This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json)
Hash identifier: socH8XxT1vSSgFxcpnUBxMRyD5A91WUtQ3hXijpffDM=
Subject key identifier: 19:90:0F:4F:34:8C:2F:61:B9:8A:34:4B:76:23:74:0C:EE:D7:68:C1
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial: 0B3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
Manifest number: 0B2C
Signing time: Sat 20 Dec 2025 18:48:46 +0000
Manifest this update: Sat 20 Dec 2025 18:48:46 +0000
Manifest next update: Sat 27 Dec 2025 18:48:46 +0000
Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: HM3cCeMzFujHQZo7xtWxqVPWHz3YLkEEEVLIPkcKKWw=)
2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: lHB3EjiVIRGj7eZK04nTZOWleSjetiCEVc7tdPvMiiA=)
3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: iND3Lx5ArlZCn+bmlp3Mm/3K9nvCqz4EFEYZ5pfFFhc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2878 (0xb3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Validity
Not Before: Dec 20 18:48:46 2025 GMT
Not After : Dec 27 18:48:46 2025 GMT
Subject: CN=6946ef8e-03fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:b8:a1:c4:56:83:dc:85:02:ba:9b:b2:fa:
e1:fd:29:b2:11:50:ca:7a:09:65:b7:47:1a:26:dd:
79:68:5a:65:de:b4:f1:55:f6:a8:ad:4b:7a:6f:e9:
cb:d3:96:ef:3b:04:c4:ef:b8:5b:f2:a4:f6:84:ed:
36:3a:c0:ff:58:c5:ee:4d:fb:5b:18:09:86:5d:b6:
a9:39:47:5c:fd:6b:e7:78:fd:61:3d:92:04:d7:86:
07:c6:ac:16:3b:15:60:7e:ac:5b:cc:fc:57:8d:6a:
8d:81:ba:c7:ca:8e:55:e5:3b:8c:38:76:36:32:ce:
0e:cd:fd:4d:f1:7b:e4:56:ac:b0:12:24:8a:c1:db:
83:9a:fc:54:69:f8:63:2a:44:85:d7:c2:fb:1d:e1:
82:4e:69:8c:29:af:21:77:1e:76:ee:10:43:20:d7:
54:80:67:7f:7e:5d:85:ac:b2:2e:6f:8a:0d:a3:a0:
64:f1:c6:53:ad:ae:59:1f:8c:7a:a9:f4:06:c4:8f:
be:9c:0a:c6:c5:19:e6:0b:cb:d5:3a:48:d8:bb:0d:
c4:bd:ef:b9:89:a4:68:4d:71:0a:f6:c6:b1:36:ed:
09:10:b7:3f:90:6f:18:9e:5b:a7:46:dd:8c:89:4e:
37:7a:08:f0:bb:09:ba:c8:16:f8:41:43:f3:04:42:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:0F:4F:34:8C:2F:61:B9:8A:34:4B:76:23:74:0C:EE:D7:68:C1
X509v3 Authority Key Identifier:
keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:fa:68:7d:04:09:f5:e4:c0:75:71:7f:f5:17:19:6b:53:
40:af:22:ad:73:61:fa:01:f0:cb:da:fb:3c:16:e9:2a:1c:98:
b2:16:c9:cc:2a:42:80:e6:3a:7d:72:d5:95:79:6a:94:63:4d:
00:62:07:00:ae:ed:38:af:ad:c2:a6:38:49:85:38:33:fa:2c:
43:07:0f:81:c3:12:c4:66:fd:08:a4:02:1f:27:93:10:8c:16:
89:89:63:d6:21:bd:a9:df:b0:bf:e7:5b:60:94:e9:b8:66:4e:
a5:20:4f:46:f6:b9:7d:e1:dd:49:0f:f5:56:e4:9d:3a:e4:bf:
0b:54:8d:ac:ef:89:5b:d2:c5:11:10:fe:87:d3:3c:8f:19:9e:
6a:78:11:db:e6:9f:9f:1f:56:26:c9:6b:0d:56:8f:97:f9:4b:
c8:f0:98:4b:18:48:5f:96:ac:53:c1:16:57:35:47:08:11:8c:
4d:7f:fb:47:4c:c3:3f:5c:b0:16:ff:43:81:fb:b5:9b:78:f1:
f2:bb:46:2d:ac:c2:8d:7f:52:74:87:3d:ac:71:95:42:72:74:
07:a0:e7:fe:14:ca:c8:94:9c:b9:1d:07:b0:c6:b1:b8:28:54:
16:f6:8b:3b:7a:cf:27:cc:d2:69:f7:8a:66:95:2c:e9:9a:3a:
37:ed:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:50:01 2025 by rpki-client