This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
File: edSLikSpvRZsNNwg7IxXE_MJLss.mft (raw, json)
Hash identifier: 16BHJeiBqDfMFYJxKSLoSpBbAe1vGB2t8MYe3mp8W+Y=
Subject key identifier: 61:76:3B:29:BD:46:71:5D:F1:33:1F:D8:FE:1B:39:91:37:75:2B:0F
Authority key identifier: 79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB
Certificate issuer: /CN=A91E299A/serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
Manifest number: A8
Signing time: Tue 23 Dec 2025 05:09:38 +0000
Manifest this update: Tue 23 Dec 2025 05:09:38 +0000
Manifest next update: Tue 30 Dec 2025 05:09:38 +0000
Files and hashes: 1: edSLikSpvRZsNNwg7IxXE_MJLss.crl (hash: 0MHtAVKLyZBL+zEaa/YychRPr3i4B/5Hp7ScElc9CNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl
rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E299A, serialNumber=79D48B8A44A9BD166C34DC20EC8C5713F3092ECB
Validity
Not Before: Dec 23 05:09:38 2025 GMT
Not After : Dec 30 05:09:38 2025 GMT
Subject: CN=694a2412-8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:3d:eb:ca:1e:a1:d0:a1:ee:a1:b1:67:58:
b9:8e:25:b1:50:23:24:79:f5:c0:da:ce:08:8c:69:
22:80:1a:f8:6b:64:03:9c:e1:5e:0e:8c:05:bb:fe:
21:6d:04:9b:fd:04:05:6f:4a:b1:74:c6:cc:dd:0e:
13:af:fe:74:b0:3d:c5:85:99:ce:f8:6d:95:92:85:
04:6a:dc:3f:cd:76:a7:f7:1d:7c:4b:04:9a:3f:76:
72:d8:87:84:a6:8a:3f:4c:43:6b:6f:c7:37:ac:a1:
8d:e8:c0:95:a4:c2:03:0c:64:f5:8a:4b:67:6e:11:
6e:ae:25:77:f7:6e:11:f5:85:8e:65:ea:a8:92:da:
b3:c3:f5:be:2d:eb:f6:45:49:a2:99:2b:d0:38:d8:
62:cf:ad:88:59:cc:7c:22:59:6c:0f:2a:3e:11:56:
24:9d:aa:26:a5:f6:ef:83:f9:db:b7:fa:ec:59:ab:
0f:b4:36:08:00:56:20:02:22:a3:ae:f0:9f:4b:c9:
04:23:06:a8:9e:a8:93:73:4c:87:c5:0a:84:e1:e8:
43:f0:0a:bf:4a:fe:ca:97:91:04:34:89:e9:5f:cb:
2b:aa:9f:33:1b:3a:2a:ad:b0:89:25:2a:cb:91:af:
7a:26:f7:c9:44:0a:85:cd:94:47:4e:d5:6f:c9:88:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:76:3B:29:BD:46:71:5D:F1:33:1F:D8:FE:1B:39:91:37:75:2B:0F
X509v3 Authority Key Identifier:
keyid:79:D4:8B:8A:44:A9:BD:16:6C:34:DC:20:EC:8C:57:13:F3:09:2E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edSLikSpvRZsNNwg7IxXE_MJLss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E299A/A0AC0992DDF711EF80D2156FC4F9AE02/edSLikSpvRZsNNwg7IxXE_MJLss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:a7:18:36:92:68:e2:c1:c4:e6:46:12:1b:54:73:c4:e5:d2:
d1:f5:af:1d:f7:3b:03:89:43:6f:78:e6:ec:36:ad:9f:b3:4e:
09:6a:74:3d:6d:e7:24:9a:60:08:3e:98:b2:59:1c:cb:9f:2b:
40:84:e6:dc:c8:be:fc:bd:05:a2:0c:1a:74:01:82:73:68:95:
76:07:09:33:b1:ea:f3:d2:84:aa:ad:d3:82:3f:94:fd:c5:a5:
21:e2:c0:5b:00:06:b3:94:f6:9c:f6:23:5b:ab:57:3a:9a:22:
1f:83:a0:77:fd:f2:e8:a8:bb:b4:c1:19:75:90:e5:84:25:07:
dc:72:60:db:01:11:d7:9e:10:ba:f7:bb:ed:91:50:89:3d:51:
cd:16:ef:48:f3:65:ef:d7:6d:14:d7:6a:fc:2c:18:4e:ab:02:
ee:9c:e2:95:07:93:7e:7a:4f:27:52:e0:17:4c:45:45:34:0e:
a0:36:3b:b1:bf:af:7a:d2:33:8d:cd:53:f4:84:87:2e:33:a8:
ef:a8:c9:2e:d8:1b:ec:f6:af:43:5d:63:c3:7f:35:1b:60:9a:
00:51:3c:d1:59:d7:ec:1d:51:34:7b:e4:33:cd:a3:40:c5:20:
3f:eb:0e:c6:74:09:ae:5e:ca:ec:d6:0c:4f:bd:25:7d:7d:f7:
bb:21:28:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:51 2025 by rpki-client