This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
File: -tTGddk4luj3XW0tmNf6X-FIRLs.mft (raw, json)
Hash identifier: p7UZkwgUkAIdO+3nU6OWER8bFb0h26+xqsc8YAIcPjM=
Subject key identifier: F2:11:FC:D9:AA:B2:1C:1F:02:06:3D:11:92:28:80:01:FC:E7:B8:E3
Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
Certificate issuer: /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Certificate serial: 0BB9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
Manifest number: 0BB0
Signing time: Mon 22 Dec 2025 18:29:29 +0000
Manifest this update: Mon 22 Dec 2025 18:29:28 +0000
Manifest next update: Mon 29 Dec 2025 18:29:28 +0000
Files and hashes: 1: -tTGddk4luj3XW0tmNf6X-FIRLs.crl (hash: aZS8wdeBPSULZrlrFS+lzsxsE8Ngibpw+jb3XSonzG4=)
2: 9AEB003836DD11EABDA48574C4F9AE02.roa (hash: 6AStLiXGFTbizy72srYzdt3NNVrbT13s0hjr9rc8KH4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3001 (0xbb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Validity
Not Before: Dec 22 18:29:28 2025 GMT
Not After : Dec 29 18:29:28 2025 GMT
Subject: CN=69498e09-f341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:06:92:3b:ea:e9:c7:58:a8:c2:f5:17:52:
c0:69:b9:fb:5f:b1:11:f1:ac:0e:8c:36:be:c6:f5:
6c:45:fa:20:93:c6:31:bc:25:b7:4c:2f:78:ba:88:
61:f8:1a:ae:e9:15:8f:68:70:22:6c:2c:e3:ec:2c:
24:95:25:28:28:d8:d0:a2:a6:48:53:40:f3:f8:33:
ec:07:9b:8c:2a:89:32:bc:2b:03:84:09:67:cd:c5:
ea:62:bd:53:c0:34:4f:56:ae:a6:a1:b3:48:4f:f9:
96:06:80:4f:e5:ad:98:1f:60:ab:dc:22:f1:b8:7f:
2f:34:16:73:ad:e6:f2:61:06:fc:47:e0:dc:0f:b6:
e5:ba:86:a8:40:84:22:04:91:e8:33:15:a9:2a:d8:
9f:1e:bc:68:63:1f:8b:b8:e4:72:09:8c:80:14:d5:
32:c7:b2:65:ae:9b:1a:16:ff:12:f6:d5:b1:2f:f4:
22:60:5f:98:b0:f2:e0:2a:4f:14:40:92:5a:dc:f5:
d5:30:8b:9b:33:1d:6d:22:66:3c:4a:16:34:e4:a5:
87:86:89:ff:72:d7:f6:7a:54:3e:ae:db:4e:09:7a:
a4:46:af:e6:b6:63:88:0d:28:46:0b:89:e0:f0:a3:
7f:61:3a:0a:19:8d:a1:1a:ae:9c:47:cf:74:c2:5e:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:FC:D9:AA:B2:1C:1F:02:06:3D:11:92:28:80:01:FC:E7:B8:E3
X509v3 Authority Key Identifier:
keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:bd:5c:47:6b:be:51:dd:1c:90:a8:32:a6:94:24:1d:0d:6e:
0f:81:4d:5e:75:ef:d3:b6:4e:5b:bd:f0:0b:a9:13:72:fa:f4:
c5:b1:58:fe:f2:79:dd:d7:79:18:b3:9a:ca:26:02:8b:e3:bd:
e7:9c:c4:d9:18:eb:83:6b:77:1c:11:20:50:bc:13:f1:72:1e:
ea:29:86:fc:2d:ba:83:d0:3e:38:d2:14:48:a0:62:03:6b:72:
6f:33:50:dd:e4:7a:b3:36:f0:9b:b3:04:cd:7b:fd:7e:73:e1:
4a:c1:bf:89:d4:d5:39:24:c6:f2:ba:24:17:3e:49:d6:e5:dd:
6e:57:ca:8b:46:89:37:34:fb:f0:25:d8:0a:15:23:c9:e4:cb:
a6:bc:c8:cf:e9:18:a1:66:58:9a:fe:6d:8f:61:12:bc:9d:d2:
db:f3:a7:9d:f9:63:ae:87:03:3e:10:13:59:11:72:35:f1:8f:
7e:1c:90:61:9d:da:60:d1:a4:79:c8:8d:f9:fa:62:83:43:bd:
98:cb:53:16:23:e4:86:b2:cf:89:0b:0f:a7:ac:2e:35:ea:5c:
d1:02:9c:1d:af:22:9b:29:08:4a:07:55:71:7a:99:fa:d4:ec:
d2:31:f8:0a:79:c2:fc:f6:12:9c:ed:d0:b5:fc:2d:e1:32:fa:
06:dd:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:12 2025 by rpki-client