This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json)
Hash identifier: Z6wtzRspTwg9zWeTkKZ5cLvCBdc2dXYdMy37kc4TGRA=
Subject key identifier: CE:0E:93:83:3A:7D:74:37:D9:BD:57:65:65:23:64:C4:AA:5A:F8:63
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1A0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
Manifest number: 19F5
Signing time: Mon 22 Dec 2025 16:08:15 +0000
Manifest this update: Mon 22 Dec 2025 16:08:15 +0000
Manifest next update: Mon 29 Dec 2025 16:08:15 +0000
Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: OFGfaWWVJ9mEeZFjTYtG2CDaMKu/V3879wbGRtfNbUs=)
2: DCD75050315011F0BC916269C4F9AE02.roa (hash: Bf1fxzL+4m9g8KrBwC7vnrDgD/7yz2XeDX4e5Hb6WLU=)
3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 93fAGoBbKb8s2g7H+M2m6OkfN68jU6Ckev28RigcvkM=)
4: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: l9XdWoi7pZ0Z/aLBaCXXv7SbiureJhqjsfmA2AlQcsM=)
5: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: 0hRL6yZO6PYkNxlevkrCS0rz63r1YCZDrVAR2Fyxyls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:08:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6666 (0x1a0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Dec 22 16:08:15 2025 GMT
Not After : Dec 29 16:08:15 2025 GMT
Subject: CN=69496cef-ceaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:50:b4:9e:f1:0e:e6:6f:2f:3b:c4:6b:a7:
74:de:89:5d:30:57:15:61:8b:7a:4a:9b:1b:af:4c:
2f:5e:30:70:f4:0e:2a:73:5c:50:88:11:74:39:3e:
71:6e:55:b8:7c:f4:53:f5:f0:59:31:b3:00:2c:89:
07:ef:68:32:13:92:39:3c:db:ba:da:68:10:25:99:
fe:5c:3b:40:0b:ab:98:26:5d:3d:e8:79:4f:e8:02:
22:0a:d5:39:4e:87:19:04:25:b4:92:e5:bc:ed:9b:
ff:ba:28:18:0a:88:52:52:7e:3a:c9:23:f5:75:ea:
a5:49:5f:4f:64:bf:14:c6:f1:16:9b:28:af:d9:13:
f1:e5:1e:5e:7e:4e:8d:61:37:cd:f9:7a:37:5c:9b:
7d:41:98:67:6d:93:ad:a9:f9:cc:f1:86:40:0e:79:
28:15:ac:89:b0:c4:9f:9a:ee:24:c4:25:e5:ed:a5:
da:b3:06:a6:99:35:ce:e4:39:4e:85:fe:74:e0:d3:
b8:f7:be:7b:e7:5a:a4:dc:59:ed:87:ed:1f:96:61:
90:e7:a9:5f:95:0e:86:b1:cd:86:26:b7:06:79:e9:
59:bb:70:56:ca:d7:4f:d9:e8:1d:90:7d:8f:10:d4:
3a:2a:54:11:a3:03:73:ec:e9:03:36:30:10:aa:0d:
71:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:93:83:3A:7D:74:37:D9:BD:57:65:65:23:64:C4:AA:5A:F8:63
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:eb:19:79:aa:78:d6:ba:b4:8c:d4:47:0b:00:09:03:5e:95:
ff:52:1b:74:6c:24:2d:58:25:e6:af:d4:e1:de:de:91:8b:bc:
56:bd:75:18:d3:fa:cf:2f:28:64:03:bd:f9:f7:ca:fa:cc:7f:
90:65:c3:c9:5d:8a:45:27:e4:a5:f0:f1:3e:cd:5b:e5:d7:a7:
df:fe:3d:6d:bb:5c:f0:e6:36:7a:89:95:72:49:be:16:2c:28:
49:ed:a1:ee:7f:2d:6e:aa:2f:f8:42:6e:3d:b1:0d:37:ab:3d:
59:ee:2a:d1:23:96:f1:3b:a2:87:f2:aa:44:f3:ba:89:e0:99:
43:a5:00:98:d5:d8:5a:b5:6f:6b:cc:52:9e:5b:cd:0d:2a:ca:
29:e4:85:ba:91:1f:52:59:af:9d:ef:12:25:e8:8e:b3:b4:78:
ef:24:c5:57:cd:f3:a0:d9:f2:5e:3b:69:4b:50:e3:81:09:4f:
19:c4:ac:ec:12:42:3f:e3:33:c6:e7:c9:3e:7c:60:51:ec:f5:
41:d3:3c:ed:50:2a:35:89:1f:d4:82:06:7c:13:40:ab:3a:25:
0a:17:0d:0a:a8:93:5b:03:ad:c2:60:9e:87:51:3a:44:55:fa:
12:24:82:f7:23:b5:2f:90:1e:f3:46:25:54:4f:be:23:0b:af:
1e:47:71:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:50:16 2025 by rpki-client