This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
File: Exdoo2swNG49vr6_h7hIG6q-Pus.mft (raw, json)
Hash identifier: sKZAsVhUpVSZqf85IsNoGPqw3bVs5AeBw1njXEZHinc=
Subject key identifier: FD:B2:C1:F8:3C:4F:3B:64:03:48:13:0B:8B:52:E4:9B:B5:29:8F:20
Authority key identifier: 13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
Certificate issuer: /CN=A915C281/serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Certificate serial: 357D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
Manifest number: 3546
Signing time: Wed 24 Dec 2025 14:50:03 +0000
Manifest this update: Wed 24 Dec 2025 14:50:02 +0000
Manifest next update: Wed 31 Dec 2025 14:50:02 +0000
Files and hashes: 1: Exdoo2swNG49vr6_h7hIG6q-Pus.crl (hash: xxFGMStuyrg23I3TP/nNX/gQzaYAdbEtz/Mg9maMixA=)
2: 92078AAE0B5411EF957DA628C4F9AE02.roa (hash: MDqcYhBOLAd7Ve6t+D2323MIjWFyCpfTNAq4hOx2Ghw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 14:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13693 (0x357d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C281, serialNumber=131768A36B30346E3DBEBEBF87B8481BAABE3EEB
Validity
Not Before: Dec 24 14:50:02 2025 GMT
Not After : Dec 31 14:50:02 2025 GMT
Subject: CN=694bfd9a-8db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:8b:c1:02:09:c8:1d:d8:14:36:e2:19:f3:
6e:cd:82:f5:a5:a0:7b:f4:00:27:f3:a3:21:67:bc:
73:4e:6d:b0:8e:c1:ba:8a:d6:22:d1:66:b6:20:17:
48:fe:18:73:b5:27:7f:d9:e8:19:9d:30:90:86:3e:
fa:03:de:e5:68:a4:4e:a1:ad:41:1c:68:f7:ae:84:
f9:03:ea:b0:5f:ab:e0:74:dc:eb:66:c3:3a:c0:5a:
8f:91:ee:8b:7e:37:d4:4a:80:3f:58:6a:27:0e:64:
81:ed:5a:68:19:e7:e5:90:66:28:86:2a:45:67:e9:
ad:8b:74:17:8f:b7:e3:7c:fb:c6:6d:0a:2a:b5:58:
ac:8b:72:5a:53:8d:28:63:fa:46:b0:8a:a9:9f:f6:
a0:8f:22:bb:d4:05:b6:89:22:da:58:29:09:c2:71:
13:27:b2:fc:2c:b7:64:8d:98:38:17:d3:0d:4d:dc:
4a:6a:9c:23:94:36:58:31:83:a8:2e:8a:32:b5:35:
fc:de:da:08:15:f9:6a:f7:cb:a7:96:b4:41:71:dd:
7d:1d:53:be:4b:50:a3:60:fe:64:a3:03:fe:e5:3e:
89:1f:1f:f3:7e:2a:69:5b:c9:fd:97:7e:bc:01:db:
f7:d9:7d:67:81:76:62:de:2c:1c:cb:ab:76:4f:38:
5c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:C1:F8:3C:4F:3B:64:03:48:13:0B:8B:52:E4:9B:B5:29:8F:20
X509v3 Authority Key Identifier:
keyid:13:17:68:A3:6B:30:34:6E:3D:BE:BE:BF:87:B8:48:1B:AA:BE:3E:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Exdoo2swNG49vr6_h7hIG6q-Pus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C281/002013461D9911E2BC10668308B02CD2/Exdoo2swNG49vr6_h7hIG6q-Pus.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d5:11:5e:b6:0f:88:e0:5d:20:a2:cd:10:85:f2:e8:56:bf:
f1:1a:01:b8:00:90:b4:b5:7b:b9:49:a6:06:76:bf:ff:05:25:
99:82:fa:62:f6:e7:4b:f2:67:3e:df:6b:ca:c7:11:42:ac:d6:
5e:05:09:ac:98:6f:3d:2c:d9:25:66:cd:d7:6c:a1:53:68:a4:
2d:bb:61:6e:6d:bd:9e:46:20:ae:64:a8:c1:d1:90:8e:cb:ff:
d3:f9:4b:8f:99:19:30:0b:60:5c:0a:ca:e0:48:3c:f8:7b:55:
dd:1e:f3:a6:c9:11:3e:ca:9e:7d:1c:fc:b4:ee:62:25:ea:9f:
00:32:8f:6f:c2:02:7e:be:de:bc:c2:e8:c3:81:92:cf:4b:90:
5f:bc:32:8c:6f:12:bd:15:81:91:c3:44:ce:0d:15:13:3a:9d:
de:22:37:d0:35:91:03:27:18:14:80:ba:c9:81:7e:03:d5:92:
22:2e:68:6d:bc:5a:67:02:6f:4f:ae:dc:f5:96:79:14:d3:1e:
4a:62:08:04:ee:ff:22:ec:1b:82:ac:1a:dc:62:4d:39:75:b1:
d1:3e:57:b9:2a:ed:35:8b:83:22:74:71:28:7b:63:dc:b0:ef:
5d:ff:86:07:dc:b6:a1:44:42:3c:d5:f7:36:7d:72:87:e5:1f:
3a:ef:cd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:21 2025 by rpki-client