This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
File: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft (raw, json)
Hash identifier: REz9QLMkoj1W4xHloNULHzRs9iw+l10mE8rDyyv9/I0=
Subject key identifier: 4B:24:AD:85:53:32:B6:C2:64:41:90:EE:96:26:FD:C9:2A:46:67:28
Authority key identifier: AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
Certificate issuer: /CN=A9190057/serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
Manifest number: 01E8
Signing time: Fri 19 Dec 2025 01:52:12 +0000
Manifest this update: Fri 19 Dec 2025 01:52:12 +0000
Manifest next update: Fri 26 Dec 2025 01:52:12 +0000
Files and hashes: 1: rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl (hash: pl8fIdhnNoXIPlveL3WUF9dPf+0JOTDE1L/rchUBVkc=)
2: 1EE23948F8F411ED96463014C4F9AE02.roa (hash: EvYmZSvFW4TmtbBw6J3n3GDqNPIDejLlfQRwyNljJeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190057, serialNumber=ADB27ACAB659FD4E416745573B45D7B02BD8B802
Validity
Not Before: Dec 19 01:52:12 2025 GMT
Not After : Dec 26 01:52:12 2025 GMT
Subject: CN=6944afcc-f3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:63:4b:9a:a8:01:28:c1:20:ee:f9:5e:2f:
9c:1f:71:4c:4f:66:32:e5:99:10:f8:e1:9d:01:a8:
7d:6d:0b:30:81:25:43:97:e9:ae:44:45:c6:6e:00:
a9:b7:11:4c:b1:dd:4f:09:72:f7:36:89:61:50:f4:
1b:c7:dc:5b:fd:6e:6c:ee:04:f2:88:45:df:40:d9:
b7:fb:9a:91:4e:d3:20:71:13:9a:3d:e6:b8:52:ab:
ac:6c:04:60:31:27:54:31:b8:9e:68:f7:fa:ca:62:
82:c1:3e:dc:ed:c7:23:8a:18:ad:9e:a1:c3:41:a6:
f3:ab:a4:64:9b:7c:76:d7:e1:f8:16:a4:25:db:de:
a4:7f:96:86:b9:cb:04:f8:db:2f:a1:7e:7b:be:f5:
02:05:99:00:b5:2d:f7:e1:97:cf:f2:77:ef:56:bd:
9d:59:ff:3c:97:0c:64:72:4e:b5:45:37:79:d0:16:
6b:ae:7d:05:a7:1e:40:ef:d2:59:28:f5:bc:b4:87:
29:1f:a7:77:b5:fe:c6:9f:cc:98:4b:7b:fd:4b:e9:
9d:f0:f5:95:51:f5:55:73:61:7b:67:e7:b7:81:c6:
ee:fb:3c:d6:2c:53:9a:f2:15:87:5a:bf:c4:fc:a5:
b6:05:45:58:bd:24:6f:29:fc:c5:5c:4a:c1:37:03:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:AD:85:53:32:B6:C2:64:41:90:EE:96:26:FD:C9:2A:46:67:28
X509v3 Authority Key Identifier:
keyid:AD:B2:7A:CA:B6:59:FD:4E:41:67:45:57:3B:45:D7:B0:2B:D8:B8:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190057/57B92148F85C11EDA7E8FE74C4F9AE02/rbJ6yrZZ_U5BZ0VXO0XXsCvYuAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7f:03:05:d6:66:d5:9e:3c:db:f7:97:fb:08:97:bb:43:a8:
9b:fb:ff:7e:ec:8b:33:ee:95:15:45:7b:fe:98:10:3a:6f:a1:
33:9e:d4:84:53:e7:83:37:bd:9d:b0:f1:2c:f4:8b:79:5a:04:
3b:04:4b:97:14:cc:2f:f9:90:ae:3e:7e:d8:ac:a3:4e:46:13:
a2:21:f8:4a:a9:93:4b:3f:14:28:82:8c:3e:29:18:eb:54:e3:
17:de:8f:1c:8a:07:50:29:b5:f2:09:ec:b9:4f:a8:19:6c:83:
b1:8f:7a:6d:b8:31:f5:3a:a5:13:c9:b1:bd:66:96:21:1e:a9:
4c:67:94:4d:fa:c1:65:e9:b5:67:e2:d8:bc:02:5d:67:87:36:
15:7c:c5:40:40:df:ad:96:b6:87:d9:1d:b1:38:0d:df:b7:d1:
33:90:97:f4:b2:df:73:75:e9:d9:29:7c:a5:35:4c:aa:87:d8:
84:67:e0:dd:58:32:cc:2f:6f:eb:1e:86:5c:e9:aa:39:55:09:
cd:e8:d2:06:1b:88:fd:6f:a8:09:f7:3a:f9:c9:6c:99:64:4a:
20:52:2a:0e:b3:96:31:85:ee:f9:40:33:60:42:05:99:c9:e1:
30:67:82:bd:7f:ba:06:b4:93:9b:1e:7a:28:67:8d:df:50:d1:
8d:74:fb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:08:23 2025 by rpki-client