This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
File: fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft (raw, json)
Hash identifier: A/sWPBNnKsEepa1rDkKMwjlSQN2G8MUsqvWhyaD4QoA=
Subject key identifier: 7C:7C:D9:DE:9A:5D:A5:CC:B8:F5:4A:9B:81:60:30:71:BF:AA:4B:79
Authority key identifier: 7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
Certificate issuer: /CN=A918753F/serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Certificate serial: 0912
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
Manifest number: 0905
Signing time: Thu 18 Dec 2025 19:51:02 +0000
Manifest this update: Thu 18 Dec 2025 19:51:02 +0000
Manifest next update: Thu 25 Dec 2025 19:51:02 +0000
Files and hashes: 1: fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl (hash: JCyLAPj5itwDjacRinjY54+47+We091pTAsyv5olDuc=)
2: 10A6E062B70A11EDB851464EC4F9AE02.roa (hash: bZt6j0f9FnqO99C81njAPqo09zXuxWqDsE/MVQG1nLI=)
3: 38B92F54E17D11EDBCAFC081C4F9AE02.roa (hash: 6L9/grM2XRH6xQ2g7G8uPevEIhezQ/ylsuLvLV8fdNw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918753F, serialNumber=7E72D801B38A72AB4B0376E12C954124AAE43C6D
Validity
Not Before: Dec 18 19:51:02 2025 GMT
Not After : Dec 25 19:51:02 2025 GMT
Subject: CN=69445b26-041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0a:9b:90:3b:9b:f0:d8:44:8a:a2:fe:3c:ca:
77:b4:7b:64:f3:0b:46:97:64:18:5b:27:92:ef:87:
3d:f8:dd:e8:a0:5d:30:17:30:8e:38:55:ba:e9:62:
f4:9e:c5:12:d5:89:cb:fc:86:cd:6d:f4:6b:72:c8:
81:9b:6c:24:d5:f7:c8:64:80:e9:5d:cf:8b:cd:e5:
75:8e:2b:3b:61:8b:b9:d7:d5:5d:8f:43:ff:ac:e2:
d9:09:13:b1:24:a1:d4:58:ed:8d:dc:c4:da:44:90:
a4:36:63:a2:ac:8b:1c:73:58:50:d7:4a:64:a3:91:
bc:4b:a5:40:5b:ef:22:20:9d:a1:99:3f:d5:78:a8:
f8:0a:5a:6a:a9:ad:40:aa:6b:11:2b:83:43:ea:3a:
de:25:6c:de:40:62:6c:5e:87:b1:3c:e2:f4:d3:3d:
f0:e4:83:09:98:87:85:ff:d0:33:74:d3:95:d0:65:
69:3d:bd:14:ca:71:e1:8e:0f:11:11:42:16:f2:53:
20:e2:8a:79:95:37:1e:26:ba:14:f5:de:4d:c8:6f:
b9:0b:36:76:36:bc:28:95:00:99:bc:88:4b:b6:64:
f9:ff:a0:34:f0:34:07:aa:32:a2:42:7c:7e:d2:e2:
c3:46:35:71:32:30:3f:45:b6:e0:71:d6:0b:eb:19:
d5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7C:D9:DE:9A:5D:A5:CC:B8:F5:4A:9B:81:60:30:71:BF:AA:4B:79
X509v3 Authority Key Identifier:
keyid:7E:72:D8:01:B3:8A:72:AB:4B:03:76:E1:2C:95:41:24:AA:E4:3C:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnLYAbOKcqtLA3bhLJVBJKrkPG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918753F/BDA57FFEBC1611EA9F2B7412C4F9AE02/fnLYAbOKcqtLA3bhLJVBJKrkPG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:40:de:31:7e:fa:c8:24:43:15:48:46:a4:20:5a:f1:08:c7:
44:fd:b8:b7:a4:4a:79:6b:6e:f8:69:4c:0e:86:2b:d4:40:35:
94:76:f8:dd:90:a8:14:25:28:ad:eb:41:97:e7:70:76:f1:32:
4b:fc:6d:c7:b0:49:32:05:bd:32:4c:29:5b:43:d8:60:7a:d7:
10:7b:39:93:bb:1f:64:89:d4:ef:1c:5b:dd:f4:85:95:0c:55:
93:4a:bd:f0:7c:b8:58:0e:4e:d5:6e:d2:7b:ff:f6:cb:a6:82:
43:c4:c8:df:c6:5b:cc:6f:45:fe:b7:36:c1:c3:a3:b2:0b:1f:
93:38:15:d0:79:9e:a7:24:bb:27:43:c5:1c:14:40:01:d1:19:
61:aa:55:5d:1b:09:aa:a3:a8:ff:6b:73:e3:be:29:29:f7:5a:
54:f5:05:8c:30:2e:cf:33:42:58:34:d3:2d:eb:32:2b:37:1c:
c4:82:de:30:d2:c5:85:84:6d:b0:21:d0:9f:b0:c8:3a:f9:64:
1f:cd:4e:f3:cd:a7:21:77:47:b8:c8:4c:72:f9:df:d1:d8:0f:
cb:06:a6:ad:53:58:ae:69:e7:a3:38:e7:69:47:57:66:50:d4:
88:87:27:89:f6:7e:fa:00:50:60:03:42:b7:06:79:f7:45:6b:
4b:d3:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:18:58 2025 by rpki-client