This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier: 4dW5GeBmQWE07TQVWh27T/EFN7vpUDoYPI3vXPebXzY=
Subject key identifier: 8B:AE:3B:AE:66:F1:FC:5E:2D:04:F1:D6:DB:84:0E:2B:19:99:FE:77
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial: 073D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number: 0729
Signing time: Sat 20 Dec 2025 21:09:49 +0000
Manifest this update: Sat 20 Dec 2025 21:09:48 +0000
Manifest next update: Sat 27 Dec 2025 21:09:48 +0000
Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: pov+FXDWWGY2so4ujOkR9x+iMj87UXUHPJbv3ZwYVcA=)
2: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: 3pZFB7pMfCt+Nb4YQaCn5c2ZIXFgDeE9u77BOFaXST0=)
3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: ivarDOVLEK1o/i2e326AVwZq4fhbkuq+7lnjx1EVCHE=)
4: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: gBF4oLr31oWPGA7GjogpSpsWc/XlGgo5urUgCfPiOZQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1853 (0x73d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Validity
Not Before: Dec 20 21:09:48 2025 GMT
Not After : Dec 27 21:09:48 2025 GMT
Subject: CN=6947109c-ce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:e6:2f:23:1e:31:2a:c9:82:28:43:0b:f8:
79:9f:05:93:da:d2:7d:dd:d1:6a:da:a6:62:e6:4e:
52:b4:ae:86:7d:18:85:2e:2c:9f:40:64:5b:e6:a7:
93:0c:e7:5f:37:0a:a6:a8:70:0c:de:d0:39:f4:3a:
71:cf:89:82:28:80:89:11:f5:ab:42:74:34:39:43:
0d:13:48:6a:53:6a:bc:ed:ee:a6:80:9d:0d:b1:cf:
f3:61:eb:86:e6:0e:71:57:c5:ed:9f:c5:77:ee:f7:
fa:8e:81:0c:fe:81:04:60:50:6f:86:b5:b2:0a:e0:
44:b8:e9:02:6f:5b:66:fa:4d:69:45:56:e4:2c:c9:
5e:c8:c0:fd:0a:b7:05:97:63:f0:27:72:68:3f:93:
68:25:bc:c9:d4:7e:5c:33:e9:27:fd:4b:f9:49:21:
db:01:bc:8d:67:78:b4:f3:76:d7:07:bf:07:4b:06:
6b:24:85:4a:55:20:34:15:c2:1b:52:0f:65:b6:de:
41:14:03:63:5a:80:91:fa:98:50:ce:ff:e9:7e:16:
9e:5a:82:97:12:a7:d3:ff:80:82:0d:5d:df:07:6f:
4d:d0:dc:25:a1:37:b7:5f:44:ad:f2:ce:e8:67:80:
21:7d:f9:ff:11:4a:b3:de:e8:4e:f9:b5:cd:b9:bc:
ca:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AE:3B:AE:66:F1:FC:5E:2D:04:F1:D6:DB:84:0E:2B:19:99:FE:77
X509v3 Authority Key Identifier:
keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:de:08:6b:06:b7:30:44:51:8b:16:4f:23:f1:c4:b5:d0:4b:
e4:7f:32:91:f9:32:2e:de:b6:88:17:25:df:62:61:a4:6d:c3:
bf:db:39:c9:ce:d5:b7:d5:27:de:7e:99:17:14:2c:c3:c8:d2:
99:9a:ef:5e:1b:48:78:56:3c:ad:ce:ff:61:8a:e7:a2:d5:b4:
d7:bb:98:31:d7:08:de:cd:be:7d:d4:e7:50:00:63:d0:7b:fd:
8a:3b:24:78:69:93:8b:7e:73:f1:54:52:d5:d0:24:7a:79:73:
85:b2:90:41:67:8e:3f:98:ee:f7:db:c9:31:0b:f2:09:0c:6b:
d8:86:55:68:cc:9c:a7:c7:cc:0b:41:17:78:34:70:b8:4e:e3:
fe:36:bc:a1:41:34:d3:17:be:24:f3:09:55:d4:2a:c8:c0:f9:
2a:99:7a:60:bf:3b:48:18:7a:be:e5:83:1d:ed:6b:d8:b0:09:
5c:d4:be:e7:6b:e5:a7:57:b4:11:ac:3c:7d:84:c2:99:34:0b:
56:e0:c8:07:11:d1:3e:9c:82:4c:0b:c5:b3:0e:5e:e4:f8:b1:
5a:2d:5f:8b:1f:6d:2d:4d:39:c8:bb:bc:2a:ba:a8:e7:87:3f:
a2:85:d1:ed:18:66:46:ca:84:b6:90:68:6a:62:18:9f:20:64:
4b:dc:22:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:58:53 2025 by rpki-client