This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json)
Hash identifier: tqyVQs7aE8ILLCgGf3ZOA57uJmNrg9QIQ76FzRhHQdQ=
Subject key identifier: 4B:A8:CD:B2:C5:09:C4:0A:6A:15:45:7C:B5:1C:CE:B5:F2:FD:A6:53
Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Certificate serial: 191E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
Manifest number: 1908
Signing time: Thu 18 Dec 2025 16:20:28 +0000
Manifest this update: Thu 18 Dec 2025 16:20:27 +0000
Manifest next update: Thu 25 Dec 2025 16:20:27 +0000
Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: kpWEhAQM/2E8i5mA0rQgslIBFM0cRK8IaCgNxhYiMwE=)
2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: hGExMUb+w4JyWjME6Pb9a+xtMzWk7NBawSO3YXbXwM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6430 (0x191e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6
Validity
Not Before: Dec 18 16:20:27 2025 GMT
Not After : Dec 25 16:20:27 2025 GMT
Subject: CN=694429cc-625b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:67:0e:0a:f1:f2:44:8c:6d:dd:60:11:72:
4d:23:85:1e:81:4a:25:4d:44:93:f1:41:40:da:0d:
a1:49:91:ad:ea:6e:41:d5:59:61:cc:66:29:b9:9d:
36:d7:44:03:fd:20:c5:30:f9:5c:0f:5a:6c:af:09:
fc:a3:73:7f:da:d4:b5:74:75:22:76:56:bb:3e:6d:
37:aa:4f:68:d9:47:43:71:ae:4b:20:41:ea:fd:ec:
bc:4e:d3:a0:bb:a4:29:c0:82:19:0f:09:9d:14:f5:
72:c1:93:6d:de:77:ee:ba:1b:c9:8a:1e:f3:f8:5f:
b4:8d:ab:37:5d:11:ee:5a:fc:14:2e:bd:96:83:c5:
7a:6b:75:ec:d6:e6:31:7d:ad:f0:6a:32:b1:04:25:
ed:47:13:76:b3:40:00:fc:c7:c5:0f:c8:8b:68:2e:
d0:2f:d6:81:cf:20:a3:68:9b:50:fb:3f:26:6d:b0:
61:cc:fb:38:86:92:83:30:11:cb:0b:5f:0e:68:40:
86:68:32:6a:ed:6d:70:f8:0e:a0:ce:b7:a6:f3:46:
10:b1:80:4c:77:a0:6a:34:f6:1b:1b:49:08:06:0c:
1c:19:9d:eb:4e:87:17:a5:8f:55:7f:f9:bf:0f:8a:
03:e8:cc:a1:6a:53:88:f0:28:c9:96:0b:0e:33:ea:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:CD:B2:C5:09:C4:0A:6A:15:45:7C:B5:1C:CE:B5:F2:FD:A6:53
X509v3 Authority Key Identifier:
keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:21:a1:56:6b:16:d5:d5:9b:f9:55:12:c5:2b:8f:a3:c0:71:
b8:8a:06:c6:83:74:ab:e3:04:61:bb:34:9f:14:03:45:12:bc:
f1:e8:34:a3:26:c5:f0:61:18:8d:c2:65:a4:21:0b:73:99:d7:
70:50:a8:85:d6:0a:22:81:33:c6:f9:8b:b9:ab:48:a7:97:f5:
a0:25:7a:60:17:61:b5:3c:74:3b:c3:f5:37:01:5a:f1:9c:45:
d0:03:b1:7f:33:d9:9a:37:5b:a0:71:b6:d3:4d:22:15:06:a6:
7d:c7:ac:20:14:38:fb:91:b6:a5:76:42:20:51:02:cc:21:95:
44:ad:71:70:af:23:10:47:84:e7:dd:1b:b1:34:ea:f0:f2:54:
7d:03:e9:1b:24:8e:94:77:ff:ba:f4:13:e1:bd:5c:f9:36:e8:
5d:09:4f:52:03:cb:7c:c8:d2:e2:54:fc:e4:4e:03:9c:77:c6:
6c:fd:96:9e:42:fd:14:04:80:c1:f0:31:79:80:03:99:db:a5:
bd:f1:33:c3:fc:bc:ed:d3:de:51:5c:b6:21:f0:fb:cd:36:3c:
c7:84:74:83:3e:56:05:e7:d3:7f:cb:de:c7:38:49:94:e0:51:
5c:14:46:30:68:ed:ca:ad:c5:e2:d3:06:c2:2f:71:5d:e6:22:
68:cb:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:21:21 2025 by rpki-client