This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json)
Hash identifier: ZDPSUupmsdd6DJoEWxwx+s2+GwOmpWZww0uGXZIGNkU=
Subject key identifier: A3:AC:7A:12:F9:93:58:8A:FC:E4:A7:D4:34:46:FE:8E:B5:C0:CC:56
Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
Manifest number: C5
Signing time: Fri 19 Dec 2025 04:59:53 +0000
Manifest this update: Fri 19 Dec 2025 04:59:52 +0000
Manifest next update: Fri 26 Dec 2025 04:59:52 +0000
Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: wRket1Z8S5ShpND2tNhNB1YGVI//BAblYplFiGD9wCs=)
2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: OPtqpqRnPLGJpIAYeUv7g54Eop2JkKe6/L6zebgYnmU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919
Validity
Not Before: Dec 19 04:59:52 2025 GMT
Not After : Dec 26 04:59:52 2025 GMT
Subject: CN=6944dbc9-4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:f8:d8:fa:8a:3f:67:84:4a:54:a0:cb:02:
70:5a:c9:7a:53:ed:9b:cf:89:59:b0:87:3a:bb:86:
d9:86:25:c3:0e:ab:f4:ab:30:a5:c4:c0:d2:7d:d0:
54:ba:6c:c2:8c:7a:e5:bd:45:6a:75:9c:b6:1a:e5:
24:67:04:8f:98:75:0c:b5:d7:43:0c:66:31:73:19:
46:6f:45:39:68:d0:ee:70:6a:d5:ca:5b:05:7b:cf:
fa:04:fd:26:4d:6c:a5:62:3c:e0:0e:75:3a:78:28:
df:a7:2a:1a:aa:b5:a2:99:ae:8d:0f:8f:55:d6:b6:
f1:00:66:c5:08:48:41:d3:09:19:9a:82:f9:79:39:
f3:06:1f:f4:f4:23:1f:0d:bc:9d:87:60:8d:8c:34:
ba:12:ca:df:24:94:b0:84:c2:08:a6:fc:13:1b:0d:
1e:c6:be:86:ca:0f:b3:01:16:91:3d:d7:96:09:7a:
13:4c:91:a1:3e:ac:1a:e0:59:5c:36:45:4e:14:94:
7d:dc:e1:1f:de:cd:0f:4f:c5:fa:16:57:d7:85:77:
8b:95:80:d4:28:eb:8b:cb:e1:b4:44:53:af:2d:a2:
c8:d7:51:34:51:d9:f2:e9:48:15:60:16:46:c4:2c:
d3:8f:20:9b:dc:ca:8c:2f:c7:46:82:57:90:00:86:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:7A:12:F9:93:58:8A:FC:E4:A7:D4:34:46:FE:8E:B5:C0:CC:56
X509v3 Authority Key Identifier:
keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:07:e1:0d:d3:07:d7:5c:75:07:f7:7b:39:ca:73:55:e9:b1:
be:d2:1f:f1:75:4c:a9:82:65:e7:b0:a6:d4:a3:73:49:21:d4:
11:03:89:88:52:71:0e:a2:1d:9f:61:ae:fd:d0:1e:a0:02:03:
34:94:da:df:0c:94:f1:d2:f9:d8:0b:65:8b:37:a4:3e:15:60:
47:d5:72:77:1c:b9:20:77:56:3f:2f:1e:4f:38:23:98:8f:ce:
81:35:75:dc:d4:85:bb:a4:3f:5f:97:84:2c:87:ed:76:47:cd:
8a:c9:f6:9c:3c:1b:74:ef:6d:42:87:3c:c9:bd:60:d8:c6:28:
9b:cb:9e:dd:b9:53:cc:f0:e9:70:0f:9e:f4:95:ab:47:be:b1:
57:61:7d:ad:34:b2:73:01:5f:15:06:08:7b:f0:54:88:ec:b9:
6c:b5:f7:6a:f2:13:9c:77:f3:1b:96:8f:f4:f2:2d:c7:50:f7:
24:4e:77:da:bb:1c:fd:80:bb:74:33:e3:67:fb:3f:bd:9e:6d:
a6:a1:83:b8:f3:70:af:5b:7a:99:3d:07:44:c9:ca:76:19:0d:
09:0f:b0:70:53:8f:3e:ff:f6:1c:7d:a9:91:18:34:79:68:90:
3a:66:98:70:0b:0b:59:da:c2:f1:ff:2c:91:d0:df:7a:fd:b2:
a8:dd:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:27:09 2025 by rpki-client