This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier: BR39OuqNPAVX1+tEBP6v7XBrXv7hqo3l+x63Nlmewec=
Subject key identifier: 5E:13:55:5B:77:E3:CA:62:D9:7E:94:5F:F5:A3:99:1F:FA:9B:8B:67
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial: 34EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number: 34EF
Signing time: Mon 22 Dec 2025 14:32:36 +0000
Manifest this update: Mon 22 Dec 2025 14:32:35 +0000
Manifest next update: Mon 29 Dec 2025 14:32:35 +0000
Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: TPVp5wD5d5dF9dJtKxDBCXYy+jl1F2HImCmbKxGbX6s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Validity
Not Before: Dec 22 14:32:35 2025 GMT
Not After : Dec 29 14:32:35 2025 GMT
Subject: CN=69495684-9a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:78:43:d3:fe:5c:21:f2:65:f3:5e:af:61:
de:b9:6d:ff:d0:5f:16:74:33:f7:ea:58:03:2c:7e:
c3:33:9f:e4:b4:a4:95:c8:e2:e9:11:28:0c:35:0b:
30:f7:7f:22:b8:17:d7:bf:f9:d0:fb:8b:72:02:9f:
23:7b:5d:98:e8:35:93:a5:95:70:c1:b7:69:34:f8:
62:75:d7:c9:b9:54:a6:a9:f5:b8:b7:a7:e6:81:0e:
a4:d6:3d:a1:e2:63:7d:c2:43:49:21:b6:fc:bf:77:
9e:b0:9a:a7:20:92:72:38:d8:d8:b8:64:b4:c8:89:
f4:1c:1c:6f:17:94:06:73:e8:0e:10:99:98:a6:ba:
e9:aa:e9:75:8c:7f:68:b7:d1:25:a5:21:8a:5f:1e:
0b:d5:b8:7e:c0:64:0d:82:80:62:e4:b7:1a:d5:fc:
55:c0:0e:c2:5a:e2:6e:a2:9c:51:98:0c:12:ae:33:
70:ea:01:fc:1c:0f:28:6a:41:98:c2:14:79:bd:e7:
87:d9:3a:8b:83:ad:22:8a:76:a6:38:63:29:c8:d0:
cb:ee:0b:43:6d:44:be:57:a3:45:f2:64:cf:2a:5c:
4b:0f:56:9b:92:d6:40:c7:90:42:f9:c4:27:ca:45:
d4:3c:46:87:ff:eb:c7:e9:ba:c0:bb:54:40:9f:9f:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:13:55:5B:77:E3:CA:62:D9:7E:94:5F:F5:A3:99:1F:FA:9B:8B:67
X509v3 Authority Key Identifier:
keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:2c:8c:95:f9:56:98:71:de:6b:66:30:a0:e7:1d:2b:3f:84:
e8:37:fa:04:e3:8e:81:47:35:9e:7e:21:a4:37:c2:40:8d:86:
06:52:e3:6c:48:50:e8:e1:81:b9:25:91:e8:67:80:cc:d1:0b:
35:8c:22:6f:b1:b2:ff:dd:6c:df:b6:63:17:af:15:5e:e7:74:
0f:d8:e2:6b:d7:8c:64:ff:fc:a3:84:cf:fb:d0:1f:59:60:06:
4a:52:23:46:9b:6f:4a:4f:bb:ff:b5:2f:08:8b:4a:37:d2:de:
45:24:d9:50:41:8c:9b:39:c1:3c:ed:b4:13:e0:ee:3e:a9:f6:
09:be:a4:27:a1:af:73:ac:c5:ca:97:21:ce:30:c8:cc:88:1d:
31:d4:08:f3:2a:c4:7a:08:44:4a:a9:a7:4f:83:80:28:b6:fd:
f2:43:55:b4:1d:53:56:0d:84:3a:f3:87:04:3a:da:51:48:0e:
5f:d3:ff:38:f4:4a:61:74:da:b2:9a:95:22:f4:7d:e1:0e:fa:
05:53:be:f7:17:28:ac:3a:81:fe:f4:55:07:bb:4c:2f:f9:d4:
f5:79:3a:6f:92:da:46:e3:f9:11:32:1d:b0:56:82:25:d1:79:
5e:b4:e2:d4:e1:6d:80:76:68:14:28:ad:72:97:a4:1d:01:0d:
bd:e9:09:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC
RjE0Mzg2QzIwHhcNMjUxMjIyMTQzMjM1WhcNMjUxMjI5MTQzMjM1WjAYMRYwFAYD
VQQDDA02OTQ5NTY4NC05YTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztJ4Q9P+XCHyZfNer2HeuW3/0F8WdDP36lgDLH7DM5/ktKSVyOLpESgMNQsw
938iuBfXv/nQ+4tyAp8je12Y6DWTpZVwwbdpNPhiddfJuVSmqfW4t6fmgQ6k1j2h
4mN9wkNJIbb8v3eesJqnIJJyONjYuGS0yIn0HBxvF5QGc+gOEJmYprrpqul1jH9o
t9ElpSGKXx4L1bh+wGQNgoBi5Lca1fxVwA7CWuJuopxRmAwSrjNw6gH8HA8oakGY
whR5veeH2TqLg60iinamOGMpyNDL7gtDbUS+V6NF8mTPKlxLD1abktZAx5BC+cQn
ykXUPEaH/+vH6brAu1RAn59aRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4TVVt3
48pi2X6UX/WjmR/6m4tnMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE
OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr
cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDGLIyV+VaYcd5rZjCg5x0rP4ToN/oE446BRzWefiGkN8JAjYYGUuNs
SFDo4YG5JZHoZ4DM0Qs1jCJvsbL/3WzftmMXrxVe53QP2OJr14xk//yjhM/70B9Z
YAZKUiNGm29KT7v/tS8Ii0o30t5FJNlQQYybOcE87bQT4O4+qfYJvqQnoa9zrMXK
lyHOMMjMiB0x1AjzKsR6CERKqadPg4Aotv3yQ1W0HVNWDYQ684cEOtpRSA5f0/84
9EphdNqympUi9H3hDvoFU773FyisOoH+9FUHu0wv+dT1eTpvktpG4/kRMh2wVoIl
0XletOLU4W2AdmgUKK1yl6QdAQ296Qkd
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:42:38 2025 by rpki-client