This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier: c4Z/zwgdJTVd7HUIBUyeXwzEtEwuC7SUxtVRnlOws/Q=
Subject key identifier: AB:54:DE:F4:DD:D4:89:CB:C9:4A:5A:B2:6A:D6:47:EA:FA:E8:8F:85
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial: C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number: B8
Signing time: Sat 13 Dec 2025 05:56:28 +0000
Manifest this update: Sat 13 Dec 2025 05:56:28 +0000
Manifest next update: Sat 20 Dec 2025 05:56:28 +0000
Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: 8ul2mw7mgePgMsoOvoCjsZAw5Xt84GHfhGKqwAnxirM=)
2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: G7Rh/kD9ovidahZtN/DccolLPZ5w6zif+prC8czAfkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 04:23:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Validity
Not Before: Dec 13 05:56:28 2025 GMT
Not After : Dec 20 05:56:28 2025 GMT
Subject: CN=693d000c-4ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:8e:36:b4:5e:b9:cc:3f:bb:ed:13:81:e3:
3f:f8:ae:bf:f4:85:08:5f:a6:92:e2:60:7f:67:2a:
c2:01:dc:9f:4e:4a:a9:f5:a7:40:d7:d2:98:19:bf:
80:be:49:a8:ff:ef:0c:8b:91:5b:28:5a:71:24:09:
14:dc:e6:59:ae:de:18:59:96:0e:d9:73:62:19:7c:
34:40:c1:ff:53:14:7e:86:0e:aa:ee:b8:82:ae:c5:
0a:c2:ba:93:b0:0c:d1:0e:78:07:a2:d6:d6:3b:4f:
e1:a4:02:50:60:9d:8e:53:0c:15:ac:b3:97:fd:4b:
cf:24:d5:ec:c8:a0:86:54:42:93:cc:86:dd:a5:18:
5b:e3:b4:b3:62:c5:8a:c9:ab:4b:29:34:4e:ee:0a:
97:2d:1f:3c:0d:79:c1:25:5c:33:b7:4c:95:a4:92:
98:98:bc:3d:64:ff:5a:fc:e0:83:74:6a:c8:52:f9:
b3:4a:69:c6:6f:05:63:00:c2:d3:c1:25:34:5f:90:
a5:c1:58:52:b3:45:ba:8c:16:6b:fd:08:b5:ad:58:
45:8c:d8:cd:a1:54:5b:5a:52:55:f6:2c:7e:3e:a7:
d5:96:ef:c7:41:1d:1c:39:c8:b5:3c:d4:69:23:0d:
ba:33:32:8c:7c:20:fa:64:fe:9b:8a:7d:75:8b:72:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:DE:F4:DD:D4:89:CB:C9:4A:5A:B2:6A:D6:47:EA:FA:E8:8F:85
X509v3 Authority Key Identifier:
keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:45:92:62:96:70:25:91:fe:0f:81:61:4d:8b:9c:1a:05:
b6:d4:e1:02:a4:99:16:da:56:59:09:67:80:ae:b8:95:39:99:
73:db:d7:95:9e:93:36:6a:e7:3f:d6:5c:ad:9b:dd:b2:7b:8d:
b3:4d:b9:19:1b:be:68:3c:79:e5:b7:97:71:74:c3:73:c3:04:
70:4a:01:f3:ec:de:33:cd:9a:83:cc:18:5d:39:e0:5e:b1:4c:
05:cd:dc:27:e6:a9:6a:4e:5d:cd:8c:30:90:2f:5a:34:d5:2f:
a7:f1:e5:7e:5b:78:22:6f:5c:7d:06:80:5a:cd:b7:92:ce:00:
d2:9c:df:11:92:1f:b4:3c:50:74:cc:f1:78:a5:22:1e:a1:4f:
d4:2f:30:53:f6:a7:5d:a2:e2:57:1e:39:e9:d3:12:53:d7:25:
fb:ae:4a:42:80:05:19:9d:4e:dc:00:97:fe:d5:f6:0b:b3:ba:
44:9f:6f:6d:41:e4:02:3d:de:2b:19:18:0d:ca:2e:04:46:60:
22:70:07:30:03:af:d5:f4:8e:09:81:c9:fb:f8:75:26:d9:90:
ff:9b:f7:d8:4d:17:ba:72:46:00:28:7f:c8:66:6b:d9:2b:a6:
7a:38:7a:32:bd:7e:0a:7f:79:73:bb:b6:d2:c7:94:e0:e9:ba:
ee:8e:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 11:48:55 2025 by rpki-client