This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
File: IpO9TF5PmillNYywGN8-Tu5N8c8.mft (raw, json)
Hash identifier: UHcAuBNgf17sIwwJ5QMZOLcaZIu49cdfUm7JLp0qjk0=
Subject key identifier: F2:19:E8:F7:53:EB:6B:70:E8:0E:77:AF:E4:53:60:4F:B9:FF:23:B0
Authority key identifier: 22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
Certificate issuer: /CN=A915177C/serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Certificate serial: 3054
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
Manifest number: 302F
Signing time: Mon 22 Dec 2025 15:20:08 +0000
Manifest this update: Mon 22 Dec 2025 15:20:08 +0000
Manifest next update: Mon 29 Dec 2025 15:20:08 +0000
Files and hashes: 1: IpO9TF5PmillNYywGN8-Tu5N8c8.crl (hash: qOgZadA6nsx1h4OL6NHhMCtn3FxIkX+HpdPxxHO5Ttk=)
2: 149AB4BE7CE911EEB9A02D83C4F9AE02.roa (hash: 2Zr7Hm+ka4YogIeAL8utcPORDLzzcWzkuQ8uJ6QbXYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:20:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12372 (0x3054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915177C, serialNumber=2293BD4C5E4F9A2965358CB018DF3E4EEE4DF1CF
Validity
Not Before: Dec 22 15:20:08 2025 GMT
Not After : Dec 29 15:20:08 2025 GMT
Subject: CN=694961a8-6c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:73:d9:91:2f:59:bb:00:ad:ab:a5:05:d9:
76:9a:1c:2d:c8:55:0d:91:b3:f3:26:de:11:42:71:
1e:93:fa:21:d0:79:8f:78:55:16:ac:ac:96:80:85:
2e:f1:5c:5d:aa:b6:f1:dc:ec:be:bb:c4:51:9e:30:
f1:d9:8d:28:44:63:34:3d:f7:3b:8e:00:fb:54:f6:
77:d5:89:2a:28:b3:4b:de:09:46:ab:dc:20:59:da:
d5:a8:bf:5c:53:7a:ec:3b:14:95:74:ad:ff:62:f4:
01:3d:3a:41:e9:6f:8f:8d:b4:15:ce:41:9a:f6:1d:
02:53:6d:81:91:58:9f:23:86:13:48:6f:32:af:8b:
4f:6e:70:bf:33:54:72:36:45:57:87:99:d1:94:16:
12:0a:7a:d4:6a:ec:f9:de:2b:ff:91:61:0e:4f:5c:
16:56:93:ae:e2:10:f2:f9:f4:cf:05:9e:bf:bf:51:
90:85:25:b2:20:96:ab:25:1d:9d:50:5d:24:13:ef:
cd:00:34:7e:57:35:96:ff:52:67:47:93:50:5f:3f:
a8:5f:14:bc:9f:3b:6a:42:e5:1e:9f:15:97:06:5f:
3c:5d:2a:de:6b:11:09:36:68:f2:04:ce:50:6d:1d:
b0:e0:57:81:fa:f0:44:ef:f2:45:fb:73:9a:99:ab:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:19:E8:F7:53:EB:6B:70:E8:0E:77:AF:E4:53:60:4F:B9:FF:23:B0
X509v3 Authority Key Identifier:
keyid:22:93:BD:4C:5E:4F:9A:29:65:35:8C:B0:18:DF:3E:4E:EE:4D:F1:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IpO9TF5PmillNYywGN8-Tu5N8c8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915177C/924CDCC0143011E3A0B19F2A5911EA32/IpO9TF5PmillNYywGN8-Tu5N8c8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:31:7d:78:0e:fb:74:76:4e:0f:c2:30:ee:6a:19:51:6c:
62:ef:f3:d2:b9:62:bf:e8:af:24:35:da:ca:0d:be:e8:be:9a:
b6:23:9d:64:22:78:81:79:6e:5e:4b:a3:07:4d:2c:f2:68:fa:
80:8d:85:7e:8c:14:db:9e:f3:c4:e5:20:48:d7:e0:be:8a:68:
79:57:cc:c1:9e:f6:6f:11:97:92:13:3d:a8:83:26:54:a0:a8:
e4:09:14:6d:fc:d1:78:64:0f:20:7a:66:32:9f:59:4b:05:1a:
81:13:3c:ea:db:93:73:01:b3:6d:2e:a3:7c:ed:d0:af:76:63:
44:04:e1:4b:c4:8b:12:40:31:f5:6e:f7:44:e4:0a:e1:4b:b3:
19:99:b1:65:d8:7f:83:38:e2:e7:bb:c3:23:12:03:95:0f:c9:
48:62:5d:2e:cf:bc:74:2a:ff:22:4e:73:51:2e:98:de:04:51:
ce:74:47:3d:b5:3d:9b:b7:99:31:f7:f3:4a:56:c6:86:2e:1b:
74:6c:df:ed:d7:45:39:1f:59:a9:af:98:31:09:03:31:a8:70:
c8:9f:29:c0:50:38:a0:d7:22:a6:bb:f2:7c:4e:e7:84:0f:79:
5e:61:25:53:9a:9b:bc:10:0d:bf:a0:0e:87:cf:da:d7:0f:cf:
88:ff:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 20:20:02 2025 by rpki-client