This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier: YiHeK6S6P84h+FhQAtG4LsyfPUK/OgBfQeY9ejLZTzg=
Subject key identifier: BB:76:2D:90:62:72:93:26:D5:23:BA:18:55:1D:34:0F:1B:30:DA:87
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number: 0109
Signing time: Tue 23 Dec 2025 04:00:17 +0000
Manifest this update: Tue 23 Dec 2025 04:00:17 +0000
Manifest next update: Tue 30 Dec 2025 04:00:17 +0000
Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: sQSyAyeW7ucnpfXZ6Ubq2MuYvJEZqB9pFEkIe53fwvE=)
2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Validity
Not Before: Dec 23 04:00:17 2025 GMT
Not After : Dec 30 04:00:17 2025 GMT
Subject: CN=694a13d1-a8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:75:ce:aa:3c:3a:94:a6:0f:62:b0:07:f3:
55:a4:e5:70:a0:53:f8:95:cd:60:90:ed:3c:51:e6:
87:7f:52:39:2a:76:80:42:27:13:06:91:5c:37:f4:
1f:fd:08:c3:07:9f:b8:22:02:0a:89:03:80:d2:82:
7e:26:0b:77:c3:ff:9c:2a:55:8f:44:24:2b:ec:74:
4b:c5:83:80:a2:a8:c7:d0:09:0f:a8:29:5b:96:a1:
c1:9b:cc:04:86:25:db:b8:79:95:90:11:f0:5d:52:
04:01:9e:4a:08:d9:e9:10:f5:ba:78:28:3c:24:64:
fe:ae:d0:ed:26:6e:60:16:ad:03:c4:94:87:77:cc:
ca:af:6a:2f:dd:ce:04:f7:65:62:b4:70:b5:25:4d:
9f:56:fb:62:ca:0a:e4:89:c1:0c:ce:43:fd:67:2a:
07:22:a9:45:74:0d:0c:98:a5:7a:85:28:7c:f7:20:
dd:bb:1c:cc:68:c2:2b:18:1b:e4:85:da:33:ab:8e:
5b:b1:ee:c8:f0:55:9f:c0:af:a1:ce:4d:7f:74:bf:
a0:42:85:f1:67:14:ad:82:63:5a:d0:0e:bc:8b:48:
e7:ec:b5:6d:23:3a:86:ee:fa:12:a5:38:27:2c:0b:
c2:7b:ba:eb:08:94:6c:fd:52:16:65:0a:26:db:ff:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:2D:90:62:72:93:26:D5:23:BA:18:55:1D:34:0F:1B:30:DA:87
X509v3 Authority Key Identifier:
keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:80:ed:0a:82:65:2f:65:7c:82:ac:ac:fd:3f:d0:21:6f:d8:
ac:2b:97:9c:c7:b3:7c:4f:77:c6:69:57:fa:ee:42:95:61:f0:
98:a3:fb:83:07:23:6c:ab:c5:74:1e:69:64:40:c8:da:1f:d3:
f2:85:b5:6a:e0:5e:5e:52:d1:37:b8:87:1d:97:ca:bd:a4:c9:
38:44:49:40:4e:22:90:29:f3:48:fc:18:5d:99:73:d3:8b:9e:
22:74:78:54:a4:5b:84:d7:9b:7e:2e:92:f3:30:3e:49:6f:25:
89:b4:ec:56:31:7f:af:02:b6:e3:9e:00:95:7a:66:68:d0:9d:
a5:8a:da:d9:5a:e7:e7:cd:4f:f4:cd:9e:1c:0f:c2:5f:c7:29:
f9:53:4c:6f:3c:86:42:8b:02:a3:16:a2:a8:b5:93:cd:9b:df:
8d:bf:eb:f7:8d:c8:43:4a:83:b8:11:39:2b:82:33:7c:a7:85:
87:b4:b3:9d:8a:85:92:23:f4:87:a2:5a:bc:33:9e:7f:14:4e:
80:fc:a8:72:1e:df:35:19:4f:03:1c:b2:32:d2:8c:e4:14:40:
8a:12:a7:43:b5:5c:ef:32:a5:3f:1c:b3:c3:94:a8:74:3d:47:
6b:13:70:d5:2a:1c:3a:af:63:c9:fd:5a:cd:f6:75:08:cd:13:
50:8c:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:22:22 2025 by rpki-client