This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
File: aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft (raw, json)
Hash identifier: StRVjBbRPqqyClE0S9GXDgvLiOxQXce39rbLqyo4cv0=
Subject key identifier: CE:27:49:A3:F0:B3:12:4E:D9:7A:44:39:D5:80:2B:AD:09:35:6B:29
Authority key identifier: 69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
Certificate issuer: /CN=A917C6D9/serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Certificate serial: 0753
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
Manifest number: 074B
Signing time: Mon 22 Dec 2025 20:58:09 +0000
Manifest this update: Mon 22 Dec 2025 20:58:08 +0000
Manifest next update: Mon 29 Dec 2025 20:58:08 +0000
Files and hashes: 1: aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl (hash: GGzdHSKfS13Vnz3Op73AG3BpfU9eX/925V+y8unxdbA=)
2: 8F1629524FD411EB9F1A0673C4F9AE02.roa (hash: 0+1qqFR2dQAbs8bJZhkVHckF6TnHu8C+B8873r1KDqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C6D9, serialNumber=6969D150AD03482081BB1BD7C13BE5F00DC53A38
Validity
Not Before: Dec 22 20:58:08 2025 GMT
Not After : Dec 29 20:58:08 2025 GMT
Subject: CN=6949b0e1-b141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:a8:40:46:38:f7:d9:b9:8f:5e:77:81:e8:
4a:f0:63:4c:5c:f2:00:96:9d:9b:fd:10:81:e9:1c:
bf:42:9a:76:f9:61:46:2b:31:19:f9:a9:df:bd:88:
3d:99:39:51:6e:51:62:b2:9a:c4:b9:c7:f3:05:d5:
95:81:d2:94:0e:2e:8f:33:01:9c:f1:94:8c:a3:13:
4f:7f:9c:85:f0:fd:c8:d2:28:59:48:97:72:3c:60:
6e:36:d4:ac:f4:e4:cc:1f:6f:9b:ab:3f:32:86:32:
46:82:c8:54:1d:6e:e0:58:3c:00:88:51:e0:8e:4c:
d7:94:c4:63:9d:a2:25:4a:d1:9b:de:ce:9f:b8:1e:
3f:17:69:b3:37:cd:94:4e:3b:79:3b:31:cd:55:5f:
83:d5:21:c9:5e:f1:51:1f:56:85:63:ef:fa:f3:08:
8d:4c:b0:e2:cc:0c:9d:ba:f7:b4:97:39:58:4a:2a:
15:b8:d4:b3:0f:b8:ba:f8:1d:53:aa:19:44:99:6e:
4b:f0:9f:a7:d2:e1:1c:2f:3a:44:b9:06:72:42:f3:
3c:68:1b:8c:50:3b:91:70:2e:ad:65:52:17:06:ab:
27:a4:26:5c:9c:de:d5:f2:ed:6c:31:45:2d:23:2d:
1b:91:2b:1c:f0:0a:cd:6f:88:3c:79:a2:42:1b:2a:
0d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:27:49:A3:F0:B3:12:4E:D9:7A:44:39:D5:80:2B:AD:09:35:6B:29
X509v3 Authority Key Identifier:
keyid:69:69:D1:50:AD:03:48:20:81:BB:1B:D7:C1:3B:E5:F0:0D:C5:3A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnRUK0DSCCBuxvXwTvl8A3FOjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C6D9/6A5F13244FD111EBAFB1676BC4F9AE02/aWnRUK0DSCCBuxvXwTvl8A3FOjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:28:0f:63:be:8c:65:4f:97:ab:0a:80:eb:53:de:25:f1:06:
8f:93:fd:6d:46:db:c9:ed:23:3c:a3:dc:b6:ef:0e:ab:0f:1c:
fc:54:f2:81:63:be:32:37:0d:a8:da:8f:d3:e9:38:59:40:d9:
d2:6a:b4:ea:40:fd:c6:7d:f4:dd:5c:52:fc:62:17:c5:ff:fd:
2c:92:98:c4:12:cf:45:73:65:2a:ef:d4:6b:41:4b:99:61:4a:
23:4d:e7:62:ab:04:ce:45:9b:9c:cd:3f:e0:6e:d4:ba:cf:90:
5c:88:c5:b2:72:99:1d:2e:44:03:5a:e2:ec:b3:30:7d:f8:5c:
16:ac:19:9c:90:e2:b6:b4:e7:83:8f:99:2e:81:5c:04:6d:84:
7e:8c:f6:56:87:74:34:48:9e:61:61:89:75:f4:88:71:bc:47:
55:19:2d:77:a3:c6:e8:39:7a:1b:8b:38:1a:29:a9:9b:0e:9e:
d5:50:28:2b:6a:79:b4:5f:3c:3c:af:0c:4a:fe:6c:80:1f:c1:
4b:51:31:94:5c:42:f7:66:c6:87:13:b3:0c:76:89:29:14:65:
33:59:d6:f6:61:ef:58:ea:d9:a8:65:90:16:66:4b:f2:4c:f7:
2a:8e:a3:21:b7:50:dd:4d:19:8f:30:0c:03:85:b6:30:20:1d:
93:7d:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 06:42:31 2025 by rpki-client