This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
File: n-iB2L0yrRWre-e07E91IhJUbHY.mft (raw, json)
Hash identifier: 8uJUuBuZYSfQiz7ejA4JNUUfQ2Z1IgLEwx8csTscQHo=
Subject key identifier: 14:15:92:D7:A7:64:71:AA:F1:61:66:28:E6:95:60:04:2C:99:30:5D
Authority key identifier: 9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
Certificate issuer: /CN=A9118FFA/serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Certificate serial: 0124
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
Manifest number: 011E
Signing time: Fri 19 Dec 2025 03:54:43 +0000
Manifest this update: Fri 19 Dec 2025 03:54:42 +0000
Manifest next update: Fri 26 Dec 2025 03:54:42 +0000
Files and hashes: 1: n-iB2L0yrRWre-e07E91IhJUbHY.crl (hash: peDxOHVGupH39ROJNjwB49NSyJY7o7tbT8kPzuzn/MY=)
2: 2C6BA5E82EB511EFBCC65925C4F9AE02.roa (hash: Lss+xMSjsVW/Iz01A+UAitwGdTNiOgTBuwOADNSWYt0=)
3: E80A0D282B9D11EFB61F1148C4F9AE02.roa (hash: Uft/wx6+OSudUAkV6haKL8qwseEuVEVTt0nYwgnQ/Yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:54:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118FFA, serialNumber=9FE881D8BD32AD15AB7BE7B4EC4F752212546C76
Validity
Not Before: Dec 19 03:54:42 2025 GMT
Not After : Dec 26 03:54:42 2025 GMT
Subject: CN=6944cc83-a9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:dd:6e:06:5f:b8:5b:9d:ff:c9:e5:4a:39:
62:93:72:1e:4c:b3:e6:48:83:d4:29:31:a7:09:0b:
f2:4f:17:0b:82:c7:3a:df:25:da:d2:d6:e4:89:79:
52:98:07:01:9a:8e:9d:35:9c:69:35:5f:ba:62:a5:
49:3d:e7:fa:60:25:76:c5:4b:03:ab:d8:f8:b0:2b:
73:41:e3:39:ec:63:09:11:8a:d2:a1:f0:1e:3f:09:
a8:f7:1d:8c:1c:29:d3:f0:c7:7c:ff:54:0b:08:e3:
40:07:4d:cc:b5:5f:78:75:35:c8:a7:e2:c8:74:ec:
1c:23:2d:b4:6e:06:fb:3f:30:72:d0:76:ec:3e:dc:
3d:6f:8c:f5:05:d3:09:b4:a7:59:da:5f:69:dc:aa:
2a:70:63:cb:32:d4:65:11:25:ef:bb:52:00:f3:a9:
a4:e3:99:a9:ba:28:70:67:6e:d1:7b:19:85:63:49:
6f:84:c1:3c:b3:de:87:67:46:ec:54:e1:ff:65:92:
ac:38:ad:af:77:21:09:fc:e1:f5:7f:3e:d8:97:e6:
00:93:c4:fa:cc:ca:14:b1:80:87:b7:e0:ad:2b:a1:
76:91:33:8e:b8:03:2e:6f:4d:7f:e6:1b:d5:17:cf:
64:cb:b1:17:f4:11:2b:7f:8a:50:9a:94:66:ed:d6:
02:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:92:D7:A7:64:71:AA:F1:61:66:28:E6:95:60:04:2C:99:30:5D
X509v3 Authority Key Identifier:
keyid:9F:E8:81:D8:BD:32:AD:15:AB:7B:E7:B4:EC:4F:75:22:12:54:6C:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n-iB2L0yrRWre-e07E91IhJUbHY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118FFA/0586068A2B7C11EF89E84144C4F9AE02/n-iB2L0yrRWre-e07E91IhJUbHY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ac:d2:09:f4:4c:2b:b5:c8:27:48:cb:3f:4a:31:32:1d:eb:
36:8f:e4:53:76:1c:01:5a:80:f8:33:b1:34:57:38:5f:d2:42:
da:64:36:75:7a:3e:a6:53:60:e7:c4:70:c5:02:00:5d:7a:4d:
46:7a:2d:63:8d:7a:ec:75:9c:7f:e4:b8:3b:7b:e5:0e:4f:b2:
52:f4:46:de:a6:16:45:f9:23:33:0c:e4:b5:7e:43:b9:fb:98:
76:91:63:29:5d:00:70:f1:1b:ba:6d:7b:2a:ef:f6:4e:9c:e5:
f8:3c:78:cc:70:27:cd:69:77:7e:a8:6a:dc:14:a4:8f:d6:df:
42:c1:e1:d4:1e:f4:c5:da:c2:75:98:b0:23:9c:e9:b0:75:5a:
e9:d5:47:c1:df:67:3d:d1:3d:31:4e:50:d6:dd:e6:98:4a:72:
8f:b9:24:9d:42:02:c9:0d:e6:62:60:62:3e:e4:c5:b4:4c:52:
92:cc:23:5b:78:c5:6d:57:0f:f1:9d:f0:78:8e:8c:25:db:23:
a2:0c:b1:32:33:06:36:72:55:c5:f8:68:eb:33:51:cc:a3:1d:
28:7e:f8:3d:65:b1:c0:6f:9c:e4:c0:d3:cb:40:6a:d1:42:eb:
d0:40:69:12:7f:95:68:e6:95:5f:1c:5c:f5:df:dc:1b:df:d7:
3f:9a:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:57:43 2025 by rpki-client