This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json)
Hash identifier: GHn+i3VWt5qEyrMN1zO7wT3WpuqKeX976bhpGGsivsk=
Subject key identifier: 42:59:8E:FB:BD:3B:D0:A6:41:69:67:DF:5F:39:AF:9F:50:9B:43:BC
Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Certificate serial: 02F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
Manifest number: 02E7
Signing time: Tue 02 Dec 2025 23:57:48 +0000
Manifest this update: Tue 02 Dec 2025 23:57:48 +0000
Manifest next update: Tue 09 Dec 2025 23:57:48 +0000
Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: bNUXA4j0fKQNkC44UXOjcDhcYhAZ08eCAwBzJOTGjw4=)
2: FAF865AACB6B11F0A831E06BC4F9AE02.roa (hash: 38sgRw7lbQYMoiP7J/pdM87ivbZafpdULxwddXG9uZM=)
3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=)
4: FBDFC922CB6B11F0B7DCE06BC4F9AE02.roa (hash: ArS5AGPHgEHvdQtpL/879+l26sBrIJGIKuKFDkTzfqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 23:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756 (0x2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789
Validity
Not Before: Dec 2 23:57:48 2025 GMT
Not After : Dec 9 23:57:48 2025 GMT
Subject: CN=692f7cfc-fc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:5d:cc:0c:67:42:74:6f:53:ea:27:69:35:80:
89:2d:0d:e8:a8:a8:0d:8a:31:9c:26:17:49:47:cf:
c3:8a:4f:64:e0:59:f9:32:65:2c:72:de:b6:8e:1f:
4d:30:6e:f2:f2:73:8a:2f:07:a1:a0:8e:68:c4:5e:
b5:41:02:18:21:d0:29:22:57:c7:6b:80:69:47:50:
48:8b:a1:3b:5a:fc:e9:d0:cc:ac:1f:fe:fd:b9:8a:
eb:32:e2:30:9d:fa:5d:6b:3d:29:89:87:d5:f2:f9:
f0:24:4d:5a:d4:04:be:d4:a4:a4:8b:36:0b:8f:f3:
80:42:e7:7d:19:80:8b:69:d0:7f:8c:85:b5:64:a7:
db:3b:a3:18:b0:ba:95:e8:c7:99:cb:df:c8:9e:1c:
09:6d:a4:ac:04:fa:db:b6:90:c5:fe:c2:7c:5e:58:
87:26:fb:95:63:05:3c:35:62:97:06:25:56:9b:00:
c9:20:ba:2b:8f:8e:01:8c:6b:4a:c8:7a:01:43:7b:
56:17:99:60:db:e6:8c:2b:10:fe:e4:f5:e0:fc:2b:
70:56:dd:d3:86:ea:15:54:07:67:2d:79:97:54:c5:
c8:56:0d:28:b9:da:2d:d7:ec:b2:66:4c:87:4e:e3:
6b:7e:76:53:9d:80:96:45:8a:20:58:fe:3b:ec:2d:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:8E:FB:BD:3B:D0:A6:41:69:67:DF:5F:39:AF:9F:50:9B:43:BC
X509v3 Authority Key Identifier:
keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5a:9e:48:b4:b2:b5:dd:17:13:a3:d5:66:9f:43:56:a7:61:
62:82:68:b3:b8:46:be:f2:31:f0:bc:b7:75:8b:ba:06:bb:ac:
00:30:44:c6:a3:9c:15:17:f7:a1:09:61:7e:44:ac:32:a9:24:
6a:86:9a:76:27:1d:33:1c:7a:8c:c0:5c:18:d2:63:ba:2b:55:
a3:45:dd:e8:f9:f3:06:25:dc:93:9c:50:49:8e:2d:45:c4:35:
e0:4d:a4:c1:9e:cb:7c:09:b4:22:21:ce:6d:0d:2e:f9:37:25:
e8:1f:9d:23:c7:f3:52:72:78:9b:94:38:be:68:90:4c:8b:1b:
77:1b:c1:c3:97:93:83:0e:15:1e:82:d7:db:bb:78:0c:47:33:
f3:8e:b3:c8:dd:6b:8d:10:98:91:dd:c2:6c:a3:93:a6:43:ca:
1d:88:1d:bc:d8:ef:00:8b:4c:68:eb:ba:14:bc:b2:25:60:d4:
f7:14:d4:2a:53:ca:a4:6b:b0:78:40:b7:5d:74:cb:23:2b:89:
f4:e3:01:74:0b:0c:f1:39:f6:d8:fd:35:b3:3e:fa:a8:94:a7:
58:07:b2:bb:fb:df:de:9d:43:01:9e:c0:34:9c:af:87:66:2d:
e6:ad:ad:02:40:ad:58:af:22:8e:89:14:35:ba:c5:8f:b4:cd:
53:63:9c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:58 2025 by rpki-client