This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
File: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft (raw, json)
Hash identifier: o7S7lqfnBC+U3uPHNaEpwYZ7I8hvPCcO9PAAoT7W77w=
Subject key identifier: EC:05:08:83:14:3E:77:B2:51:36:AD:15:2F:6A:05:6B:9E:38:1E:25
Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
Certificate issuer: /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
Manifest number: 01D4
Signing time: Tue 23 Dec 2025 01:52:21 +0000
Manifest this update: Tue 23 Dec 2025 01:52:21 +0000
Manifest next update: Tue 30 Dec 2025 01:52:21 +0000
Files and hashes: 1: FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl (hash: QWLHOf/qTTUSuSuT/oWrVgQufP6N1gFv/Cz0Ue6yQ1E=)
2: 7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (hash: IU2n2x/NVgQOUwGjqFagszzivCXrq63+ZL+OISFLwDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187208, serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Validity
Not Before: Dec 23 01:52:21 2025 GMT
Not After : Dec 30 01:52:21 2025 GMT
Subject: CN=6949f5d5-f88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:d7:b0:c8:47:22:0d:8c:a9:f8:d7:11:95:
a8:a2:bc:54:05:9f:6c:d1:d8:2c:70:5a:43:41:04:
6c:ff:a9:cd:dc:ea:cd:51:22:45:e9:14:9f:78:86:
20:f9:4a:76:87:e1:43:d6:77:62:37:1e:23:69:d9:
ec:69:9f:69:ea:84:38:d7:19:f9:d6:9a:75:88:a9:
f5:91:3b:f9:08:cf:fa:a8:c8:8c:dd:b9:af:23:29:
16:f6:18:db:0f:31:79:92:f6:41:01:cc:88:15:bd:
52:12:6b:3b:cf:38:37:66:e9:b4:5f:4a:24:1c:8c:
4d:df:31:1e:31:51:29:4e:45:24:dc:a8:66:75:e5:
11:94:ba:93:3e:4d:fa:ac:85:a3:c5:6b:5a:bb:58:
19:18:ca:54:e1:fe:5a:86:57:4f:a1:0f:8c:f5:d7:
63:a7:3d:7e:2e:a1:d0:06:51:ac:ef:55:06:cf:16:
0e:33:cc:db:1b:32:38:97:81:af:b3:a5:57:88:67:
41:62:87:c6:b4:9f:3a:86:f6:01:d6:13:54:4e:07:
69:9f:23:b5:f2:cc:ad:3a:e2:b4:b7:57:a6:2d:82:
3c:a8:9b:7e:a2:f0:c7:ae:c6:27:8a:8d:0d:ef:37:
de:98:15:e0:7a:4b:7a:13:2f:84:1b:e8:6b:68:41:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:08:83:14:3E:77:B2:51:36:AD:15:2F:6A:05:6B:9E:38:1E:25
X509v3 Authority Key Identifier:
keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:a9:78:25:e3:44:57:f1:7e:5e:f4:5e:26:84:23:5a:a4:
e4:cc:93:3f:fa:5f:23:53:22:67:5f:33:7d:2c:d3:44:e1:f5:
25:53:6a:45:82:f4:bf:79:1f:35:8c:19:e1:52:24:2e:f1:e6:
64:2a:3b:54:97:46:41:fb:d8:35:4d:88:e2:b8:50:7a:94:9b:
ad:77:29:c8:64:3c:f3:be:1b:32:43:5f:35:a0:ea:16:ab:86:
9b:04:83:d1:69:34:86:8b:fa:08:2f:d8:c0:8a:b6:19:32:c0:
de:43:56:28:35:c1:14:aa:c6:cf:70:08:a2:36:b2:93:2e:be:
7c:2e:b2:20:18:f4:7e:00:52:e5:3b:5e:ef:b7:5c:e2:08:47:
65:aa:64:42:ff:79:af:77:73:b1:7b:a1:b0:26:7c:1c:8d:1f:
47:f0:78:e0:53:4e:b2:04:df:17:bd:93:4a:4e:52:08:8d:af:
7a:80:d3:20:80:ac:18:e0:25:ac:ea:f7:16:81:eb:70:bd:83:
26:ba:d2:f4:ee:1c:4a:e7:3e:5b:ed:4e:11:ac:5d:f8:dc:b8:
21:4b:1b:3b:02:42:af:dc:e3:07:00:d7:2c:91:a7:b3:0c:80:
fe:7b:d5:78:32:26:cd:04:ef:ae:2c:25:a2:7e:26:78:eb:07:
09:cc:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:30 2025 by rpki-client