This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
File: 480mJgfLdDTJiY967Pbnw2o09pM.mft (raw, json)
Hash identifier: nXG68fRW4DsBUlCLaOKAQBbg1kytyBUMsTFlB71zvEA=
Subject key identifier: C2:75:86:4D:96:2D:0C:63:22:A8:30:3F:B9:06:4D:C5:72:E8:E6:BE
Authority key identifier: E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
Certificate issuer: /CN=A9183B33/serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Certificate serial: 05CE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
Manifest number: 05C7
Signing time: Mon 22 Dec 2025 21:33:48 +0000
Manifest this update: Mon 22 Dec 2025 21:33:48 +0000
Manifest next update: Mon 29 Dec 2025 21:33:48 +0000
Files and hashes: 1: 480mJgfLdDTJiY967Pbnw2o09pM.crl (hash: 6fhXzI/e2You6O0URkDIBiLaQb0plc3BPi6HvsvplA4=)
2: 0F106C42E9BF11EB9287F045C4F9AE02.roa (hash: RvNzl03JDVUp48sMZXLXZA1zzsN0lAMQGmHnXdeMUAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1486 (0x5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33, serialNumber=E3CD262607CB7434C9898F7AECF6E7C36A34F693
Validity
Not Before: Dec 22 21:33:48 2025 GMT
Not After : Dec 29 21:33:48 2025 GMT
Subject: CN=6949b93c-e79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:ac:2e:18:70:74:8b:20:81:f4:5f:d3:81:
cd:ec:16:24:b8:99:16:a4:72:50:e7:15:8b:de:50:
a2:95:f3:b2:3c:eb:38:38:a2:07:9f:ad:c4:f8:56:
22:46:3a:7b:fe:a9:27:4f:0b:ef:3a:91:a8:30:e6:
9e:12:dd:e7:72:f8:c7:95:7f:7d:7d:ed:c9:a2:b7:
95:60:c1:cb:15:f0:44:4d:5c:a4:9d:93:66:33:a6:
57:09:8e:7c:cd:2a:f8:5e:ad:89:33:62:0e:1c:df:
d8:69:4b:b1:4f:06:62:52:e6:4d:03:25:89:33:a8:
9f:3e:a0:d3:26:aa:5e:c6:9a:97:bd:e8:f4:ac:08:
f7:32:0d:e0:9d:b9:71:84:b3:df:93:d6:a7:bd:fb:
a9:00:fb:6e:61:df:be:c4:cd:0f:6f:f8:b9:d1:a8:
d2:25:f0:28:9a:02:d3:dc:f1:01:fa:7c:bd:4e:f8:
3a:a9:94:9b:c2:10:b6:56:1a:5e:72:c6:67:a1:02:
f2:6e:15:6b:0a:0b:70:e8:43:bc:92:0e:19:3b:d4:
87:6d:c4:45:f5:6c:1c:d5:ee:ac:61:df:f8:42:92:
7b:7f:7f:e0:cf:f9:f7:f1:26:b1:2b:17:e0:e6:12:
ec:04:cc:3a:3e:fb:a8:a8:af:6c:2e:8d:21:9e:35:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:86:4D:96:2D:0C:63:22:A8:30:3F:B9:06:4D:C5:72:E8:E6:BE
X509v3 Authority Key Identifier:
keyid:E3:CD:26:26:07:CB:74:34:C9:89:8F:7A:EC:F6:E7:C3:6A:34:F6:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/480mJgfLdDTJiY967Pbnw2o09pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/B2AB3758E9BD11EB825C7526C4F9AE02/480mJgfLdDTJiY967Pbnw2o09pM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:1e:f5:52:a2:4a:e1:93:6b:60:9c:b2:5a:96:f1:ed:ce:ef:
38:cf:9f:0f:85:e6:6d:12:99:bf:02:5e:fd:29:a6:40:c5:d4:
dd:8e:a6:c8:23:10:b9:04:c0:c1:34:2c:50:eb:7e:1c:79:f0:
5c:99:ec:fb:e6:d8:00:6e:60:4f:2f:a8:6f:08:7c:15:d4:31:
9e:8b:fe:ad:20:d9:3e:f5:79:70:78:f7:dd:b1:aa:84:b7:7a:
25:82:4d:79:e3:d2:e3:1d:6a:33:a0:a4:09:33:16:a3:38:1e:
a2:c3:41:0d:7e:2c:5b:ee:8d:e7:dc:d4:ba:8d:94:ba:fa:7a:
7d:8c:0c:01:7d:c0:a5:b7:4d:8e:3a:f9:64:45:b6:69:78:5e:
2e:b4:d3:6a:20:40:5e:aa:da:aa:58:96:66:91:73:0a:e6:8f:
93:99:69:fd:ab:c8:23:c8:28:f8:04:f6:99:58:4a:c5:9a:17:
3b:ed:64:1a:65:6d:3c:74:bf:34:ae:89:ff:8e:5a:98:d9:7a:
d8:3f:df:0a:23:56:df:59:ba:bb:62:e5:77:95:f0:66:45:df:
ab:11:a7:89:10:2a:67:7d:cf:78:54:70:5e:70:2b:9c:b2:e9:
5c:c6:a2:7b:79:85:e3:95:15:c2:56:6a:73:eb:c5:a5:19:27:
57:4c:fc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 18:18:39 2025 by rpki-client