This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
File: SJpvztfcY7erNmbjW9UJ2eoVdeA.mft (raw, json)
Hash identifier: LpFnV31eu+cTBljXRfxPOhSfEeMiDAdvkL+157l8uW0=
Subject key identifier: 11:A7:31:88:EA:64:45:D8:91:60:24:6F:34:33:9F:83:70:E1:CD:69
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Certificate issuer: /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial: 8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
Manifest number: 89
Signing time: Tue 23 Dec 2025 05:33:08 +0000
Manifest this update: Tue 23 Dec 2025 05:33:08 +0000
Manifest next update: Tue 30 Dec 2025 05:33:08 +0000
Files and hashes: 1: SJpvztfcY7erNmbjW9UJ2eoVdeA.crl (hash: WjQ9ZJowmCZrYxBt6LE2/vyNWjM+zrR7iNGefEDWI+k=)
2: 3057138E143F11F08A345E0AC4F9AE02.roa (hash: litZH04YNtCR4iuEOlm91tI8Ccgt0oYZlfR5gRznpNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Validity
Not Before: Dec 23 05:33:08 2025 GMT
Not After : Dec 30 05:33:08 2025 GMT
Subject: CN=694a2994-fd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:79:35:ff:70:de:2f:64:7d:34:1c:d3:64:
ed:5f:af:2c:31:94:5d:cb:db:79:f8:a8:82:e1:63:
46:79:10:9d:28:1f:1d:29:43:08:ac:5e:3f:82:e2:
1d:cb:0e:04:0d:2b:27:c1:88:1c:00:e5:45:6f:15:
a0:94:7d:2b:28:61:85:66:72:d7:fc:e2:50:fa:02:
e5:df:b2:a4:ae:64:cf:59:4b:d9:85:f9:60:9e:e9:
ca:ee:3f:76:9b:81:1e:37:4a:51:bf:af:6c:29:36:
fc:4a:bb:c6:9f:89:28:58:9f:85:e5:30:66:27:0c:
64:b3:6d:81:7c:81:05:7c:81:18:f5:be:da:f5:7f:
9b:9e:93:d0:54:d1:4c:62:8b:5d:52:0b:23:42:c4:
20:6f:07:d8:04:5b:45:19:dc:c3:c6:e2:f5:ca:e6:
77:27:71:9a:fc:33:4a:25:62:a4:79:19:1d:41:9d:
81:02:db:35:4e:62:92:bf:f9:cc:6c:08:be:81:b2:
63:d3:5a:ca:a3:22:2b:b1:37:ca:f0:b3:d5:02:bf:
fe:07:bc:57:da:56:bc:c4:a4:91:cb:a6:ed:a8:3c:
6d:ce:93:da:f6:1c:54:00:b4:fe:6f:a3:56:16:0d:
63:8b:6c:a3:eb:61:7e:7b:f6:0b:fb:a4:a6:0b:57:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:31:88:EA:64:45:D8:91:60:24:6F:34:33:9F:83:70:E1:CD:69
X509v3 Authority Key Identifier:
keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:39:ff:d0:e3:6d:24:f5:54:d5:8b:c4:1f:79:17:1a:0a:28:
c0:56:05:dc:93:3a:7e:c4:6f:48:d5:f0:92:fc:88:35:ad:35:
19:9a:92:d1:70:de:ed:d3:d2:80:c5:12:0e:63:e8:af:7a:d6:
ab:4b:b3:f0:05:ec:42:68:4d:aa:ea:d5:1d:f4:af:e0:46:e1:
30:da:d8:78:99:6b:59:ec:b5:fb:83:9d:e0:9f:75:c1:f4:35:
4e:90:64:5f:83:2e:47:7f:84:8a:00:09:a1:a0:43:ee:2c:9b:
7c:18:3b:af:30:aa:79:5c:58:2e:7c:4e:c7:80:a5:60:f0:6a:
17:b1:6c:f7:39:58:da:6f:17:a7:89:f5:ff:8d:73:7e:3b:59:
c2:4a:73:5a:72:51:b9:54:1a:f7:74:28:a8:ad:8d:78:60:5b:
a8:21:c5:49:55:00:8a:e7:9d:4f:66:1c:7b:77:34:d7:11:6b:
86:c0:e6:9d:1c:de:14:8e:37:05:40:88:b6:8a:cf:44:88:1e:
2f:87:6e:54:01:71:64:3b:80:36:38:56:a7:9c:1d:b3:ca:63:
bf:ed:1d:7f:ff:26:e3:24:a4:0d:d9:0f:94:69:42:6c:8b:72:
a0:91:3f:52:e7:c2:a7:91:f2:0e:5a:7a:35:aa:7b:a6:5d:69:
6c:55:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:39 2025 by rpki-client