This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
File: tRT6pSOY594ly7jXeUObHjA3Rw4.mft (raw, json)
Hash identifier: wOkNky6dJmUYvwZqWvmT0717G85fFYKf3kfuASBH46w=
Subject key identifier: B0:6D:9E:B4:3C:6A:60:16:B4:14:E7:C4:E3:0F:47:8F:61:21:1F:F2
Authority key identifier: B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
Certificate issuer: /CN=A919874A/serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
Manifest number: A1
Signing time: Tue 23 Dec 2025 05:16:10 +0000
Manifest this update: Tue 23 Dec 2025 05:16:09 +0000
Manifest next update: Tue 30 Dec 2025 05:16:09 +0000
Files and hashes: 1: tRT6pSOY594ly7jXeUObHjA3Rw4.crl (hash: eGERC/cOuv9CumrnHH2RK4h8DoyqBMO8TIkK02s/Ak8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl
rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919874A, serialNumber=B514FAA52398E7DE25CBB8D779439B1E3037470E
Validity
Not Before: Dec 23 05:16:09 2025 GMT
Not After : Dec 30 05:16:09 2025 GMT
Subject: CN=694a2599-fbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:b2:ea:3a:2d:b1:cd:2d:e0:dc:66:d0:75:
71:39:32:3d:09:2d:2b:9d:e5:2c:cd:5b:94:9d:34:
8e:65:65:8a:a6:2e:b5:81:0b:38:dd:40:50:06:cd:
e8:4a:2c:d2:07:c2:a5:cc:c2:8c:46:b5:58:8c:22:
e5:80:3d:f8:a9:e7:9d:71:00:35:43:65:fd:09:c9:
0a:c1:b2:48:84:55:4f:12:51:e1:10:19:1e:50:6e:
1f:55:2f:88:2b:4c:cb:de:6d:fd:3f:73:87:24:c9:
4c:12:7c:7e:ae:ff:65:5b:1b:81:c3:a8:ff:08:31:
98:bd:a6:1e:14:8b:4e:72:08:1b:ab:38:5c:6c:03:
cb:72:a6:c3:4e:85:d6:c9:84:64:5b:67:f4:09:21:
dc:e4:fa:0b:c6:59:7a:49:6a:97:a1:3e:49:23:0a:
df:8a:d9:47:e2:41:3e:2e:82:3e:e0:30:ad:ff:46:
2a:78:c9:03:06:d4:4d:ca:c7:21:fe:05:44:2f:53:
6c:eb:5c:af:01:65:46:c5:a1:56:81:74:5d:d2:bb:
6e:8c:d7:7c:bf:03:bc:e9:ec:b9:70:21:a4:5e:d2:
be:5a:77:e4:e6:27:5a:d4:3d:85:23:6f:29:fe:fe:
ad:c5:51:f4:ac:4d:36:11:e1:ce:97:c9:ef:08:dc:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:9E:B4:3C:6A:60:16:B4:14:E7:C4:E3:0F:47:8F:61:21:1F:F2
X509v3 Authority Key Identifier:
keyid:B5:14:FA:A5:23:98:E7:DE:25:CB:B8:D7:79:43:9B:1E:30:37:47:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tRT6pSOY594ly7jXeUObHjA3Rw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919874A/F61D89C6EAD311EFB1C4CC55C4F9AE02/tRT6pSOY594ly7jXeUObHjA3Rw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:5c:8b:fa:1a:c7:37:94:3e:79:c8:37:bf:7f:02:5d:eb:a7:
d4:30:af:76:8c:f4:48:b5:c7:0a:93:8b:87:23:9d:f5:b7:88:
26:2a:7d:01:04:64:80:c8:9d:b4:64:b5:c3:52:04:8c:e7:24:
f7:20:12:b7:82:ea:68:be:80:88:8a:40:a5:46:3b:0f:2d:b2:
d5:2d:9f:b9:da:7c:ab:b3:f3:64:3e:71:0b:61:4c:f5:25:26:
82:ea:c2:e8:0c:75:d2:38:4d:0b:03:1e:16:4f:a7:3d:47:8d:
41:49:ff:49:a9:95:11:29:bb:1e:7a:9a:75:44:15:6a:83:80:
21:2b:e8:29:47:b9:f4:9f:dc:bb:a7:df:77:97:5a:2f:db:df:
af:d3:b5:57:38:9d:a5:ff:0f:88:9d:b6:c0:af:be:e6:9d:c1:
4c:a1:c2:4f:41:59:86:10:28:12:51:b1:ee:6e:db:be:d3:33:
6c:26:7d:d7:5b:13:58:39:a6:27:e1:0e:64:bf:6c:80:df:1c:
8d:32:c6:2b:ff:9e:49:10:a7:ed:c6:02:50:37:23:4d:4c:62:
23:64:b6:de:33:8e:9b:6f:4c:f4:1e:d4:fc:8d:ee:17:b1:ae:
66:7a:0c:10:6c:72:a3:07:2c:2c:73:6c:8e:ef:52:49:e7:48:
f6:6e:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:17 2025 by rpki-client