This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
File: C1O4Cmyciut01te7VxpSAM5V2PM.mft (raw, json)
Hash identifier: 4c6ZGpYWk30mUNmgi25++JsElidE4JRfi0TWUMuk1uM=
Subject key identifier: 2B:95:05:CE:7C:C2:CE:E0:8E:6F:01:90:E3:3D:D2:FF:0B:30:04:E9
Authority key identifier: 0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
Certificate issuer: /CN=A9155DEB/serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Certificate serial: 086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
Manifest number: 0860
Signing time: Mon 22 Dec 2025 20:03:55 +0000
Manifest this update: Mon 22 Dec 2025 20:03:55 +0000
Manifest next update: Mon 29 Dec 2025 20:03:55 +0000
Files and hashes: 1: C1O4Cmyciut01te7VxpSAM5V2PM.crl (hash: 28/MsurYuCu/0b8ZSrQiWOMOltifpP6XIxq3anp3YqE=)
2: E382826C4AF611EFB245AE59C4F9AE02.roa (hash: P0Z3h3HuumfxbGBOlXuGuMnAJ1+xepxRxLb1CH8TQZA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2158 (0x86e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155DEB, serialNumber=0B53B80A6C9C8AEB74D6D7BB571A5200CE55D8F3
Validity
Not Before: Dec 22 20:03:55 2025 GMT
Not After : Dec 29 20:03:55 2025 GMT
Subject: CN=6949a42b-0261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:c4:b4:da:04:8b:f1:a7:1d:22:cf:bf:c3:
30:64:45:2b:3c:e3:43:e3:7b:4d:c7:44:aa:06:15:
2b:d6:d1:91:81:d5:8a:f4:00:2f:3c:48:a5:84:43:
0c:53:24:cb:d8:d6:43:47:b4:70:42:3f:ce:5c:70:
35:5a:06:8c:ff:d6:94:17:90:f9:73:81:a0:68:bf:
35:5f:66:3a:dc:1e:7b:de:1c:e5:03:79:e3:e7:5d:
c3:1b:cc:a8:21:97:77:30:b5:92:b2:42:54:ac:67:
b4:8f:d0:1e:32:ff:b1:ef:e2:97:d8:c9:a7:22:33:
9e:04:07:f6:02:f2:ce:e8:20:cc:eb:e7:38:e7:9d:
cc:fd:31:71:a2:84:13:55:f4:29:ab:c7:c6:7f:cc:
2e:97:55:e1:28:18:70:62:8a:4e:1b:17:5f:b3:b3:
7e:34:51:1a:4a:84:89:22:6c:70:5c:03:34:32:b1:
b6:f3:f2:7a:46:4d:d5:ac:df:0a:44:fe:c0:a4:fc:
41:18:32:df:53:6a:4e:fa:19:c7:62:97:84:56:7e:
a5:1e:aa:ca:2f:ae:e5:e0:0c:92:bc:3a:57:89:ee:
48:1d:b5:16:83:2f:15:ee:e5:42:6c:5e:22:a4:07:
2d:2e:1b:f2:4a:2c:3f:c0:d9:d8:35:51:f9:15:6d:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:95:05:CE:7C:C2:CE:E0:8E:6F:01:90:E3:3D:D2:FF:0B:30:04:E9
X509v3 Authority Key Identifier:
keyid:0B:53:B8:0A:6C:9C:8A:EB:74:D6:D7:BB:57:1A:52:00:CE:55:D8:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C1O4Cmyciut01te7VxpSAM5V2PM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155DEB/162CB274EA4C11EAA257B939C4F9AE02/C1O4Cmyciut01te7VxpSAM5V2PM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:f5:7b:c7:db:28:bb:86:c4:7b:26:21:14:57:e4:a8:6f:
7f:bf:35:60:76:fe:7f:63:e2:78:2e:e8:4b:2e:ad:43:1c:ab:
06:23:4b:25:17:84:2a:4b:b1:a0:e7:ff:b9:ef:24:bd:1b:66:
ea:02:fc:72:d2:5e:b4:fa:ce:6f:6f:77:6d:6e:69:bc:65:16:
3f:8d:5e:7c:1b:00:11:86:bd:da:ec:10:1f:7d:48:d3:31:97:
59:ea:42:d4:d6:fe:7d:fd:2a:1b:82:56:91:5c:66:7d:c8:8f:
c4:a3:de:6a:90:e2:fc:e7:dc:d7:7e:e4:63:15:ea:38:82:47:
c5:e1:29:74:da:b8:41:3a:04:e1:57:39:6a:ce:74:a9:d1:2d:
0b:d1:fa:0d:67:a7:c5:6c:94:7c:19:34:31:b0:c6:b5:4b:57:
39:9e:1a:52:d1:14:78:96:3e:82:64:ec:1e:f3:38:bf:06:3d:
9b:4e:a8:81:d8:1d:37:8d:35:30:a5:66:28:52:cd:60:01:2f:
e5:91:b1:bf:e3:ed:68:ad:d5:ac:b5:90:39:93:82:75:31:b1:
fd:e7:79:64:7a:d9:d7:a3:d7:06:4e:de:72:22:e2:0e:88:43:
07:80:73:13:c7:be:8c:a9:2f:f6:0b:6a:a8:0c:6a:fe:42:91:
c9:65:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:40 2025 by rpki-client