This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier: Xg8+rI8JCjmL/U0T5b7LmSdDz8sDMc50s9jlg27imxQ=
Subject key identifier: 66:45:A2:29:28:37:07:2A:2E:77:07:52:C1:47:51:2A:AE:82:96:12
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer: /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number: 0145
Signing time: Sun 21 Dec 2025 03:32:35 +0000
Manifest this update: Sun 21 Dec 2025 03:32:35 +0000
Manifest next update: Sun 28 Dec 2025 03:32:35 +0000
Files and hashes: 1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: VyyvrYiNv+nmIfhYPunbw7TU5iaWBuKS5q8+ZrCtMgk=)
2: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: ioOqYPYgjl0hBINpNmdRJRFRhysvj1VoKagrJNHAM6c=)
3: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: jcaCq3HWImgQ/NDx2leALcjgxzkZ4FPifc2Ybb4pZFU=)
4: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: 00hi9oYWLhxiNt5qG52lfNVHtDojqLF3FRiNHRwXR2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 03:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Validity
Not Before: Dec 21 03:32:35 2025 GMT
Not After : Dec 28 03:32:35 2025 GMT
Subject: CN=69476a53-a4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:be:e4:45:aa:ab:45:2d:df:3a:b1:d7:bb:
45:cc:00:4c:62:33:01:c8:d3:44:58:f9:f5:d7:71:
7f:99:f5:9a:d2:29:58:98:3a:36:5e:eb:b4:b2:0b:
29:53:27:18:f4:ed:17:89:6a:7b:55:7f:0d:97:07:
0d:c0:b2:ab:bc:e5:e5:80:fd:0a:60:71:ee:dd:15:
1f:de:45:df:ee:54:96:fc:91:04:f3:8a:2c:b4:05:
48:a6:92:aa:b5:75:7e:3d:dd:db:c5:40:81:10:46:
b5:76:e4:75:e2:c8:42:15:14:68:af:e4:ff:5f:df:
5a:d4:fb:f9:68:4d:20:70:c1:72:27:1c:2b:40:ff:
6c:16:04:be:ae:13:9a:8e:57:bc:01:ae:46:52:72:
23:29:33:b8:29:77:fa:a2:1a:19:7a:95:b1:9a:6f:
4e:e1:79:94:2f:05:7f:38:59:9a:bc:4d:d2:a4:12:
c0:61:38:06:c8:a0:d2:44:88:b3:84:e6:98:24:41:
d6:e0:39:83:6b:66:d0:cb:64:c4:85:06:14:16:c1:
1e:e3:31:5b:fb:88:50:02:4c:7d:d3:87:44:4f:1e:
9b:8b:a6:6d:94:4b:46:57:b4:89:aa:3e:74:c7:a4:
0c:dc:4a:37:a1:d4:77:cb:d1:37:40:d9:e1:23:1f:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:A2:29:28:37:07:2A:2E:77:07:52:C1:47:51:2A:AE:82:96:12
X509v3 Authority Key Identifier:
keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:ea:6a:9a:59:13:da:ce:c4:ff:43:90:e6:dc:88:05:2c:
7f:b9:1a:46:18:c1:25:14:a7:b3:27:5b:a6:73:e9:69:a9:cf:
c6:37:0b:b1:90:be:df:2a:05:e5:1d:e7:c4:db:bb:ff:6e:12:
5e:1d:54:a8:8c:d8:79:b9:59:2d:8b:01:32:3d:1d:f9:7c:8d:
ba:97:dd:24:9c:88:99:b7:63:b5:38:8b:2e:a9:f2:c9:46:87:
d5:8c:7f:89:72:d4:34:7c:ce:a7:73:48:39:e0:aa:37:c5:fc:
b2:c8:05:c8:69:f9:ac:56:af:5b:15:66:93:1e:fd:c9:dc:54:
b9:b3:05:98:89:03:bd:3b:e9:81:5e:e6:ab:e9:94:c9:9c:20:
e5:1b:0b:06:8b:f7:35:a0:ce:7f:81:9d:f5:30:72:c4:4b:fb:
9f:3d:4b:02:71:c7:84:73:44:ec:72:03:30:fb:ef:51:79:42:
5d:e1:14:e4:e5:46:1e:7c:f7:41:06:22:67:b1:04:96:c6:f1:
93:93:30:99:7a:ee:32:89:b4:a9:e0:4c:76:6f:50:9e:e6:d4:
98:64:a5:bf:6a:4d:89:29:18:ac:e6:07:6a:cc:9a:0b:06:38:
53:d6:08:35:95:a4:c9:61:f0:5a:3d:9a:a9:23:f9:db:57:b9:
c2:f8:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:56:38 2025 by rpki-client