This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
File: BiJAzedW2VtXd-JnqnsGVPg09JM.mft (raw, json)
Hash identifier: U58aO9hw9MNZozlah7EYlNG8ZjV8GVLdjt3rQ7hKOok=
Subject key identifier: 21:4A:AE:7A:29:E6:94:04:14:DD:88:06:71:B4:19:7B:69:0B:14:33
Authority key identifier: 06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93
Certificate issuer: /CN=A919DCE3/serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
Certificate serial: 06A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
Manifest number: 06A4
Signing time: Thu 18 Dec 2025 21:42:34 +0000
Manifest this update: Thu 18 Dec 2025 21:42:33 +0000
Manifest next update: Thu 25 Dec 2025 21:42:33 +0000
Files and hashes: 1: BiJAzedW2VtXd-JnqnsGVPg09JM.crl (hash: 6EN3kiPJo5jylvqyEQf5XtAFx0/rOCyFb+H84cDgkwY=)
2: E9610376903B11EBB91C8B5DC4F9AE02.roa (hash: 8EJ9t0dHzPuImjiYAPoyaHv+e1oWlijq5dSgwTFlJ+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl
rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705 (0x6a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DCE3, serialNumber=062240CDE756D95B5777E267AA7B0654F834F493
Validity
Not Before: Dec 18 21:42:33 2025 GMT
Not After : Dec 25 21:42:33 2025 GMT
Subject: CN=6944754a-2975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:40:2f:c4:30:f0:67:0f:21:b1:50:98:e0:
79:84:d4:f1:51:62:c3:f9:11:d5:07:55:64:58:58:
b4:4b:17:ae:b7:e4:d9:f7:66:4d:75:1c:44:59:d8:
86:b4:2e:c8:34:a4:fc:e8:41:9c:67:a1:aa:51:bf:
7f:af:ee:b9:ac:d7:95:05:2c:67:a8:74:b8:81:48:
ca:ac:f9:bd:78:ba:0e:a6:93:f0:24:a3:94:b4:7a:
da:b1:61:87:7d:23:1b:d7:cc:7d:95:e5:53:bb:a1:
fa:4d:a1:f1:f6:b5:bb:6c:cb:35:24:7a:5a:a6:c5:
ef:ab:f5:6f:6d:85:a7:59:5f:ed:3a:b3:35:39:fd:
54:2e:4f:65:22:86:b7:f1:ea:8c:ca:81:eb:2b:9c:
c2:07:4e:13:bc:f3:da:ab:98:90:ea:cb:80:3f:fe:
24:99:92:f3:96:cd:08:c6:3b:37:47:4d:e3:31:9e:
bf:6d:95:be:53:17:4d:07:18:b2:2a:9f:5a:c3:6f:
38:61:1a:06:bf:9b:1b:88:24:12:0f:38:c5:90:35:
eb:74:41:e4:77:39:ff:70:64:6a:38:f7:3a:36:7a:
80:82:3b:44:ba:d6:36:e3:1a:29:5c:58:58:a3:f6:
83:73:ea:3f:94:4f:f8:26:64:64:9b:5f:57:c1:0c:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4A:AE:7A:29:E6:94:04:14:DD:88:06:71:B4:19:7B:69:0B:14:33
X509v3 Authority Key Identifier:
keyid:06:22:40:CD:E7:56:D9:5B:57:77:E2:67:AA:7B:06:54:F8:34:F4:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BiJAzedW2VtXd-JnqnsGVPg09JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DCE3/BD29C992903A11EB940F285DC4F9AE02/BiJAzedW2VtXd-JnqnsGVPg09JM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:01:dc:c3:95:27:df:7e:a1:3d:6f:ec:72:cf:a8:29:57:6e:
b1:24:f7:ee:22:d6:f1:fd:36:4a:9b:4f:c8:ec:63:e3:8d:2b:
99:b3:bb:50:0e:37:b9:ea:ef:4b:f2:c7:33:dc:15:72:01:49:
9f:88:c3:98:97:18:4a:0f:30:0b:c8:24:f8:91:cf:ff:31:84:
e2:50:e4:64:be:99:1c:6b:fb:e1:e3:6e:81:5f:3c:1d:cd:21:
81:ee:be:95:94:7c:6e:f9:3d:b9:f7:33:a9:af:e3:e8:a9:92:
49:fc:e8:87:e5:f8:54:2f:c0:1d:dc:70:f4:ab:d6:24:0a:a8:
fa:f9:f3:ea:e7:f1:e1:e3:3a:02:11:c2:40:d9:79:d5:3e:25:
51:a6:fa:4f:52:67:f6:32:22:c7:bb:cd:3d:4d:ad:07:44:84:
9d:13:89:ee:73:aa:f9:98:72:f8:c4:a8:dd:0a:6e:27:7f:c2:
6e:47:94:e2:34:01:10:dc:83:36:90:fb:73:2b:ff:23:71:78:
93:8a:6d:db:86:32:7b:cb:37:0f:0b:22:1e:99:07:9d:05:0b:
ab:0c:9f:10:04:49:02:9c:f0:73:22:59:8c:9c:21:f8:61:bf:
8d:c0:43:7e:91:24:3d:de:d2:35:2c:3d:b6:7b:86:b0:70:93:
6b:8f:da:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 01:10:57 2025 by rpki-client