This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json)
Hash identifier: M9320pxkYG+dzC4u1HFZBzsRcKhO1vmbZ7BJSKLva5A=
Subject key identifier: BE:84:2B:EE:20:A8:97:11:59:51:CC:BD:4D:99:9B:79:C9:77:0E:4E
Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Certificate serial: 0498
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
Manifest number: 0493
Signing time: Fri 26 Dec 2025 23:08:25 +0000
Manifest this update: Fri 26 Dec 2025 23:08:24 +0000
Manifest next update: Fri 02 Jan 2026 23:08:24 +0000
Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: eyEQT62tXAekc8NFOcqsDSw5skKNqFnVfGzC1ypgmUI=)
2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: ri0TS1kyJCp5RGAizutNu/7/M8+Gqg86bvQl1YYvFEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:08:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176 (0x498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D
Validity
Not Before: Dec 26 23:08:24 2025 GMT
Not After : Jan 2 23:08:24 2026 GMT
Subject: CN=694f1569-91b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:26:36:b2:ce:7a:95:e9:81:bd:6a:bf:fc:
56:f2:e5:af:04:c7:fa:9d:14:e4:ef:f3:2a:db:42:
02:b0:1e:c5:91:ef:25:1f:78:63:01:cd:8e:dd:8b:
24:a9:a7:5d:54:42:6f:74:4b:7d:69:77:df:6a:78:
f2:84:82:6b:26:0b:60:97:69:cc:88:2b:4e:5f:bc:
78:dc:d9:59:1f:eb:87:6a:8e:69:8b:1c:dc:46:95:
72:72:1f:4b:af:27:c0:02:e3:18:83:81:fc:a5:37:
6b:d1:d4:c9:6c:d6:6f:1d:18:d6:f6:d2:94:ca:30:
3e:85:fb:59:cc:33:4f:37:a6:ad:33:a3:5e:34:59:
31:06:dd:fc:e4:d8:10:ad:a0:6a:56:89:0a:9b:5f:
04:43:9f:f8:ac:8c:c6:1c:39:34:fe:39:9e:3b:55:
c8:ed:21:cf:d1:1c:a6:13:58:7b:21:70:08:76:7b:
76:3e:73:4d:9b:d8:d2:bb:69:20:da:00:70:8b:18:
c6:72:92:52:fe:91:b9:2e:db:78:3d:66:5d:63:8c:
5c:4a:6f:31:7b:01:dc:46:84:c1:ea:07:b5:1d:51:
bc:63:0b:2d:f8:a2:e6:7a:14:71:89:f9:f0:2d:32:
f8:25:0c:0b:61:fa:52:25:b9:21:8f:3b:cf:df:bc:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:2B:EE:20:A8:97:11:59:51:CC:BD:4D:99:9B:79:C9:77:0E:4E
X509v3 Authority Key Identifier:
keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:48:fc:31:64:b3:4d:29:3a:64:bf:24:a3:78:65:45:8a:
8e:31:fd:4d:95:5d:fe:df:96:f7:98:08:1b:47:d5:22:51:86:
0d:ba:6f:f4:e4:67:a1:6c:41:e2:8a:c9:aa:98:73:15:6c:a3:
c3:7b:91:3c:8f:a4:ee:2d:42:6b:26:50:dc:42:0a:5b:44:6d:
fb:ae:bf:07:a0:31:0c:40:c4:cd:86:51:ca:42:c5:f7:68:0a:
2c:61:3e:2f:90:37:82:a6:0c:02:58:54:1c:39:68:6c:8b:10:
43:07:09:47:13:97:e5:92:19:81:b1:f8:15:5a:b6:de:1b:84:
0a:e5:b0:d5:84:15:7d:42:2c:10:b4:bb:ff:23:d3:28:f9:49:
d1:31:1f:16:b5:d3:a1:6d:dc:93:af:99:25:7f:6e:82:c0:9f:
be:35:ed:2a:14:96:87:44:bc:6d:5c:64:fb:cb:95:c9:16:d2:
a9:4f:20:93:b7:ed:d0:96:bd:5e:02:e0:8a:dd:27:93:e1:b4:
ad:c5:15:c1:4f:1a:18:5d:92:79:73:6e:b0:e4:2a:1f:e1:63:
45:87:35:f8:d0:ee:a6:5b:61:6f:58:43:c4:c0:3e:c3:bd:2e:
13:9b:95:02:27:e0:d6:eb:4e:39:7a:9e:0f:78:3f:25:2f:86:
7f:c4:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:10:27 2025 by rpki-client