This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
File: xpA79e8aQHD8mDw02cUDz0MT_Is.mft (raw, json)
Hash identifier: TLFYWAgEKIfXyT+lErJHaw5gx7kjSpidSC66P4BCYeQ=
Subject key identifier: A5:AD:BD:D1:E1:EE:A0:52:38:A2:36:44:48:D8:1A:F0:EA:C5:95:DD
Authority key identifier: C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
Certificate issuer: /CN=A9111A96/serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Certificate serial: 056E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
Manifest number: 0569
Signing time: Wed 24 Dec 2025 22:34:39 +0000
Manifest this update: Wed 24 Dec 2025 22:34:39 +0000
Manifest next update: Wed 31 Dec 2025 22:34:39 +0000
Files and hashes: 1: xpA79e8aQHD8mDw02cUDz0MT_Is.crl (hash: KTH6ZcxNZQ8tlLptK5iLGb13aeRP3pgNvXjU/1ATn4s=)
2: ABB5B52C0EF211ECBE14BD4FC4F9AE02.roa (hash: G0TJ9gg7YE7FaWREh61rcwclF21PHLQCA7qkRQvl9xw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 21:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111A96, serialNumber=C6903BF5EF1A4070FC983C34D9C503CF4313FC8B
Validity
Not Before: Dec 24 22:34:39 2025 GMT
Not After : Dec 31 22:34:39 2025 GMT
Subject: CN=694c6a7f-56f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:96:fc:28:ff:bb:2c:d3:ee:6c:7b:08:60:
1c:42:84:91:08:56:15:56:d7:87:b5:11:11:93:b5:
48:f0:0d:05:f5:67:9c:c9:d7:b7:8f:b4:47:20:47:
a5:8c:c8:d5:52:10:17:80:5f:74:c1:22:d7:7e:cf:
1f:b8:de:41:71:9d:0d:97:20:af:2d:ac:bf:d6:9b:
25:e0:39:54:b6:a7:14:82:35:a4:9e:b6:fa:24:4f:
d3:a2:a3:44:7b:19:a9:e3:71:ee:40:69:f8:17:07:
59:0a:3f:14:a2:60:f8:62:8b:e7:09:e0:a3:cb:a6:
81:d8:ce:4f:76:d4:5d:79:12:23:be:b6:bf:13:34:
1d:8b:30:01:49:c0:17:dd:08:4d:82:f3:08:d9:63:
5c:70:1c:d2:17:98:10:ec:1f:43:13:71:93:96:ef:
8e:4d:b5:77:4c:e7:7e:15:83:08:d6:09:78:18:b9:
be:cd:74:c3:ab:5f:5a:2c:4c:67:0c:40:80:a9:94:
55:57:32:ed:26:0b:22:4a:97:77:bc:94:44:de:b1:
e9:5e:e1:6a:40:21:ae:08:01:a2:29:de:39:d7:f7:
64:cb:0e:cc:80:10:d2:83:60:a2:ef:17:8b:a8:75:
8f:0c:91:49:48:ae:3c:2d:18:94:a6:73:00:8a:33:
fa:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:BD:D1:E1:EE:A0:52:38:A2:36:44:48:D8:1A:F0:EA:C5:95:DD
X509v3 Authority Key Identifier:
keyid:C6:90:3B:F5:EF:1A:40:70:FC:98:3C:34:D9:C5:03:CF:43:13:FC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xpA79e8aQHD8mDw02cUDz0MT_Is.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111A96/4589C6380EEF11EC86ADE04BC4F9AE02/xpA79e8aQHD8mDw02cUDz0MT_Is.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:24:cf:8c:a6:53:13:67:81:86:8b:26:ae:12:40:df:25:
a3:44:0b:0a:d8:9d:73:6f:dd:13:9c:ba:81:ff:fe:aa:fe:37:
7f:1f:e5:89:a5:66:ed:11:ef:8f:c3:f7:30:f7:cb:9b:c2:67:
a5:7f:b9:33:58:d5:a5:49:62:fd:13:16:22:49:ca:db:ac:18:
27:5a:3f:34:43:50:90:c2:9c:29:13:58:ed:39:cf:01:de:cd:
0a:e8:36:55:a9:cc:97:f6:5a:c5:35:f9:d2:a6:a8:53:94:dc:
24:47:61:b1:c9:d3:ee:fe:60:6b:c3:92:fb:11:e1:e6:46:ce:
0c:d4:cf:30:9a:39:83:e0:5a:b2:de:7f:fb:e0:d7:6c:97:eb:
f6:23:e5:40:4c:e7:74:fc:4d:b5:77:72:f7:42:fe:2f:9b:f4:
ef:9e:41:2c:8a:d8:57:55:2f:35:93:7b:2c:d1:18:f3:43:a7:
45:09:a8:47:27:1c:11:ce:54:34:88:f1:ea:4a:3b:99:bc:cc:
f9:b0:84:8f:de:79:ce:81:f5:23:ca:f2:4c:8d:9f:52:97:58:
d9:c1:42:41:b5:80:ed:40:23:07:ba:0e:b9:c4:fe:89:0a:8f:
c3:a4:39:1f:20:36:71:f6:db:dc:9c:d7:db:99:43:14:69:79:
e9:e7:bf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:20:21 2025 by rpki-client