This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
File: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft (raw, json)
Hash identifier: zOwv2ttwCCdmF0JusZyBNGbd05IQB8ufu3MGbM7n8SU=
Subject key identifier: BD:36:92:D4:E0:E9:D8:26:26:FB:43:4C:75:ED:74:E4:A5:8A:97:12
Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73
Certificate issuer: /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
Certificate serial: 0217
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
Manifest number: 020E
Signing time: Sun 21 Dec 2025 01:38:33 +0000
Manifest this update: Sun 21 Dec 2025 01:38:32 +0000
Manifest next update: Sun 28 Dec 2025 01:38:32 +0000
Files and hashes: 1: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl (hash: RJzyPcGixY2Mfjk5THW8EDU1m8s46CUT4hnCGyoADYs=)
2: F1AA5BA0BC4111EF8F383127C4F9AE02.roa (hash: +rUdM3wh1FXG613eiD9jDQJWUNXhMVJzOG+9o6Mm79Y=)
3: 0B361848BC4211EF86E55A27C4F9AE02.roa (hash: +70dFn9ZrCVpNqZl9fsRZTQ+BGQRhum5n4ikWMTy4M0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl
rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535 (0x217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141796, serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973
Validity
Not Before: Dec 21 01:38:32 2025 GMT
Not After : Dec 28 01:38:32 2025 GMT
Subject: CN=69474f99-65c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ac:2e:c7:03:e0:b8:b1:68:f0:90:af:0e:04:
1a:20:13:bd:e8:c6:18:04:da:a4:49:58:e1:2a:1c:
ec:02:ad:85:e8:d7:56:88:2f:27:2a:47:74:98:f9:
b4:4e:2d:0a:c6:3a:db:8f:48:dc:7b:2b:3d:85:5b:
a6:12:83:9f:b6:03:60:ad:cd:7f:d4:9e:9b:53:d9:
6a:f4:d4:54:23:6f:4b:52:03:78:d3:00:85:20:d0:
b6:21:6c:09:72:9b:4c:23:36:82:6c:cf:f6:b5:72:
39:5b:1d:ca:59:ee:01:52:b6:b6:e0:df:49:8f:af:
12:c3:01:eb:3c:dd:09:a1:27:05:0a:57:b3:82:90:
cb:2c:f1:c3:8a:9b:81:7f:dd:d8:9d:27:b1:7a:d8:
e1:df:cb:33:3c:55:11:4e:a2:78:db:12:1b:50:af:
94:89:a8:19:53:eb:e0:2b:60:57:87:1d:ac:79:38:
9d:6c:12:dc:e0:50:1d:5e:23:3f:fc:e0:20:f5:ea:
c7:12:de:cf:3e:a3:81:7f:17:e1:4c:f1:54:cc:a6:
ec:ed:d6:dd:0c:50:cb:c2:74:43:4e:0d:17:02:c7:
bd:47:2b:c6:cb:e5:88:b7:f9:9b:60:69:4a:40:ee:
4e:d5:b0:c2:5a:8b:0e:80:5b:2a:fb:2c:f3:af:91:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:92:D4:E0:E9:D8:26:26:FB:43:4C:75:ED:74:E4:A5:8A:97:12
X509v3 Authority Key Identifier:
keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:20:e8:d6:8b:6d:18:27:a1:dd:10:5c:4c:1a:c8:bd:82:b1:
1d:00:d7:d6:6f:4a:e2:cb:ee:7b:14:c7:65:60:93:a5:d4:a0:
95:32:97:ec:66:ba:51:48:06:3a:ea:5c:95:9c:06:4b:15:c0:
8a:42:ee:f5:3f:4b:f7:34:18:cf:94:fd:7e:7e:e0:63:5c:fb:
39:f4:a9:68:1a:f7:2b:e0:f8:7f:55:76:1c:d5:a0:72:9c:5f:
e8:00:83:14:0f:c3:47:ad:c8:d5:a2:6b:f8:95:b0:25:b5:9f:
dc:09:a2:89:3e:49:4f:41:ba:bb:01:02:27:dd:e0:38:f9:79:
37:db:27:ba:d0:a5:ed:5f:9d:7c:f7:91:67:1d:c9:0c:1e:9a:
ec:69:83:5e:54:5b:6b:31:11:69:5b:30:c8:97:4d:8f:67:46:
f7:a6:b8:f2:11:bc:6a:68:ba:6c:66:ca:47:65:a7:c1:5a:dc:
dc:7f:23:20:b6:b2:71:6c:5a:fa:d1:e7:e1:c6:1e:dc:c0:dd:
73:f1:bc:4e:51:0b:46:d1:57:ed:88:78:65:a3:6e:ee:68:cd:
bc:fa:74:5d:76:90:39:fd:3e:60:5a:3f:a9:c7:f1:79:c0:c8:
09:76:1a:39:24:27:26:f2:47:e0:24:48:b0:96:8d:6d:35:d0:
d5:04:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:18:52 2025 by rpki-client