This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier: 39gh4tMqMwsLCT8ecCRPZUXu8gpY/X2tYHN9V92wxfo=
Subject key identifier: 8E:3F:D9:13:29:32:AF:03:89:EE:4E:21:B6:D2:E3:94:99:70:06:FA
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer: /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial: 06A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number: 06A0
Signing time: Mon 22 Dec 2025 21:36:14 +0000
Manifest this update: Mon 22 Dec 2025 21:36:14 +0000
Manifest next update: Mon 29 Dec 2025 21:36:14 +0000
Files and hashes: 1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: C9Vs+ZTragqwhfvCFYfPv/LZnsR1ThnGWkkJEgIQLmo=)
2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: lK7bGVCygyPQRcWZjT3XlPriu2CyfUJlUxTwi2dzB50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Validity
Not Before: Dec 22 21:36:14 2025 GMT
Not After : Dec 29 21:36:14 2025 GMT
Subject: CN=6949b9ce-6418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:41:b6:02:a6:a9:c3:6a:f6:23:29:85:8b:
00:64:3a:cc:d0:54:d2:29:57:42:b4:63:97:79:f7:
d0:b0:3c:10:24:b0:54:49:17:87:78:30:57:0f:b2:
b8:e0:5d:70:81:bc:ca:bb:51:7d:ff:d4:6a:41:55:
ae:d8:f0:0e:6b:16:8c:28:09:8b:4f:65:34:a0:c7:
3a:7e:e1:13:8c:26:d3:57:3f:4a:56:7f:85:62:b3:
fa:46:c7:0c:9b:7d:b2:9e:a9:d4:ad:44:55:fd:d8:
b7:33:a4:c4:8e:c3:a1:e4:19:06:9a:6f:75:87:d5:
0f:fa:44:65:68:40:6c:a8:d8:b6:8b:9f:a0:e3:60:
fd:4f:db:c8:a0:f7:27:d9:34:b0:2d:ff:b4:60:a8:
70:d7:6b:6e:85:11:4b:34:a3:cb:98:4d:d8:4d:ac:
17:fb:b5:a1:19:30:7d:81:13:cb:46:2d:db:68:9d:
32:00:b5:77:47:24:54:4f:68:44:00:ee:79:90:42:
25:9a:b3:66:49:76:b1:cd:d5:32:bf:e3:55:2a:60:
45:fc:46:a5:ed:ed:1f:a6:7e:8e:02:4a:da:61:08:
9a:e1:d9:73:8b:70:75:53:c9:a7:92:7a:cc:15:66:
9c:22:63:dc:c4:49:e9:af:b3:0f:9f:65:16:af:46:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:D9:13:29:32:AF:03:89:EE:4E:21:B6:D2:E3:94:99:70:06:FA
X509v3 Authority Key Identifier:
keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:82:98:de:bf:a0:bf:dd:dc:ac:3f:e1:bb:46:34:6d:27:
e8:6e:30:de:de:9c:c3:20:6f:27:67:81:df:e0:9e:c4:a6:37:
06:d9:57:82:bd:b5:85:d9:e9:88:28:0f:9f:6c:7c:2e:24:d0:
f6:dd:88:d8:39:67:42:db:82:2c:b2:8b:38:92:de:22:ec:f2:
47:b0:2c:d0:ed:9f:25:a4:9e:ce:5f:2c:d8:63:1e:6c:b3:16:
4d:6a:61:d7:e6:b5:2a:8f:cd:38:01:9f:1f:21:15:fa:3d:31:
19:df:83:cd:70:05:48:42:0a:c2:bb:83:f5:31:5e:76:57:56:
2a:5b:94:16:9d:e9:58:ad:bc:9b:1b:3e:14:86:97:6f:08:1b:
21:e4:01:88:a4:64:fa:4a:79:33:a2:71:d6:a2:c8:b4:19:df:
ca:38:08:84:be:d0:1b:f1:2c:e4:87:df:54:a3:34:0d:17:b7:
f5:94:83:0c:76:fd:b5:7d:9b:52:94:b8:59:3f:0e:5e:18:7d:
7a:7b:ff:b4:b3:ea:68:dd:e4:71:2c:f5:28:b2:fc:d5:33:6a:
3d:2c:95:9f:45:e7:1f:f2:8e:fe:5c:0b:c3:ce:48:9b:bd:08:
d6:d1:4f:e3:bc:aa:a3:66:cc:aa:fa:93:f9:94:ba:fd:1a:26:
d0:0c:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:47 2025 by rpki-client