This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
File: b_pdsVnUCjoXLbx09cMrVVF5ea8.mft (raw, json)
Hash identifier: 280ivqjpsF9oP7jL/USjMDT5Gy01iDjAAXNt/fAC4bM=
Subject key identifier: 3B:35:EA:A3:9F:BF:0B:34:98:27:DB:0B:D1:8C:D8:93:50:31:D2:95
Authority key identifier: 6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
Certificate issuer: /CN=A913C627/serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Certificate serial: 08D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
Manifest number: 08B7
Signing time: Fri 12 Dec 2025 19:57:36 +0000
Manifest this update: Fri 12 Dec 2025 19:57:36 +0000
Manifest next update: Fri 19 Dec 2025 19:57:36 +0000
Files and hashes: 1: b_pdsVnUCjoXLbx09cMrVVF5ea8.crl (hash: nJ42JMQuAM8ZtcwpNeJh3GPJFtT+wO9Hv+3rW1PGb68=)
2: FFB3EF94F53C11EEA5B4623BC4F9AE02.roa (hash: qCV1CGEKKAAFyjh2aY/pv/O3Ul0oy0qB9pbyOTWaQu4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 19:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C627, serialNumber=6FFA5DB159D40A3A172DBC74F5C32B55517979AF
Validity
Not Before: Dec 12 19:57:36 2025 GMT
Not After : Dec 19 19:57:36 2025 GMT
Subject: CN=693c73b0-3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:b3:79:15:95:e6:89:3a:22:cb:de:ac:ba:
14:af:11:e0:6b:a7:31:a9:33:92:8e:7d:31:6e:1e:
95:6e:bb:dc:f8:08:4a:cd:33:1a:ae:14:5d:eb:39:
77:1b:7e:1e:be:4a:16:c8:ba:cd:b5:cb:47:ad:1f:
0e:f8:01:fc:b9:d6:39:05:9e:84:06:a8:21:66:2c:
39:cd:a3:c3:87:7c:79:90:c9:34:e1:bd:b4:8a:a0:
78:77:f2:10:20:c1:0f:23:7c:79:df:98:34:a6:6d:
8f:39:e4:2b:55:79:e5:c9:16:8f:68:47:d3:af:cb:
b0:36:33:03:16:68:82:02:8d:25:31:d4:85:b0:b8:
0f:95:2a:58:42:b6:c5:59:5c:e7:32:20:08:b5:50:
0d:bb:33:46:18:4e:8b:aa:3b:c0:2e:1e:3e:e2:83:
f8:46:39:34:96:08:58:e5:6c:2e:3a:52:b1:f5:a8:
9e:60:4c:80:95:9c:df:a1:88:92:f9:52:a1:9a:8a:
34:e5:39:b9:10:ae:9e:ba:2e:30:7e:be:40:61:6d:
a7:6e:c3:d1:13:78:11:a9:9b:5d:e2:b3:11:40:03:
61:06:d9:83:dd:19:6a:be:f3:fb:35:96:93:0b:2c:
fe:0d:9c:54:d9:4a:64:e6:6a:c4:45:1f:d5:12:36:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:35:EA:A3:9F:BF:0B:34:98:27:DB:0B:D1:8C:D8:93:50:31:D2:95
X509v3 Authority Key Identifier:
keyid:6F:FA:5D:B1:59:D4:0A:3A:17:2D:BC:74:F5:C3:2B:55:51:79:79:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_pdsVnUCjoXLbx09cMrVVF5ea8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C627/C265C1A4D07D11EA8600986DC4F9AE02/b_pdsVnUCjoXLbx09cMrVVF5ea8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:e4:c3:94:a9:a9:df:f5:36:1e:b6:36:fe:27:1d:b6:35:bc:
da:30:ad:cb:f3:e7:ba:53:74:18:7b:b0:44:7d:2a:9c:e9:ae:
b6:42:b1:9e:62:a9:d0:a8:a3:9f:0d:b8:19:b8:e9:63:3e:b4:
5f:5d:b7:e4:a5:5e:3a:fe:c4:0e:87:18:b0:c7:fe:bd:ab:64:
7a:57:8f:03:6b:b4:0b:c6:f1:dc:1a:96:a9:68:9f:27:4b:26:
e5:07:2c:b6:78:41:8d:c2:f3:1b:eb:42:76:45:89:45:d6:37:
3c:cc:67:a7:d0:b2:ff:dc:92:50:d5:0a:9d:df:8f:3a:be:64:
5c:ac:19:00:c3:61:e4:65:6a:b7:1c:05:69:3f:a4:85:51:56:
bf:e2:a9:07:e0:23:47:68:f0:54:d4:94:c7:06:3d:ee:fe:91:
29:ae:bc:91:6c:61:83:4a:cf:8f:59:2e:f3:05:79:cc:58:03:
7a:5a:b6:30:b2:6d:e3:4e:fe:1b:3e:8d:e4:c6:7e:f9:f3:c6:
27:ce:0a:32:8f:ff:bf:8f:3f:6b:9d:61:b8:8d:bb:7d:79:30:
44:df:31:a8:f5:ea:b4:88:b1:a8:b4:91:de:01:ea:e0:75:9f:
3a:45:2e:33:47:c2:2b:12:d3:e8:f7:43:22:dd:99:d9:75:67:
92:54:d0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 08:23:06 2025 by rpki-client