This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
File: 76bB5uz60eiKn0TSgALu1jmyulQ.mft (raw, json)
Hash identifier: dzlrG3aOG+gc8slrA4ppYHoZQ4ltlnLyxGlpSaPFqQQ=
Subject key identifier: 85:79:67:61:F1:8D:14:B4:42:DA:F5:66:7A:E0:31:FE:FE:CB:5E:A3
Authority key identifier: EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54
Certificate issuer: /CN=A915A921/serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
Certificate serial: 08DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
Manifest number: 08D1
Signing time: Mon 22 Dec 2025 19:48:11 +0000
Manifest this update: Mon 22 Dec 2025 19:48:11 +0000
Manifest next update: Mon 29 Dec 2025 19:48:11 +0000
Files and hashes: 1: 76bB5uz60eiKn0TSgALu1jmyulQ.crl (hash: sfYsAM13SBh7l1pScMOzfJc5iyt5XVgzWYeGWrsNmKQ=)
2: AFB3319E5F0C11EC8C2C2820C4F9AE02.roa (hash: oQabdmEmsE0xS2pzwUEQIF+XAWD0QihN42o3aT+jjXE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl
rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2266 (0x8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A921, serialNumber=EFA6C1E6ECFAD1E88A9F44D28002EED639B2BA54
Validity
Not Before: Dec 22 19:48:11 2025 GMT
Not After : Dec 29 19:48:11 2025 GMT
Subject: CN=6949a07b-e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:b9:63:49:26:18:bf:44:ef:f2:15:cf:47:
51:ab:4d:2c:d7:d8:1f:44:09:6d:fc:64:ea:86:48:
3b:84:ad:a2:b2:81:19:f5:fa:ad:01:53:b9:2c:ef:
1c:4f:6c:9f:c9:78:c1:ea:89:94:f3:cb:fb:4d:e0:
f5:4c:6b:c0:09:be:2d:cb:dc:ce:62:76:b9:77:1f:
e4:5e:d2:92:89:35:a4:1c:80:4b:1e:98:dc:ef:81:
ed:c5:b4:83:2d:a9:4e:5b:59:11:2d:fb:90:67:3c:
3f:1a:ed:a9:ce:e8:a6:a4:48:e1:96:29:05:0b:de:
ff:40:5f:51:fd:17:4b:1a:36:9b:0c:7a:3c:95:77:
8d:5f:fc:f7:cb:22:63:2f:2c:b4:a6:f5:e5:74:34:
5d:99:a4:49:db:8d:c2:35:f8:6c:c8:bb:1b:97:f9:
19:85:cf:ce:8f:1c:0b:4a:0a:59:d0:c0:60:77:40:
3e:a1:30:07:e8:43:41:7d:5b:f9:f8:a5:f7:6d:50:
31:f8:38:8b:91:2d:e9:bc:53:95:27:62:4d:d9:57:
38:76:77:2d:b2:1c:a0:be:0d:bc:f3:49:0c:a9:a7:
bb:1c:2b:1c:e2:94:e4:64:93:1c:0a:be:0b:07:e6:
1e:39:c1:78:cc:9a:9a:dd:dc:5d:ea:6f:02:ef:33:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:67:61:F1:8D:14:B4:42:DA:F5:66:7A:E0:31:FE:FE:CB:5E:A3
X509v3 Authority Key Identifier:
keyid:EF:A6:C1:E6:EC:FA:D1:E8:8A:9F:44:D2:80:02:EE:D6:39:B2:BA:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76bB5uz60eiKn0TSgALu1jmyulQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A921/E38D182EC5B411EA9926C81DC4F9AE02/76bB5uz60eiKn0TSgALu1jmyulQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ed:a8:2e:1c:eb:4b:2f:be:2d:b4:da:37:8c:4a:5c:50:6f:8a:
ed:66:94:b2:40:d1:7c:5d:b0:72:67:93:97:af:39:ed:9f:fe:
e6:45:21:72:f3:78:d0:f1:2b:d8:3b:cb:cd:c7:29:72:80:ca:
5e:9c:2c:b7:20:1b:67:d3:3f:2a:90:8c:f9:bd:93:e8:99:0d:
47:77:62:05:69:aa:4d:10:ca:10:94:4c:0b:9d:2e:41:b2:80:
73:8c:71:b9:6c:41:02:2b:d6:88:0a:d6:9c:e4:b8:a4:a6:e1:
39:59:61:b3:4a:45:a8:ba:a5:3e:d7:a3:ec:30:a5:9c:41:ab:
78:7a:42:f6:07:d7:9c:08:ec:9a:84:61:c1:81:f1:df:0e:dc:
99:f7:de:43:25:ac:bc:f3:e0:77:e6:4d:27:ba:94:4a:ab:43:
79:e5:ad:c5:36:36:73:4a:1d:32:ba:56:46:5b:b5:0b:20:1c:
fd:bc:45:2f:24:6f:12:f2:e2:93:9a:b0:97:e6:13:fb:18:ac:
d2:35:8a:7a:3f:66:3b:36:be:af:bc:b5:23:6e:d5:64:04:c2:
5d:72:b2:f9:b3:e1:00:8a:88:10:ec:55:1f:b0:24:48:6b:24:
3c:88:9a:bd:ea:7c:98:a9:93:93:09:88:58:da:da:bc:64:9f:
d9:79:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:20 2025 by rpki-client