This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier: xF+RdT/ixuQ60o7I11v3Jm+1Ed4FXGEcEJcJJzAaNko=
Subject key identifier: 85:24:A1:D8:49:08:54:F3:65:34:D9:2B:06:F2:62:32:B8:12:8B:05
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial: 0913
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number: 0906
Signing time: Sat 20 Dec 2025 19:44:37 +0000
Manifest this update: Sat 20 Dec 2025 19:44:36 +0000
Manifest next update: Sat 27 Dec 2025 19:44:36 +0000
Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: N0042qZhehe6PXBvKZNluutcKlwAHZPwSBBTjfpLNrQ=)
2: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: 6L9/grM2XRH6xQ2g7G8uPevEIhezQ/ylsuLvLV8fdNw=)
3: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: bZt6j0f9FnqO99C81njAPqo09zXuxWqDsE/MVQG1nLI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Validity
Not Before: Dec 20 19:44:36 2025 GMT
Not After : Dec 27 19:44:36 2025 GMT
Subject: CN=6946fca5-b8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:07:a8:56:af:a2:65:e0:30:11:d0:b9:8a:b8:
76:ce:05:99:ab:ee:d1:e5:9f:d0:07:3f:34:32:e0:
eb:be:ac:9a:cd:62:b6:0a:b3:4a:12:f3:e0:c6:1d:
a6:6f:ed:0d:71:55:80:93:83:77:21:87:55:03:9a:
c5:e6:df:a8:cb:2a:e7:a0:60:3c:20:b9:eb:78:a6:
74:89:ce:4b:48:78:26:14:3f:54:10:3f:2d:fa:ea:
9f:a0:c6:ae:6d:91:71:2b:e4:89:95:08:22:27:42:
5e:89:1f:86:b4:37:3f:ee:87:91:c5:67:a4:cc:1b:
ad:a4:9c:21:b3:02:57:9b:19:14:8c:98:d4:6f:6a:
41:98:9a:e6:26:d4:88:eb:10:17:4a:a7:1e:f9:28:
9a:a3:64:8f:7d:ca:9c:02:2e:61:be:bc:ff:30:90:
aa:ec:ee:10:f2:51:4a:89:19:40:21:bf:1e:ac:57:
ce:a4:f5:2f:2d:e7:a7:f3:78:6e:bd:a6:50:3d:8f:
3b:16:58:76:55:31:53:d9:bf:b6:03:1f:f3:6a:6a:
a3:36:9b:de:ab:2a:ac:f2:88:a4:4a:15:0b:48:89:
82:12:74:63:eb:5e:6c:af:9c:2d:96:1f:ac:45:74:
36:c9:2d:a8:fb:0f:5b:5b:50:4b:aa:0b:e0:ba:8b:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:A1:D8:49:08:54:F3:65:34:D9:2B:06:F2:62:32:B8:12:8B:05
X509v3 Authority Key Identifier:
keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9c:d1:54:74:44:c3:ba:58:96:f8:50:cd:d5:dc:26:a3:90:
3d:80:2d:cf:bf:b8:00:77:7b:a2:f6:5c:01:18:35:c6:1c:63:
68:de:38:75:62:7a:ce:ac:44:ba:91:f9:23:da:a1:fb:10:61:
d6:b4:94:a3:1d:5c:ac:58:c0:ba:ca:70:9b:1f:1d:d7:f4:cc:
bd:9d:b0:f4:b4:0a:c2:30:ba:b5:fe:69:98:24:41:83:05:8c:
52:20:c7:41:e6:ca:46:a8:3c:9f:43:ea:f6:1b:ca:a3:da:b3:
2e:a4:fb:30:5f:b2:d4:e7:38:ab:ef:d0:97:cd:13:36:c4:02:
4f:43:cc:80:75:e1:d6:b5:39:ac:e2:78:37:7a:7d:2b:64:84:
d4:14:8b:b5:31:ef:43:cb:40:5e:64:cc:17:89:16:ec:e3:99:
f4:4e:04:13:cd:7f:2f:b2:52:74:b5:19:1a:e1:88:ad:ff:ad:
5f:0a:08:71:1a:2b:d0:3f:1a:c9:1c:b4:a6:26:89:bc:ef:1b:
bc:44:d1:98:9d:51:29:23:b6:86:cc:e7:a1:00:61:53:68:17:
7e:6a:01:0e:24:ad:e6:8f:2e:8a:47:0d:e3:c4:9d:c9:d2:2f:
92:62:ce:7f:7c:1b:9e:c2:3e:c0:4b:78:41:d9:37:33:49:7b:
94:35:79:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:09:28 2025 by rpki-client