This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
File: FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft (raw, json)
Hash identifier: /KNDcBKRJbz1mVnhAZNNVFjN67FyJFDp8SOfWGzAwfw=
Subject key identifier: 4E:26:40:08:63:C8:AA:30:CA:E7:63:C5:A0:23:E5:CB:16:09:AF:AA
Authority key identifier: 16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
Certificate issuer: /CN=A918BB4D/serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Certificate serial: 0706
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
Manifest number: 0706
Signing time: Tue 02 Dec 2025 21:04:33 +0000
Manifest this update: Tue 02 Dec 2025 21:04:33 +0000
Manifest next update: Tue 09 Dec 2025 21:04:33 +0000
Files and hashes: 1: FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl (hash: ffhusGzMtJNoxj5tKTOv/KS/XROon9WBkd5+pL5wv9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 21:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1798 (0x706)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=163329F5705DE9BC2235AC57D754F98078C7F52B
Validity
Not Before: Dec 2 21:04:33 2025 GMT
Not After : Dec 9 21:04:33 2025 GMT
Subject: CN=692f5461-090d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:6a:fa:76:8f:09:f1:11:ee:37:26:e4:38:
3f:8e:c8:e9:a6:31:66:62:b0:a3:8f:a0:9d:b1:b0:
d7:8d:bb:77:fd:4b:29:33:88:33:f1:da:71:2a:85:
b5:84:d9:ed:1f:9a:41:15:11:a0:72:88:d4:06:c7:
7c:53:b7:eb:3f:c6:e9:93:b3:6a:b6:d7:63:66:7d:
2f:5b:45:23:db:29:f2:ae:8d:74:53:05:22:24:66:
db:5b:e8:d9:50:6e:55:76:fe:47:02:63:e3:e7:80:
73:0d:19:3f:83:5c:98:43:31:73:88:2f:ff:c0:72:
b5:e6:6d:2b:34:cb:d8:48:b4:1a:30:73:a4:80:2d:
34:42:d7:03:9c:3a:ce:c2:64:64:2e:3b:2b:30:db:
cf:8f:61:b1:f0:2f:dd:63:a5:00:1d:e4:f7:f5:17:
93:b4:e8:0b:e1:c3:98:ec:35:f8:15:99:87:da:33:
45:af:7b:65:c6:49:76:c5:12:b5:da:92:c6:d4:2d:
24:33:4b:16:23:c2:0f:70:67:88:3a:0f:24:f1:5a:
18:1d:0e:f8:47:22:5c:96:06:c5:d5:4a:b2:95:58:
34:50:b9:d4:bf:83:05:78:01:1a:f4:bc:89:7f:37:
3a:e1:99:aa:c6:3b:03:7e:e7:cb:59:f7:92:69:dd:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:26:40:08:63:C8:AA:30:CA:E7:63:C5:A0:23:E5:CB:16:09:AF:AA
X509v3 Authority Key Identifier:
keyid:16:33:29:F5:70:5D:E9:BC:22:35:AC:57:D7:54:F9:80:78:C7:F5:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FjMp9XBd6bwiNaxX11T5gHjH9Ss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/C07E1CD0652211EB80F6E94BC4F9AE02/FjMp9XBd6bwiNaxX11T5gHjH9Ss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f0:8f:ad:6a:f0:80:85:1a:81:1f:41:40:94:fd:95:24:c0:
94:97:43:cf:78:93:4e:27:0f:bb:48:99:a9:bd:07:ed:a8:13:
61:37:d2:d8:97:2a:b7:92:51:53:2c:37:dc:50:63:0a:cd:f2:
08:74:62:f8:20:2e:b0:2d:e2:c4:0e:5e:03:59:be:e6:b5:e8:
5c:db:f6:85:79:de:ff:28:d2:9d:76:02:f5:dc:b5:0e:b9:a5:
ea:9b:b8:6c:c8:16:a8:e1:a3:75:46:8d:f2:c0:28:bb:10:dd:
69:30:69:c0:75:cb:d9:9d:01:52:d6:a0:b8:64:a4:7d:a2:d3:
41:3b:d8:8f:d4:c1:03:1a:37:7f:53:38:78:26:ff:d3:20:4b:
29:66:60:a7:cb:de:6e:15:20:75:4e:66:c2:89:78:b0:1c:70:
09:cd:1b:c6:60:ff:80:86:45:d5:24:4d:51:42:90:dc:7f:3a:
4b:3f:5e:57:e1:4f:71:77:67:d7:79:46:1e:75:b0:30:28:0f:
12:f4:d4:3f:70:e5:32:64:7e:b3:20:ad:4c:4c:69:84:f8:24:
c5:71:ac:0a:2f:dc:9a:57:7a:54:52:f2:3b:c2:20:da:ae:0e:
0e:48:09:0a:33:22:ed:f0:cd:af:75:12:27:2d:a7:ee:35:35:
c7:5b:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:38 2025 by rpki-client