This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File: AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier: mdpYnipQFzKIBy7Wa9tX6TD6pl1364uEUFv5cwZHjPA=
Subject key identifier: 94:A4:3E:C7:64:09:C0:6E:D7:8D:30:AE:A3:72:78:67:2E:44:B6:56
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer: /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial: 34EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number: 34EE
Signing time: Mon 22 Dec 2025 15:04:11 +0000
Manifest this update: Mon 22 Dec 2025 15:04:11 +0000
Manifest next update: Mon 29 Dec 2025 15:04:11 +0000
Files and hashes: 1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: 6r51ge/6zpexmADLfzf8X6PVYAdCqURmSX3Bx33wpO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13550 (0x34ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Validity
Not Before: Dec 22 15:04:11 2025 GMT
Not After : Dec 29 15:04:11 2025 GMT
Subject: CN=69495deb-5a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:00:b9:5c:2b:7d:88:6f:e5:23:d5:d7:96:
f2:5f:55:39:89:48:ee:ae:f9:4f:ae:a5:26:ee:72:
91:09:9b:c9:41:ee:4d:17:7f:1f:4e:65:a4:9b:6e:
ac:d8:46:66:a2:ab:8e:95:4f:30:07:f0:67:45:85:
00:36:8f:09:00:a5:10:ca:d8:22:1d:3d:31:b3:e8:
52:ae:89:5d:c2:9b:87:02:a3:12:93:38:72:6f:13:
a5:2a:8a:cf:62:de:0b:fd:c2:3a:8d:bc:bf:90:be:
c2:75:cf:f7:ae:28:42:6e:35:53:96:7e:d5:f6:bf:
46:62:a2:04:5a:b2:24:73:4d:17:b4:59:4c:b9:ff:
8c:c9:67:43:9c:73:65:d6:67:5c:46:94:85:1c:47:
d5:72:cd:26:e0:97:0b:46:ab:e1:f3:86:1d:7c:a0:
55:63:46:8c:70:28:94:c8:e6:82:34:bf:63:2b:66:
ab:fe:ae:c8:00:8e:a4:09:11:a2:a2:63:2f:f5:7a:
07:fa:59:c7:fb:65:7f:c6:de:cb:24:96:f8:20:7f:
37:23:bb:be:14:76:a3:48:0d:93:d2:e2:95:1b:ed:
a1:e4:ad:04:6a:b5:94:e8:4b:aa:2d:09:c8:31:1d:
19:aa:5a:6f:7f:0d:c5:d3:2d:f6:f1:3d:aa:15:c0:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:3E:C7:64:09:C0:6E:D7:8D:30:AE:A3:72:78:67:2E:44:B6:56
X509v3 Authority Key Identifier:
keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:36:7f:f3:d3:2d:25:0a:fb:4b:c8:3c:4f:e1:a8:b7:94:
47:67:03:2b:cf:06:32:30:97:63:e2:7b:80:13:d3:5a:8b:d1:
2a:46:b2:02:3a:fc:e3:9f:5b:8a:19:dd:92:a2:99:86:54:f1:
b3:6b:b4:a8:26:f4:5a:f3:22:b5:64:3e:71:5d:01:6f:a8:17:
da:16:d0:d2:3e:fa:a1:21:f6:9a:ff:74:f3:f9:fa:cc:96:42:
e1:50:fb:19:dd:85:0f:83:07:ac:48:c2:e9:0f:0f:cd:c7:1d:
63:d6:95:cd:82:64:80:58:57:62:03:eb:27:71:28:72:82:2c:
7d:fd:ab:76:95:34:05:c2:92:be:e2:48:10:e4:c1:01:b7:65:
93:c7:cc:37:c8:58:f7:a7:5f:85:ec:ed:5a:6e:20:a4:a4:cd:
84:44:90:e1:cb:4f:36:f2:cf:f6:11:be:c2:c3:7c:26:a0:7d:
78:7a:d6:e1:e6:bf:f0:f6:fc:4c:9a:6e:c4:7d:00:d1:2b:34:
cc:74:67:40:1b:e9:a5:dc:d0:e5:7e:33:e8:ff:62:d9:87:d9:
ce:1d:b2:ec:ce:04:a5:57:4c:95:4c:bf:60:5a:90:6a:9f:ce:
a1:0c:ff:6e:4e:bf:07:9b:51:cd:9f:6d:c1:31:31:9c:5d:d7:
7d:dc:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:41 2025 by rpki-client