This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
File: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft (raw, json)
Hash identifier: gz5MHnamuwAwEWGmV/lEaXcMsVveH+DK7Tg2YG4OSEo=
Subject key identifier: 71:B1:77:94:3B:3A:E2:FC:31:5C:3A:6B:B7:6A:0B:51:E3:ED:72:F7
Authority key identifier: 48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
Certificate issuer: /CN=A918387F/serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Certificate serial: 0690
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
Manifest number: 0690
Signing time: Tue 02 Dec 2025 21:30:14 +0000
Manifest this update: Tue 02 Dec 2025 21:30:14 +0000
Manifest next update: Tue 09 Dec 2025 21:30:14 +0000
Files and hashes: 1: SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl (hash: BP/0Wmi8jjtVQWwoGwc8NKsd1Z/BEGmOOTx6qMQYkJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 21:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918387F, serialNumber=480BCD9EEA88F0A6DA17DF9843B9BA6F59C27E9E
Validity
Not Before: Dec 2 21:30:14 2025 GMT
Not After : Dec 9 21:30:14 2025 GMT
Subject: CN=692f5a66-601d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:cf:13:4b:e2:83:9f:97:b6:5b:49:90:ed:
e9:bd:cc:e6:f5:a7:91:5d:6f:b9:da:26:8f:7a:6a:
80:e9:95:cf:5c:d8:cd:1d:0c:ca:a5:62:f3:89:8c:
1e:ac:5a:75:fb:3c:a2:85:3f:d1:43:f8:d9:ca:9a:
b2:36:c5:81:00:37:c4:5a:27:ec:0a:fa:bd:ef:c9:
3e:a0:7b:d4:24:fe:f4:d3:43:45:6a:6a:4a:1d:c3:
2b:28:5f:8d:7b:06:c2:08:54:62:2b:e0:8a:ee:2b:
7d:db:9c:37:a6:2e:c5:37:6a:82:97:60:c5:52:f3:
9a:0e:55:9e:26:07:b7:d8:ee:c4:94:5b:24:4b:e8:
dd:54:4f:f7:43:55:4c:54:5b:ff:bd:53:9d:21:33:
85:b0:18:39:0e:db:7f:4a:de:d0:ff:88:64:8f:e8:
a1:8f:6d:d3:dd:c5:fc:1b:59:78:eb:b7:c6:75:62:
a9:88:56:f8:5d:82:cf:54:c6:a7:af:ba:0a:03:5c:
db:d1:de:36:a5:a4:44:ff:6c:c1:d0:92:e9:4f:b9:
95:b2:19:95:15:e8:e0:78:c1:d9:30:27:61:09:dd:
73:ef:7b:1d:16:f2:7b:24:80:9f:80:92:98:c3:ec:
33:ce:6a:26:aa:b3:7c:5b:74:3a:e5:36:df:71:9d:
5c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:77:94:3B:3A:E2:FC:31:5C:3A:6B:B7:6A:0B:51:E3:ED:72:F7
X509v3 Authority Key Identifier:
keyid:48:0B:CD:9E:EA:88:F0:A6:DA:17:DF:98:43:B9:BA:6F:59:C2:7E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/ABA2196C934211EBA3769B79C4F9AE02/SAvNnuqI8KbaF9-YQ7m6b1nCfp4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:86:1e:b4:32:c0:ba:34:a0:63:e1:c9:e8:47:4c:c5:61:
b9:b7:a1:ed:e1:08:b6:c4:69:a4:fb:e4:20:e8:6f:e9:77:e5:
35:cb:c7:0d:19:86:7d:a4:c5:1d:84:a8:3a:54:a1:cf:ce:d4:
3a:a6:f1:bc:a8:89:ae:c4:b1:8a:ae:06:05:34:af:98:81:7f:
34:a7:67:47:0f:7c:02:2d:bd:3f:bd:62:bf:7d:7b:41:9c:4b:
8f:d3:1c:ff:be:bb:f5:ca:a0:5a:7b:8b:23:be:13:11:a4:c7:
8b:c8:f0:96:34:09:8a:79:cf:44:2f:93:07:65:d0:38:9a:b8:
79:93:96:79:35:71:00:98:ea:86:e7:b7:61:1f:fb:0b:fa:f0:
95:20:11:e4:77:1c:bd:4a:4d:7c:47:fc:a8:f4:fc:63:24:cc:
23:b1:11:6a:12:42:14:ca:b0:e2:5b:22:13:d2:2b:32:3d:56:
a9:dd:ba:92:c3:4a:dd:25:84:bd:be:2a:19:63:ea:86:a4:a1:
ae:fc:92:5a:74:ed:49:3d:4c:67:53:f5:65:2c:b9:9e:19:51:
cf:08:de:54:e7:80:e3:51:8d:c5:65:a9:20:06:a4:07:e8:62:
06:9b:e4:3f:ec:2b:d1:58:20:c3:6c:84:91:04:cf:e2:31:f7:
ae:43:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:46:51 2025 by rpki-client