This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json)
Hash identifier: WCyFkdNWve1L+WGUzsQCuUXxHCzOSoJuhfZIHeekbBA=
Subject key identifier: 62:AE:5F:20:7C:48:C0:0A:4A:2D:BE:A6:33:7C:A5:78:07:5B:E2:67
Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
Manifest number: 0294
Signing time: Tue 23 Dec 2025 00:45:02 +0000
Manifest this update: Tue 23 Dec 2025 00:45:01 +0000
Manifest next update: Tue 30 Dec 2025 00:45:01 +0000
Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: y5UXSh0PtYbbtwWVGKnhJVI95fOsd6+WwITbiEne5RM=)
2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: vUiqL1FpnlPYqefYhUAV6sUs/CDwSVo4hBehciV+Ep4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E
Validity
Not Before: Dec 23 00:45:01 2025 GMT
Not After : Dec 30 00:45:01 2025 GMT
Subject: CN=6949e60e-d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:28:af:c2:59:67:8c:1d:2b:ff:4a:d6:c2:
8d:5e:af:31:17:6f:aa:c4:25:a1:4d:d1:68:c5:49:
b4:39:35:45:32:c1:80:5f:17:b5:83:6d:45:4c:6a:
90:a9:9b:74:fe:b5:dd:35:89:49:ff:62:f8:e0:c3:
b2:11:99:97:50:10:87:42:42:6d:ca:ab:52:1a:66:
a1:ad:4b:11:a5:51:03:a1:14:a4:23:98:16:f1:40:
c8:78:c6:83:05:5c:16:3a:62:3c:22:7c:ca:70:a1:
ec:15:c1:71:b4:52:a2:d6:f8:08:3c:2d:a2:fc:2d:
00:71:22:97:64:d4:fd:cc:51:4b:9d:97:e5:41:c0:
27:b6:ec:e6:78:3c:a8:76:ce:fc:54:dd:8b:0f:01:
11:b3:3e:72:b5:25:35:25:96:63:00:63:2e:da:9e:
b1:71:5e:65:b6:e0:06:3c:75:ae:c6:e5:d5:b9:18:
75:ac:e6:e0:92:87:77:fa:5b:df:60:98:ac:b0:0c:
e0:52:14:ab:a4:40:35:67:33:7c:ab:5e:90:d3:f9:
a6:c9:73:38:6b:2c:f4:0c:c8:0e:77:5d:f6:3e:48:
87:3c:2e:ee:c3:cb:2f:3a:98:d1:d6:84:cd:3a:92:
38:bf:62:44:8e:16:8a:53:39:56:c3:4f:da:2b:83:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AE:5F:20:7C:48:C0:0A:4A:2D:BE:A6:33:7C:A5:78:07:5B:E2:67
X509v3 Authority Key Identifier:
keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7b:ae:50:0e:bb:07:ed:5d:30:5a:58:c1:bc:3e:ae:57:c5:
b9:cc:21:9d:e8:ef:3e:da:a0:46:17:dd:0b:8e:ac:d5:b6:d2:
62:b0:2a:52:33:a8:d5:c6:90:5f:a3:f1:7a:9c:82:e5:6b:0c:
01:84:7a:f3:78:e3:38:d0:0c:91:46:09:ef:19:b2:19:40:3e:
66:44:63:e9:0c:46:03:44:5c:23:3e:bb:0f:ce:63:2f:21:6a:
ed:f5:05:81:ca:a4:bb:82:38:30:8b:0d:43:41:df:a7:2d:7f:
4a:5f:76:dd:5d:08:e1:0f:c6:f6:94:52:93:9e:27:ea:4a:72:
85:1d:2d:aa:61:c0:3a:e2:a4:92:d1:cc:1b:ba:58:03:d8:e0:
2c:4a:f0:eb:33:e9:31:f0:ea:d5:6f:5c:2f:d3:aa:5e:e1:92:
d5:29:0b:40:4e:3c:1a:23:c8:9d:1c:5d:2b:47:e2:60:3d:0d:
14:c7:bd:61:a2:60:a5:89:ae:86:0c:7f:d8:fb:a0:73:ff:28:
1b:e8:7e:1f:80:6c:ef:2e:1c:3e:de:85:50:87:9a:67:0a:01:
ee:7b:da:78:38:d1:1d:bd:e5:32:11:85:06:7a:0b:d8:ef:11:
2a:ba:f6:5a:f3:4f:79:ae:62:ea:2e:71:4c:dc:5c:aa:50:b7:
dc:47:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:41:47 2025 by rpki-client