This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json)
Hash identifier: SQcL2u6RnhfSK1aSYuZynGHppPMIJfXS2P8loxF4kQU=
Subject key identifier: 05:4F:D8:98:4F:61:06:0D:31:39:BE:83:65:8F:2F:92:48:15:46:E8
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial: 0A64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
Manifest number: 0A29
Signing time: Sat 20 Dec 2025 19:21:27 +0000
Manifest this update: Sat 20 Dec 2025 19:21:26 +0000
Manifest next update: Sat 27 Dec 2025 19:21:26 +0000
Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: KqN/pa5SGJ6e9J87RhToSpq78c5vUQxhqMnbsMxJMAU=)
2: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=)
3: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=)
4: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Validity
Not Before: Dec 20 19:21:26 2025 GMT
Not After : Dec 27 19:21:26 2025 GMT
Subject: CN=6946f737-4a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:0f:99:02:de:4f:0d:60:42:b0:7b:cd:ad:
9d:34:da:20:e7:94:39:07:3f:0a:51:ef:b7:8c:8d:
85:c9:15:28:20:9e:09:d5:a9:87:27:71:d9:95:5d:
a9:4c:1a:6c:5c:11:01:02:14:57:1f:de:99:cb:c4:
d3:79:11:c1:9d:9d:a3:d2:07:35:fe:3b:b0:f9:f6:
40:18:56:b0:35:c8:f2:45:2b:c2:87:74:c8:6f:74:
07:39:ff:b9:63:d4:4a:4b:b4:c5:69:d7:87:49:20:
70:03:20:33:d9:02:21:ea:b1:49:5a:34:4b:55:0e:
f7:61:c5:ce:3b:d5:d1:4a:96:46:0f:03:c9:73:48:
5e:1a:73:63:22:be:ab:51:93:7c:83:32:ff:62:bd:
c7:68:65:45:7b:45:1d:a1:dc:9c:28:3e:0f:e6:4c:
a7:59:21:e6:b2:ee:9e:b0:8b:93:ff:e2:64:6b:87:
fc:8b:36:21:4c:3f:49:52:f0:a5:d9:d5:88:3f:71:
f8:f9:89:d3:a6:c4:7f:3d:35:d1:0a:c7:ed:5f:fc:
0d:d4:dd:3c:4b:b7:a3:e8:f1:c8:f6:98:04:92:1c:
04:a1:d4:c6:4e:fd:2c:1a:d9:9a:2b:0f:09:47:ef:
bc:1e:66:96:1b:f7:ed:a4:c4:f9:7e:3c:58:da:a7:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:D8:98:4F:61:06:0D:31:39:BE:83:65:8F:2F:92:48:15:46:E8
X509v3 Authority Key Identifier:
keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:dd:30:c0:e8:b4:f0:6e:32:f7:df:23:ba:ad:98:02:2a:
71:2b:a7:1a:af:e5:d0:5f:46:64:1f:18:ac:28:a1:34:56:c7:
e3:c8:40:48:31:62:b7:56:d6:bd:16:74:69:1e:3e:cc:5d:b2:
df:f3:27:72:46:e8:f1:08:49:63:a7:4e:b4:37:a0:10:21:39:
e3:91:7c:4b:75:ec:66:e5:5f:7d:b2:17:59:7d:39:90:37:56:
3c:03:a9:1e:4d:1d:80:1b:8a:f2:7f:9a:af:be:27:23:25:5a:
69:c0:89:2f:af:df:bb:7b:3b:47:75:c0:ef:b4:79:e3:29:8d:
15:c6:ec:bd:e0:ff:54:db:50:30:32:0c:54:67:b7:cf:89:4e:
95:e7:f3:7c:f8:06:b0:eb:51:14:13:1f:b9:c3:9e:84:62:f8:
ce:e7:1e:c6:53:63:04:00:4c:9a:ac:dd:04:9c:af:70:d6:2a:
20:00:5b:db:d7:97:bb:e3:ca:82:1f:c5:27:0e:45:b3:a3:19:
47:60:11:44:3b:24:fe:8b:a2:30:fd:c2:6d:a1:11:bd:b1:45:
2d:40:db:70:6f:21:c4:9e:88:5f:57:56:f0:4d:c0:e8:47:26:
ad:3c:76:04:a4:45:d6:d2:c0:57:c9:d7:b3:f5:a8:0e:0b:fd:
e0:07:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:24:25 2025 by rpki-client