This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft
File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json)
Hash identifier: S+LAmsFlxM0NHd/b6WufuCQug0yzmC19Vv04F9f7y2s=
Subject key identifier: 11:D2:8D:BC:1E:2E:E0:C1:66:C3:89:41:FC:25:A8:B0:D8:7D:1A:67
Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B
Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B
Certificate serial: 0FBA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft
Manifest number: 11EA
Signing time: Sun 28 Dec 2025 17:11:30 +0000
Manifest this update: Sun 28 Dec 2025 17:11:29 +0000
Manifest next update: Sun 04 Jan 2026 17:11:29 +0000
Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: WWuPxrCkzwjz82Qz9+JLUVHJ7gTEZGJx0egr/eRqxjo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl
rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 17:11:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4026 (0xfba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BFB0, serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B
Validity
Not Before: Dec 28 17:11:29 2025 GMT
Not After : Jan 4 17:11:29 2026 GMT
Subject: CN=695164c2-014c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:e6:9b:9f:d4:b3:8a:4b:fb:5a:5a:79:b2:
66:da:ff:59:1b:b4:cb:af:0a:1d:8d:0c:f8:cb:6f:
89:78:03:d3:32:ac:74:c6:55:7f:f6:36:d4:a1:8e:
6f:0d:45:20:00:b0:94:04:d7:22:0c:e6:75:55:21:
ad:85:05:de:b4:b0:57:6f:3a:ca:55:a5:ac:2a:71:
86:b4:21:da:08:e0:20:7a:2b:38:bb:d0:7c:a0:08:
0d:10:bf:fd:e7:b2:96:ca:6c:7f:d7:66:55:61:d1:
ba:63:a0:8c:3f:fe:54:06:9b:f5:e6:75:0c:5e:19:
22:92:1c:7c:56:ce:a7:04:9e:22:70:37:27:17:52:
c1:8b:cf:22:a0:2f:0a:66:f8:7f:06:65:17:54:4e:
0f:31:dc:9c:01:bb:6c:80:8a:53:4b:a2:10:b7:f9:
51:16:d5:35:1e:2f:df:b3:46:76:cb:1f:35:b7:db:
f0:ed:f4:f0:2e:f4:25:7c:b0:59:bd:0a:a4:20:84:
3e:b1:b1:28:5e:9f:14:05:e1:d5:82:8e:a0:b3:65:
1a:d1:0c:42:51:0b:21:a6:04:0b:cf:42:eb:d1:e3:
d2:75:27:18:df:de:cc:8b:4b:77:c1:cd:46:e0:4e:
62:2a:62:5a:7d:81:30:58:6b:75:d9:2d:51:21:d5:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:8D:BC:1E:2E:E0:C1:66:C3:89:41:FC:25:A8:B0:D8:7D:1A:67
X509v3 Authority Key Identifier:
keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:73:59:42:9c:de:d0:9c:85:45:cf:51:42:ac:c8:ab:a2:dc:
be:70:fa:99:f1:a4:b7:7a:2c:6f:ef:23:f5:1c:f9:2d:0f:4e:
97:bd:42:ef:42:78:0f:24:60:4d:48:4a:6e:0b:36:cc:f1:f8:
22:9e:f0:7a:61:63:8a:67:d2:4e:a4:79:90:66:70:c1:89:95:
04:f8:f7:a0:32:aa:4d:1a:ab:a1:e8:af:c9:ce:f7:83:f7:b0:
44:a9:89:78:78:4e:c3:30:d6:24:dc:4d:0c:da:d7:ff:42:f1:
25:4d:41:31:11:94:05:f2:cb:71:6e:06:89:52:9a:16:05:6e:
58:a5:15:af:c1:05:6c:e6:c7:2b:6f:a1:85:90:bc:03:3c:79:
f9:e8:bb:b1:8f:ac:40:e5:aa:ee:4e:52:cf:9c:f8:87:8d:27:
e8:3a:ec:70:71:af:59:f2:9b:70:76:02:c8:05:b8:2e:62:58:
26:1c:34:fe:9b:bd:f7:f1:91:e8:77:0e:a5:9c:f6:6a:8c:ce:
2f:25:4d:f7:0d:71:9c:f3:51:81:37:05:ac:a3:19:b6:0c:bb:
35:54:51:e4:84:b5:0c:75:9e:6a:a4:d9:c1:f4:dc:9b:44:e7:
11:1c:64:c9:2f:4e:3a:10:5c:38:e4:cf:ae:6f:e3:17:5e:6d:
d1:03:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 16:19:59 2025 by rpki-client