This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier: jD5DhfcUNU8Sf+t0B3GKhGB6MoPS3/+f6Y5BXw39cIM=
Subject key identifier: BA:82:50:CB:F6:D1:4F:D5:0E:82:5E:20:B6:8E:FA:92:BD:5E:A5:32
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial: 011D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number: 0119
Signing time: Sun 21 Dec 2025 04:01:07 +0000
Manifest this update: Sun 21 Dec 2025 04:01:07 +0000
Manifest next update: Sun 28 Dec 2025 04:01:07 +0000
Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: XqD80NDcx6BVPnJUUUSGip9SMCo/EPR046pzB2Shg7A=)
2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: 59HLMBrfjjdy7ZkLbK5ZAyw/H+2uYObVepiHANeb3uU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Validity
Not Before: Dec 21 04:01:07 2025 GMT
Not After : Dec 28 04:01:07 2025 GMT
Subject: CN=69477103-3ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:a8:78:1a:f8:37:cb:53:ea:05:5a:9c:a8:
1e:0e:58:cb:ee:a9:c5:d7:a5:2d:68:65:b9:8b:dd:
7d:9c:83:ff:ce:86:08:0a:c8:8e:29:84:d4:e8:15:
8d:58:51:20:83:eb:f3:cb:7b:17:ad:ed:a8:cc:07:
92:9d:78:b4:ab:47:26:7a:54:9b:4e:12:dc:aa:35:
09:88:d2:4e:cd:9e:e4:b4:19:bf:6f:d3:5d:cd:34:
56:6b:c5:02:f5:ec:49:b9:15:bf:b0:92:2a:01:65:
1a:c7:6c:93:2b:b8:98:4e:3c:c7:2b:e2:73:b0:33:
58:94:b2:4f:1f:d3:f1:f6:79:15:b4:e3:59:04:ab:
70:da:15:17:47:96:9b:0f:49:d1:35:5d:51:f6:b8:
98:30:96:6a:1e:c7:45:b2:96:43:d1:50:f3:ae:6c:
ed:83:04:39:5e:8b:00:5d:f9:32:a0:89:9d:d4:3f:
79:3c:ef:e2:7e:18:a5:3e:98:d2:ea:a7:16:26:44:
40:74:a5:4a:75:63:7d:7c:ff:23:52:8e:2c:b2:87:
44:c6:9c:11:e8:0b:00:ce:7e:14:49:98:73:68:9d:
d8:55:fa:c4:f0:25:53:c2:8f:73:ff:27:64:bb:a6:
e1:24:be:d1:7c:9a:db:93:9a:1e:ea:3e:04:4e:bf:
e0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:82:50:CB:F6:D1:4F:D5:0E:82:5E:20:B6:8E:FA:92:BD:5E:A5:32
X509v3 Authority Key Identifier:
keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:78:1b:f4:99:81:58:6a:d1:fd:2b:44:ec:7c:75:4e:fa:a0:
00:f8:97:d4:ec:23:4f:f0:c8:ac:54:85:34:a4:f1:c3:18:67:
46:ca:3f:e2:2c:9c:3b:f8:7a:39:4b:2d:99:d8:4f:3a:89:01:
14:de:22:43:8f:6b:ea:03:a0:40:c0:6d:bd:93:75:2f:48:d0:
8e:c9:d4:79:24:82:a7:4a:d3:9a:26:81:e7:e5:89:85:4b:bc:
b7:dd:87:2b:d7:86:8e:1f:72:93:b6:5b:5b:ba:38:e7:cb:73:
a5:cf:f2:b7:a6:2a:60:3d:b0:dd:87:6c:04:aa:4e:f1:fe:78:
90:d7:2f:2e:72:a0:d4:c3:32:be:be:c3:4d:a2:1e:19:3e:00:
b1:4a:1a:97:8f:33:be:ea:2f:d8:25:b3:95:48:62:78:c4:4d:
4a:73:bb:d7:8d:12:b7:d6:73:7c:36:03:eb:cb:45:26:f1:27:
b0:1c:35:27:53:f3:de:75:14:6b:76:87:5c:81:27:9a:d6:a9:
2c:13:f4:44:9d:ee:ff:f4:1e:9c:91:0a:bf:fd:e9:0d:6a:a3:
da:b3:65:cf:cf:f6:6c:41:3c:ad:c6:ab:ea:33:d8:6e:72:3c:
79:a5:c9:74:f9:8a:51:c7:a2:1c:6c:ec:66:8b:54:ed:f8:ec:
17:5c:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:18:15 2025 by rpki-client