This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier: Eev54EfT07heSJ8NAdJXILFCGQaaq+enoY5BHWbDNWE=
Subject key identifier: BC:99:6E:51:42:B9:46:2A:A0:73:57:57:AD:E1:09:ED:9A:15:01:33
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 0953
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number: 0946
Signing time: Tue 16 Dec 2025 19:48:20 +0000
Manifest this update: Tue 16 Dec 2025 19:48:20 +0000
Manifest next update: Tue 23 Dec 2025 19:48:20 +0000
Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: jR+seE1NBYe3p7vozR/OWpsuRDOxeHWakxigHHmK70w=)
2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=)
3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: bj4egIAAlTEUd+3GyfnPFN1nOaWoeA00wwzQy3Jloew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 19:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2387 (0x953)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: Dec 16 19:48:20 2025 GMT
Not After : Dec 23 19:48:20 2025 GMT
Subject: CN=6941b784-77b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:fc:41:ff:ac:8d:a5:dc:22:47:a9:01:e1:
c8:71:d3:9a:08:fc:65:0a:ab:1a:ec:ea:40:13:f6:
22:89:6d:f7:6f:c2:13:2d:ac:ab:cd:cb:35:56:47:
08:ff:57:03:4e:50:98:3d:7d:69:a3:1e:e5:52:e8:
68:23:72:dd:5a:d4:67:5d:75:11:77:19:6f:0f:41:
c7:9d:e2:d7:88:61:1d:29:13:ee:9a:17:e6:af:5a:
23:38:6a:17:78:49:5f:45:71:68:ac:31:78:fd:01:
07:84:4e:c0:a9:9a:4c:65:10:e8:b5:67:bb:7d:f1:
d5:f3:f4:f6:ea:e6:72:a2:00:22:e6:a1:13:c3:6a:
29:da:8b:a2:bc:ef:2e:1c:8d:f4:59:34:cf:94:eb:
a5:d6:7f:76:1d:ce:be:69:45:f1:bd:c2:09:a0:96:
b3:1e:6d:80:1c:53:6d:96:cf:0e:72:f4:42:b4:30:
7b:8f:63:14:25:0a:1a:a1:8c:61:0b:65:44:ae:95:
f0:f6:41:7b:8d:bd:8b:c2:11:38:47:8a:48:b1:d2:
e3:40:4d:93:95:31:39:05:b2:2f:b4:5c:63:d8:83:
ad:70:58:b3:77:ba:b9:a7:77:40:2b:c1:2d:65:09:
fa:e1:10:6d:dc:c3:a5:8f:15:ec:d0:36:8b:cf:9b:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:99:6E:51:42:B9:46:2A:A0:73:57:57:AD:E1:09:ED:9A:15:01:33
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:19:a3:da:b9:42:4d:40:75:f0:80:7d:00:93:b6:d1:00:76:
10:7a:9a:61:a3:23:4c:50:74:6b:4b:10:e5:b3:5f:69:63:ff:
68:2c:26:12:b6:31:94:68:4d:f1:2d:3f:90:51:0b:cb:07:aa:
cc:3d:49:9f:35:21:b3:13:b7:25:7f:df:79:14:f4:11:2f:ff:
4e:fa:99:2c:02:11:aa:0c:0a:e9:38:e8:20:3f:fd:83:96:09:
ff:6a:df:9f:3a:a4:67:07:96:18:e4:c2:cc:00:c1:23:be:98:
e1:61:b8:fa:dc:d1:60:43:6c:c2:48:3e:27:56:97:68:45:89:
b7:bf:57:b4:31:ad:14:9c:7e:c5:e2:e4:a0:f5:ba:a3:f4:0c:
8c:a2:95:be:af:2d:74:03:3b:f7:e7:6b:78:64:51:2d:80:31:
d4:37:67:2e:90:39:0d:bd:1c:d1:b6:aa:36:4f:06:c5:97:15:
dc:7d:ed:b3:09:38:83:3a:89:99:42:c0:34:f9:50:4c:12:84:
cd:14:f0:25:3b:fd:0f:bc:3a:66:4d:7d:b3:4e:f5:71:fe:aa:
f9:e1:70:8b:27:86:53:44:e7:da:08:6a:c3:cc:e5:bb:ad:38:
21:10:6f:1b:96:5c:e4:be:fd:b7:6c:dd:8d:80:95:cd:8d:0a:
85:9f:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 20:07:07 2025 by rpki-client