This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json)
Hash identifier: dJgjPULGiTLzVB8vEd92wKBQJu2JHWzWODUTV/vv6OM=
Subject key identifier: 24:E5:CB:AB:9A:03:58:CC:A9:8A:E2:6D:1D:6A:F0:4F:ED:6C:5A:C5
Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
Manifest number: 01F6
Signing time: Tue 23 Dec 2025 01:33:07 +0000
Manifest this update: Tue 23 Dec 2025 01:33:07 +0000
Manifest next update: Tue 30 Dec 2025 01:33:07 +0000
Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: gFgNFscdCxjT0f6a1U0fTo0Uw4pikzENAXw6QMaLL9o=)
2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: hjXWWNVk9qeFLg+JXu1VxvXREeEeEZlGLduNQ3cBxlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091
Validity
Not Before: Dec 23 01:33:07 2025 GMT
Not After : Dec 30 01:33:07 2025 GMT
Subject: CN=6949f153-fc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:65:21:35:be:28:9f:67:31:0b:cb:bc:e4:
67:93:39:5d:92:c2:65:cd:9f:71:8f:a3:ab:4b:85:
cc:e1:ef:a3:b8:8f:de:40:d7:83:0e:e3:b5:98:5c:
46:eb:7e:d3:37:f1:f2:9b:96:59:ec:b2:60:8c:54:
c1:2e:16:e1:45:f1:65:a3:7a:d3:39:fc:b3:c8:6d:
e9:94:07:b7:9f:5e:cc:ac:9a:51:3b:39:28:a7:f2:
7b:18:71:29:e3:d1:c9:72:d7:d1:35:d1:2a:d2:74:
f3:8e:b9:cf:e2:5e:13:e2:3e:96:f5:75:27:e3:3d:
40:80:19:4e:ae:5c:0c:2c:06:8a:51:6e:c9:90:ae:
15:54:ac:70:73:46:50:3a:ec:8b:36:3f:86:88:a3:
8e:b6:0f:4a:38:26:73:bf:68:61:99:69:3c:42:70:
1d:1e:28:5d:ce:d8:9a:5a:11:d5:37:9b:c8:4e:e4:
f7:0e:bc:0c:23:b3:d0:ac:a8:b8:07:50:47:af:be:
ad:d5:23:86:63:a5:6c:1e:03:50:52:0a:c8:ca:5b:
a8:68:ad:06:f7:1d:a9:cc:3c:89:2b:16:46:96:20:
dd:a4:ca:a6:97:f6:c6:94:82:68:fa:6b:82:10:23:
07:ad:71:78:0f:64:53:6b:ab:79:ea:a1:23:51:ae:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E5:CB:AB:9A:03:58:CC:A9:8A:E2:6D:1D:6A:F0:4F:ED:6C:5A:C5
X509v3 Authority Key Identifier:
keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a4:14:c6:09:8e:a6:72:a0:19:13:4e:97:4b:02:6e:cc:3d:
88:41:8d:d9:04:b0:76:86:74:45:a8:9f:9b:ae:ad:19:7c:52:
bf:01:60:d9:9d:d5:c7:f6:b0:94:63:4d:cd:e0:c4:4b:f1:08:
d2:57:82:e6:64:c3:75:4e:52:56:d2:97:a2:ee:4a:ff:dc:92:
5f:21:c7:95:6c:d4:12:e9:b2:ea:0c:3c:55:d2:45:76:81:84:
87:89:1a:04:92:5c:ec:48:d0:73:33:5d:68:80:fd:50:43:31:
b4:66:3a:b4:32:a4:ab:c7:fc:a4:c8:15:a9:33:09:1c:b9:f7:
12:c2:31:4d:04:4e:6e:c4:c6:d6:57:97:94:f7:12:31:a4:3d:
6f:eb:12:8a:39:f6:83:f8:19:11:ea:de:90:1f:37:0e:ca:f2:
ef:fd:5c:03:03:21:fa:e2:6a:66:8e:36:ca:bf:4e:6d:ae:6e:
6d:eb:65:88:18:36:64:9a:52:c0:29:53:f3:ea:ac:d8:64:85:
6b:ef:96:aa:4b:73:09:bd:f7:6e:66:54:e0:26:12:0c:7a:a2:
f0:55:d7:22:33:90:e3:47:36:5d:e3:07:c8:bd:d0:e9:cf:02:
c1:03:d7:e8:88:b2:61:39:af:d0:72:e6:67:9e:c2:c7:5f:12:
cb:46:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:16 2025 by rpki-client