This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
File: _XRQsRgVCpshTxoL7t8-Oyb-0Es.mft (raw, json)
Hash identifier: AY3lWCKyZ4+zDFXi0P5eB89tqY3RQFbBw/Km1x0a1i8=
Subject key identifier: D0:71:04:6B:D7:B3:ED:69:EF:52:E8:5F:D5:71:6A:FC:A3:39:E2:39
Authority key identifier: FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B
Certificate issuer: /CN=A9144160/serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B
Certificate serial: 1053
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
Manifest number: 104A
Signing time: Wed 24 Dec 2025 17:07:57 +0000
Manifest this update: Wed 24 Dec 2025 17:07:57 +0000
Manifest next update: Wed 31 Dec 2025 17:07:57 +0000
Files and hashes: 1: _XRQsRgVCpshTxoL7t8-Oyb-0Es.crl (hash: eGFQV8ccDUKT7cMW89bBLlggFbWj5kqHlt8IPwprHvI=)
2: 378459525C6511E989D03610C4F9AE02.roa (hash: UeTUI1DlYZHvBOxwqKa9VAajPRoI3BhfLzrzdSlATns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl
rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144160, serialNumber=FD7450B118150A9B214F1A0BEEDF3E3B26FED04B
Validity
Not Before: Dec 24 17:07:57 2025 GMT
Not After : Dec 31 17:07:57 2025 GMT
Subject: CN=694c1ded-b053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:e7:86:a4:26:51:54:0e:9d:75:6a:a5:77:
80:15:85:07:d2:24:c5:eb:84:a3:76:69:2a:97:47:
9f:68:0f:78:22:e5:cb:b5:b2:3a:56:82:34:5c:56:
d9:53:a0:23:f1:2d:7e:29:7d:a7:a6:ba:96:dd:b7:
1c:2e:58:29:d7:a1:da:7a:5a:84:41:d4:12:de:43:
d1:d8:a0:2d:da:96:cf:92:a7:60:a2:22:6e:d3:68:
81:ec:7a:bb:40:f7:30:2a:93:7b:36:59:6e:56:a3:
cf:3e:95:8f:b4:b4:f5:be:97:ca:93:7c:9b:ea:bc:
d3:96:66:d2:c5:3d:43:cb:92:93:9e:7d:f7:68:3b:
66:a5:53:0f:4d:c4:91:1d:f2:73:37:e5:1d:be:2b:
a7:31:4f:df:c0:1f:c4:ed:9b:99:75:44:d6:e7:99:
5e:71:f9:12:87:a6:01:a3:94:d6:18:5e:8c:de:3e:
1f:ea:d4:f7:7f:03:56:fb:18:5d:3a:5f:25:f6:2f:
6b:58:4f:22:39:77:13:58:b7:7b:7d:4a:74:c5:70:
f0:72:79:fc:ae:6b:04:d0:ca:83:71:59:1d:50:40:
a2:17:bc:79:a4:27:b3:c3:a6:ac:e7:cd:21:0b:01:
9c:29:e6:3c:cc:c8:69:64:01:72:cc:3e:76:aa:41:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:04:6B:D7:B3:ED:69:EF:52:E8:5F:D5:71:6A:FC:A3:39:E2:39
X509v3 Authority Key Identifier:
keyid:FD:74:50:B1:18:15:0A:9B:21:4F:1A:0B:EE:DF:3E:3B:26:FE:D0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XRQsRgVCpshTxoL7t8-Oyb-0Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144160/DD6571A64F9211E9AD10AA13C4F9AE02/_XRQsRgVCpshTxoL7t8-Oyb-0Es.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:2d:da:ec:bc:42:94:81:75:25:a5:ba:12:11:38:7c:98:
03:67:cb:14:e8:13:f1:b6:31:4f:fe:4c:8e:2f:35:28:82:07:
17:e5:d2:32:0c:9d:18:0a:6b:d2:49:33:f7:a5:3a:1e:0b:05:
e2:df:e2:f3:ca:8f:52:bd:2e:b6:3e:2c:a5:f3:8d:37:f8:99:
44:5e:e8:c2:c3:25:b6:83:db:d9:43:40:37:da:26:d5:7f:75:
97:80:7d:93:1e:4f:32:05:0d:20:30:f8:f4:5f:b4:c9:08:6f:
6b:96:66:a2:53:d0:a7:a5:83:65:41:d6:b4:3e:48:59:e1:6f:
f8:ee:96:34:cf:d1:41:21:e1:49:45:c2:56:b7:d6:0c:5d:b7:
36:3e:ae:b8:dd:8d:60:04:6f:9d:87:e1:ca:1f:f8:81:ee:46:
ca:6b:d0:1d:bd:cd:94:6c:26:fa:62:c2:73:5c:4a:15:a1:cc:
aa:ba:47:32:6a:02:c6:bd:9f:a9:95:3a:11:de:9c:69:e9:6b:
8d:aa:fb:9b:4b:ad:07:5b:b0:44:9a:c2:b8:9f:64:eb:b7:8c:
db:3e:e5:f4:b7:6e:24:72:2e:5f:8c:74:19:47:6b:36:a1:8c:
a9:5e:d0:02:5b:b4:57:51:47:5f:ac:c2:85:43:77:ac:98:df:
b9:81:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:41 2025 by rpki-client