This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier: 8WlCpzcIKSuv81EVgEAmDXOR4Hn7SWpuVOSF8TwbWAI=
Subject key identifier: DC:F3:A0:DE:39:09:CC:27:12:05:86:06:DF:89:8B:D2:F1:52:4F:C5
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number: 0252
Signing time: Tue 23 Dec 2025 00:43:22 +0000
Manifest this update: Tue 23 Dec 2025 00:43:22 +0000
Manifest next update: Tue 30 Dec 2025 00:43:22 +0000
Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: 822/ajFY44GUIVoIrY1N9UTjzHakJ2iUQkRNT4DJDV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Dec 23 00:43:22 2025 GMT
Not After : Dec 30 00:43:22 2025 GMT
Subject: CN=6949e5aa-3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:c8:94:e5:19:e2:08:81:43:4d:00:c4:26:
cd:c3:d3:9f:b2:5d:94:dc:60:6c:e6:a4:23:0d:60:
c0:a1:d7:16:6f:d6:07:7e:00:73:c2:fe:68:16:d7:
26:2e:c0:99:e1:69:aa:c6:4e:18:8e:e1:e8:31:bc:
ae:bb:8f:4c:19:3c:b1:d9:c0:4a:2d:b1:d9:97:97:
ee:08:fb:46:b1:8c:18:2b:9c:2c:03:4d:c4:8e:44:
9d:ce:3b:b4:c4:76:d4:83:75:36:3d:6b:41:ea:cc:
44:16:5d:0d:14:70:8f:73:bd:f3:ef:ad:09:2d:e5:
30:1f:d1:76:44:f2:02:1a:bd:4b:71:97:f8:bf:b6:
00:e0:aa:69:58:82:7e:79:a3:43:18:0f:23:7f:33:
9c:72:57:70:89:f1:2c:52:c6:61:72:1b:fe:1d:85:
4e:7c:29:d7:f6:80:02:47:30:be:6a:84:12:ec:35:
5e:5b:bd:25:3d:e4:10:c6:e6:ac:98:1c:e6:0a:60:
77:fb:c7:9b:77:80:9e:c6:43:b7:3c:9c:cc:f1:a7:
f7:52:1c:e4:ef:1c:4d:c2:cf:26:f7:d3:c5:6c:f9:
af:7e:0e:ab:c9:78:98:67:63:ef:84:26:39:73:d1:
55:c0:33:05:d3:ed:16:62:97:9a:29:f8:11:66:df:
7e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F3:A0:DE:39:09:CC:27:12:05:86:06:DF:89:8B:D2:F1:52:4F:C5
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:af:58:2c:b1:83:ce:9e:c7:61:e0:db:3b:84:02:71:16:13:
1e:be:73:ab:3b:9b:e8:3d:29:a8:a6:2a:41:ae:8f:32:7c:c0:
25:56:78:1c:9f:8b:9d:92:94:01:ae:6d:f9:bf:a2:d3:72:99:
06:4a:eb:75:1e:91:61:2a:c0:82:ef:a2:af:f1:a7:54:aa:ab:
69:d7:7a:c7:c7:f1:d8:c7:53:b9:c4:5c:a2:5d:bf:b1:c7:cf:
41:dd:5b:d0:d1:6f:8c:81:db:f0:c2:5c:38:5c:2e:7f:95:e7:
fa:2c:6a:61:f4:77:a0:e7:1d:cc:60:94:5c:04:ba:85:56:98:
b8:f1:c8:60:60:25:1b:16:e7:ae:cb:1e:8a:2a:fc:14:f5:e9:
25:2a:f4:1e:1d:4c:fb:b3:36:fe:b9:ac:c0:f9:16:aa:1d:27:
69:22:cd:81:0b:04:d5:83:f9:23:90:8b:0a:1b:c1:93:d8:b3:
db:97:bd:8d:26:fd:ec:9e:1f:50:3b:9c:db:9a:40:4d:00:fb:
f4:bf:8f:13:55:04:c3:92:f5:ba:88:7b:d4:60:60:5e:e6:a3:
31:c9:c9:c6:c0:a1:e5:7b:55:15:67:c7:8a:a5:9f:45:ff:7d:
2a:73:b1:41:51:4e:d5:93:05:ed:aa:b0:03:83:8c:aa:1b:9e:
72:a2:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:21 2025 by rpki-client