This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
File: snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json)
Hash identifier: vubdufisK31iLCaQZn6D+07yBHSuF5L54NEH3uIzeK8=
Subject key identifier: 2C:38:5E:62:C4:CE:F7:BF:52:5B:04:DE:F5:07:A6:B9:E9:23:6D:82
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial: 0550
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
Manifest number: 0548
Signing time: Mon 22 Dec 2025 22:34:18 +0000
Manifest this update: Mon 22 Dec 2025 22:34:18 +0000
Manifest next update: Mon 29 Dec 2025 22:34:18 +0000
Files and hashes: 1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: EIITRhg/nrQakshFnpAlOEp/NfJfy+77aNIwGqYl0Zk=)
2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: 1+bdIoDctHGeWK3PYFNUTctx7UAbF9WMT3WnAcVgkOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Validity
Not Before: Dec 22 22:34:18 2025 GMT
Not After : Dec 29 22:34:18 2025 GMT
Subject: CN=6949c76a-537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:3d:0a:dd:3e:fe:ee:31:f9:02:95:ab:a6:
90:53:c2:ec:bf:45:5c:45:43:43:5d:08:f6:d1:99:
0b:a0:82:69:1c:f3:af:1a:3c:7b:35:68:93:77:e4:
b3:ed:44:31:b3:0a:c7:3f:8b:35:f2:55:03:11:02:
99:bf:e6:ab:c3:ff:82:c4:7b:30:09:ce:bc:d2:3d:
2c:5f:5e:c6:85:95:e7:67:f8:a2:0b:f8:32:20:77:
a6:71:01:77:62:0f:2c:0e:69:fc:86:77:b0:df:70:
00:55:bf:5d:4b:ed:f1:f9:52:88:f8:24:78:c9:04:
fe:25:10:8e:3e:ef:91:70:38:f0:5f:2e:a3:80:8c:
cd:ed:e5:83:51:92:52:f4:be:64:55:4c:21:38:1c:
03:66:de:36:04:81:58:7d:33:98:b8:c6:e8:24:6a:
20:ba:82:0a:76:d1:06:2a:61:a9:12:3e:f5:22:0a:
17:a0:51:bd:8e:f8:29:7b:55:8c:b4:b4:5b:7a:61:
de:19:97:80:12:b5:53:b8:1e:8f:1e:ed:b8:e6:27:
76:05:9f:d8:6c:aa:47:4f:c0:23:48:41:f4:82:1a:
83:ca:18:ad:a2:43:c2:69:85:57:9d:bf:23:60:bc:
56:38:fc:0a:4d:d1:0d:47:87:61:18:4c:47:a0:cb:
6a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:38:5E:62:C4:CE:F7:BF:52:5B:04:DE:F5:07:A6:B9:E9:23:6D:82
X509v3 Authority Key Identifier:
keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:c0:3b:a7:c4:08:38:b2:22:c5:f2:c3:af:d2:98:81:67:
a2:fe:53:3a:35:7b:cd:dd:e6:d2:65:d6:3f:66:2b:2b:dc:0f:
15:bd:cf:e2:46:8f:63:29:f6:4f:e6:a3:cb:d3:49:92:81:9d:
43:4c:b4:db:bd:6a:a8:e9:f5:10:da:37:df:9e:f9:71:51:5d:
cc:da:08:e1:ba:86:ae:2a:43:e7:8c:51:4f:fb:0e:38:86:87:
07:01:e9:bd:c6:a0:55:3b:e0:88:2a:12:4c:cb:96:e1:bb:b6:
a0:fd:1a:e0:c5:6c:71:82:9e:d8:9c:12:b6:79:1d:55:ea:f0:
d4:7d:e7:5e:78:20:eb:88:19:69:7d:e6:75:b6:de:99:c5:3a:
0e:73:a2:da:2d:cd:8c:89:df:45:69:76:23:a1:a4:15:fc:a0:
57:40:bd:3d:d9:17:6d:1b:59:77:b2:8a:c6:b0:62:1b:ee:cc:
e4:ed:52:b9:7b:16:ba:cf:5c:e5:41:91:42:8b:49:cd:99:ff:
71:10:4b:ad:a0:a1:93:51:7a:b7:9f:ca:56:b7:f7:83:7b:fc:
f1:2d:cb:c9:35:46:e1:37:74:14:aa:ae:09:2d:30:55:ec:76:
fe:e0:01:60:3f:88:06:64:36:71:88:3d:5f:52:bd:cc:83:01:
63:74:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:40 2025 by rpki-client