829CD211EBA0E3CB58C4F9AE02.roa (hash: vieZUpQmzzJOorTO/HBg3bT9si532rk94383Z2tZWNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl
rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1684 (0x694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C437, serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
Validity
Not Before: Dec 22 21:41:07 2025 GMT
Not After : Dec 29 21:41:07 2025 GMT
Subject: CN=6949baf4-0b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e9:9c:09:f0:27:f5:ad:c8:17:37:7d:0b:ef:
69:d9:61:e2:b6:86:32:07:23:38:eb:51:f6:b5:d9:
ce:ae:5e:8b:17:6c:05:78:d4:68:fc:c3:e6:35:89:
57:03:93:d8:ba:60:fd:8f:10:68:b7:a6:9f:df:77:
a3:1b:85:e4:87:b6:8e:9b:4b:0f:72:29:3a:7a:bc:
5e:0c:b2:09:61:3e:4d:da:24:71:78:b8:8b:ff:c8:
89:a5:81:e9:a5:bf:9e:55:3f:52:43:06:61:6f:35:
1a:11:c6:88:f1:2e:ef:0f:7c:16:a8:d1:cd:e7:40:
cc:6a:63:70:47:c4:ca:47:d9:25:b4:92:38:a5:93:
55:3d:f8:60:fb:52:ab:19:34:42:85:78:06:5f:f0:
06:0f:d1:ad:e5:06:61:d7:31:91:27:a7:13:5c:f1:
e4:1e:f6:3a:db:eb:6b:ef:7e:7d:b3:a6:89:bb:5d:
80:fe:02:45:33:a1:00:7b:be:5e:dd:da:d0:ac:07:
91:0e:b0:e1:2a:3b:51:e5:5f:7a:22:5c:b9:d1:60:
0c:51:7e:13:ab:60:a5:ff:68:05:f4:a9:3e:d9:1e:
93:b2:29:ac:0f:4d:9d:b9:e0:c5:35:c5:05:71:c0:
54:ba:31:2a:81:4a:96:27:21:63:bd:48:7d:94:b0:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A4:6B:00:A8:B8:61:3E:40:52:C9:89:77:D9:05:81:C2:8D:3B:0F
X509v3 Authority Key Identifier:
keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:71:f3:a5:82:b8:f3:39:78:06:72:db:ec:f7:a4:41:51:a8:
00:44:de:5a:c1:a0:38:4d:a2:7d:bb:ab:83:82:9a:2e:2b:25:
9b:3d:51:c7:5d:ba:64:cd:1b:20:34:98:84:99:05:e8:30:4f:
0f:3b:61:2d:96:be:ca:80:9f:96:9b:02:32:52:18:08:32:11:
4a:00:c9:d4:b8:c1:40:62:1b:b9:9c:d4:20:c7:b2:8f:ad:78:
32:18:35:7c:a8:ea:b5:2b:0d:66:cd:f5:db:58:91:cf:78:28:
65:4c:65:5d:b0:4a:5b:61:83:ef:cb:a6:7d:92:95:fa:36:92:
21:c8:06:c4:d0:5d:ed:f0:99:86:e7:11:9a:78:88:ba:c4:8d:
96:29:3f:4b:c2:22:af:9a:60:3d:2a:b1:c3:8a:3a:88:50:86:
60:6c:49:b6:d9:ac:29:e4:e7:a4:77:28:cc:c6:15:17:47:5c:
f2:0f:3c:05:d6:b4:8a:45:cd:0e:d5:6e:4b:4b:a2:94:8f:98:
68:b7:94:dc:03:34:68:3d:1c:34:e8:00:dc:ab:ee:5f:f8:35:
e8:35:a9:b6:ea:cf:87:d5:17:44:98:bc:30:ab:21:3c:7e:1a:
d0:6d:1b:95:91:6e:85:02:16:2c:ab:43:3c:3d:85:a8:dc:69:
23:e6:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:14 2025 by rpki-client