This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier: G+QDFvww7awlrr3NaVEoDkYibxP/7yennZjr/9pyvTU=
Subject key identifier: BC:E7:A9:4F:0C:3C:19:94:79:7E:A3:CF:08:11:ED:D1:84:CD:82:46
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 06D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number: 06BC
Signing time: Sat 20 Dec 2025 21:38:52 +0000
Manifest this update: Sat 20 Dec 2025 21:38:51 +0000
Manifest next update: Sat 27 Dec 2025 21:38:51 +0000
Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: p53p+Bips3zaUWz+vZdE5NseWAlGPjPsB0w/BsjEacI=)
2: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: jnC/bVKzkBW2sgZUOJOTTr6DZW8ZjwQTZXz1lcwwzCM=)
3: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: DQnHl31CJCa6fulX34rSYao3uxop1q0eB7CtOK8kjP4=)
4: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: UrlgPQXsb4gQDscf1nttcVc31km04Zvk2KGgC6tLDaQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Validity
Not Before: Dec 20 21:38:51 2025 GMT
Not After : Dec 27 21:38:51 2025 GMT
Subject: CN=6947176b-9ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:9a:34:30:ee:6d:b6:3f:29:d7:24:29:06:
24:90:4d:77:26:44:3a:eb:0b:bf:52:a1:30:21:7b:
6e:3f:27:6d:24:88:04:01:ed:3b:41:6a:77:36:53:
af:1e:be:59:78:78:05:1d:0e:97:ad:c9:ec:01:8e:
14:46:04:28:a6:d0:f2:74:65:6b:2b:9d:50:bc:6e:
80:c2:f1:7b:bf:00:ff:a8:34:3d:d0:75:c5:11:c7:
1d:85:6a:86:43:a2:50:c2:62:17:08:63:dd:6d:aa:
61:15:f2:b6:ab:92:f7:e7:54:76:c9:7d:95:c4:53:
31:8e:16:96:64:c7:87:e3:80:11:89:77:15:13:a0:
44:ab:e5:c9:f1:1c:fa:1d:59:d8:46:9b:d1:0b:9a:
9b:09:ca:bd:7f:b5:bc:02:2f:63:80:89:9b:89:0f:
72:6a:0a:1e:cd:53:6b:e9:ea:31:04:d7:e2:a9:d1:
5f:99:45:0d:ba:06:bb:5f:3b:7c:e7:85:f6:05:39:
43:42:e7:5e:cf:7c:f7:5b:c4:a6:cb:5c:9b:4f:ce:
c5:47:71:74:ad:b2:f9:25:32:51:3e:70:fc:ba:a0:
17:47:b2:82:cc:5c:66:8b:ad:82:d3:3d:aa:53:50:
a5:9a:2a:15:c9:bb:b1:21:d4:33:08:41:b0:2e:09:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:A9:4F:0C:3C:19:94:79:7E:A3:CF:08:11:ED:D1:84:CD:82:46
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:50:53:e7:16:37:79:ce:4f:db:db:f3:e8:36:5c:c2:40:77:
51:ac:5c:f4:22:c9:8c:aa:b2:28:53:98:6c:93:ac:ec:b0:4a:
97:8c:7b:50:aa:24:15:e8:53:da:57:fc:f1:e9:39:6f:b0:46:
14:f8:a2:56:42:74:df:e9:59:7a:56:ef:7a:53:0c:c8:3b:b9:
dc:59:16:97:ba:c2:ee:ef:0d:26:47:5b:41:49:1f:02:85:dd:
ba:7d:8d:71:2c:64:05:60:44:f1:c7:0a:e0:61:05:97:7a:b4:
3d:09:f8:14:38:49:12:30:29:d1:e5:f9:25:15:d1:94:1b:c7:
2e:b7:e5:15:9a:d1:9b:74:ba:37:7b:f6:b0:08:81:ca:4b:d3:
b8:a0:71:96:fd:e9:44:ac:3f:0c:57:f8:22:e8:02:23:0a:7b:
83:05:e1:e4:d1:b2:a6:b2:ab:f2:c4:b6:d5:20:31:ac:a0:8e:
59:fa:59:aa:48:4c:11:9c:0f:8a:2e:3a:ef:64:d2:fe:92:7d:
d8:ce:29:f0:28:42:74:2b:73:03:86:87:6b:3a:ca:86:db:29:
f3:ee:26:52:c5:2b:ae:db:f2:f1:b1:66:5a:d0:0d:e0:97:2e:
3d:1c:db:11:c7:db:11:03:eb:c9:a3:cb:4a:64:29:d0:63:69:
aa:39:e2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:12:09 2025 by rpki-client