This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier: TC38XcbYREXmUFZCez8929cHStncLJ6F9asMuE7aPlM=
Subject key identifier: 86:94:2E:E9:4E:B2:65:BF:DC:BC:4C:DD:82:C8:AD:B2:10:B6:E1:CA
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial: 01C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number: 01B3
Signing time: Tue 09 Dec 2025 01:27:02 +0000
Manifest this update: Tue 09 Dec 2025 01:27:01 +0000
Manifest next update: Tue 16 Dec 2025 01:27:01 +0000
Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: AHhoh0AbIFIOqYSB8QqmTwWs8CcG53QAds6wjiVabqE=)
2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: lULpYxQ3gZ5K9JeyYCVmHd0kWgLx0IwVRgcAaZxSkdk=)
3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=)
4: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Validity
Not Before: Dec 9 01:27:01 2025 GMT
Not After : Dec 16 01:27:01 2025 GMT
Subject: CN=69377ae6-1300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:96:7d:55:fe:36:3b:97:9f:28:eb:1b:fc:
5e:77:13:07:a9:3e:59:29:e0:ba:39:5e:d7:3f:5c:
31:2e:a6:c0:b9:a7:35:8c:a5:e8:82:cf:13:69:35:
01:12:18:63:78:73:aa:a4:a9:56:c2:e4:35:b1:11:
d8:03:d7:f3:1a:74:01:5a:bc:7d:37:98:34:05:92:
8e:e3:49:c6:ed:d7:60:ec:9e:93:10:e3:9e:92:59:
c5:00:68:42:93:3d:2d:02:30:0a:b4:f7:3f:bb:eb:
5f:1f:b4:40:3a:21:af:1e:0e:68:e6:3a:5a:45:26:
21:87:8c:47:8d:9e:95:48:7b:28:4d:54:2a:c5:21:
67:bb:d8:73:d9:77:b5:f2:9b:65:3b:93:d9:28:a5:
0b:95:b0:f8:a1:03:e6:22:98:27:ba:a7:99:07:57:
15:14:57:f2:3e:79:db:d9:e3:b2:f8:4f:a5:a7:bf:
17:72:c6:56:89:d2:de:33:b2:3d:b1:d6:c2:20:f1:
6d:9a:68:85:39:72:f2:2f:4a:6d:98:ae:53:65:01:
1f:89:74:ec:f0:4e:32:0d:2b:a0:2d:14:40:61:1a:
d0:43:bd:cd:76:2f:07:e0:33:c8:69:eb:2e:08:13:
a6:1f:d3:54:7e:ac:8b:e6:54:5e:59:2e:e2:29:4f:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:2E:E9:4E:B2:65:BF:DC:BC:4C:DD:82:C8:AD:B2:10:B6:E1:CA
X509v3 Authority Key Identifier:
keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:7f:05:41:1c:1f:56:2c:59:f1:36:7a:cc:e4:ca:9f:bf:ad:
4c:dd:53:3f:a2:d5:53:b5:c7:44:25:29:0e:3c:d7:01:6f:7e:
ad:af:c3:05:bf:b0:fc:fd:2a:e4:1c:9f:1a:b0:f1:5d:b9:8a:
b9:be:f6:53:2d:c6:4e:0e:31:c2:e4:63:21:cf:6b:99:e7:db:
1c:74:cf:6a:8c:41:75:7d:63:ae:17:00:db:c7:b3:8f:6b:3f:
9d:2a:84:dd:54:cf:65:b9:7a:c7:6a:15:4b:eb:5d:80:e7:25:
42:eb:72:1f:3e:a0:8c:b7:80:f3:02:7d:6b:75:1a:cb:8f:8e:
00:5b:3c:27:b3:42:de:5c:32:05:bb:56:48:bf:62:dc:8b:e3:
09:f3:38:a6:82:6b:13:3a:b7:12:10:61:6b:30:34:4d:f2:2a:
e5:24:6a:ef:54:94:05:a8:a8:b9:d7:18:17:4b:59:3f:af:92:
57:65:7b:fc:f3:cf:c9:e5:ec:16:30:f4:c1:bd:39:7a:a8:ad:
86:de:74:8c:4a:0b:cd:24:49:92:bf:9e:6b:3a:85:10:4c:a8:
ee:32:d8:38:c2:17:e0:f6:92:e0:26:ba:5c:da:58:fa:d7:d8:
ae:f6:14:2f:38:57:77:d0:70:c7:6b:2d:71:2a:c2:c2:e0:79:
3f:48:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:59:06 2025 by rpki-client