This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
File: MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft (raw, json)
Hash identifier: BdJhBw2mFBHIrpfaBRALijba7wkBYPy3Su79c5rQCvM=
Subject key identifier: 8D:AF:04:C6:D5:F5:8E:E4:30:26:E5:0C:D6:48:AB:1E:7D:F2:C1:43
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial: 0665
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
Manifest number: 063F
Signing time: Thu 18 Dec 2025 22:12:47 +0000
Manifest this update: Thu 18 Dec 2025 22:12:46 +0000
Manifest next update: Thu 25 Dec 2025 22:12:46 +0000
Files and hashes: 1: MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl (hash: j/HS2IO8yMZ1nK3J/rpkhMgAnsMqZTYe2xVudNzrKHs=)
2: B902532EFEA211EDB9013076C4F9AE02.roa (hash: drfPb+wsZvR+2/MNwdz1cNWuRVIEZ+Qx8nSL5NiDabc=)
3: B7BBC928FEA211EDB9013076C4F9AE02.roa (hash: 691+02/w7Hvvvxts+u+wZs/SnQae95oqmqWQ70mluhE=)
4: B9A42F96FEA211EDB9013076C4F9AE02.roa (hash: hyqKDl6jtyGKyJAIAa4mx+PngO9SccHqsfXS7jNKJMs=)
5: B87A46B4FEA211EDB9013076C4F9AE02.roa (hash: 21tBW1VF1vSpAUMu3v9M3rwY90XGE+/GtmmuaU3EsAw=)
6: 40583EE4424311EFB787BD3AC4F9AE02.roa (hash: lY3WVWAOTyIsAjMp/FETDq12SBCAxXSbP620LU0HkGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:12:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D3F3, serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Validity
Not Before: Dec 18 22:12:46 2025 GMT
Not After : Dec 25 22:12:46 2025 GMT
Subject: CN=69447c5f-0bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:8f:45:cf:2d:ba:96:86:c8:41:56:b4:c8:
27:51:d4:25:db:28:3d:c8:ca:72:52:c5:37:e1:f0:
30:ba:6a:38:47:74:a1:56:a2:cf:d4:c1:f3:5d:97:
44:c1:40:72:d6:0e:9b:af:22:ce:91:44:86:90:e8:
8d:e1:4c:d2:ff:c4:87:2c:08:56:99:bb:60:03:66:
c2:63:ef:2c:50:e8:8f:b4:6b:da:8c:54:c7:1e:ef:
25:87:e1:71:35:9c:3b:0b:57:64:e7:46:2e:02:9d:
3a:73:65:f8:c8:12:fb:d9:e5:e0:0b:58:0a:eb:21:
0a:b5:1b:b4:47:8c:e1:34:c7:d7:b6:6b:86:67:0c:
4c:9d:ac:a0:5c:45:f0:a1:b7:32:eb:90:37:05:e0:
b1:ba:94:4c:87:7f:a4:7c:f3:42:39:d0:32:56:61:
95:b1:0d:3e:dd:fa:e4:cc:90:a9:1d:c8:a1:7b:b1:
e1:e9:39:dd:8e:f8:34:4b:fc:c8:52:7c:dd:51:66:
6b:b0:ae:a4:d3:38:d9:10:e8:f3:d9:e8:d2:19:da:
6a:ea:d2:ae:cc:97:04:a4:b1:ea:a1:3d:ba:07:36:
07:71:c5:f4:15:26:b0:64:3d:14:16:f9:e4:d1:55:
10:ba:66:e5:4f:9c:93:d8:16:7d:62:e9:b0:e3:36:
85:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:04:C6:D5:F5:8E:E4:30:26:E5:0C:D6:48:AB:1E:7D:F2:C1:43
X509v3 Authority Key Identifier:
keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:be:5d:0c:ca:92:ed:f9:dc:28:42:b0:9a:b3:bf:45:f0:10:
c2:ce:ac:35:01:25:0e:a6:e2:be:8c:a1:d8:31:64:f7:be:9a:
6e:4a:e2:7c:29:86:7d:60:91:2b:eb:e3:7f:af:03:85:af:48:
d6:1a:0f:c1:78:ae:65:43:15:19:8a:28:99:d2:14:2e:8f:8d:
cd:24:c5:14:cd:fe:ef:10:71:0f:69:de:e1:80:62:61:b0:18:
25:d8:94:64:a5:e2:fa:70:24:eb:25:79:b5:67:d0:d7:7e:69:
df:93:9b:a6:20:11:f2:4b:38:3d:8e:99:46:0c:52:cd:85:2c:
d0:c1:61:56:1f:be:3b:d6:27:b8:59:22:76:00:5c:b6:cc:01:
6c:67:f3:6a:45:e4:3a:89:e0:e7:38:2e:cd:eb:3a:e3:57:81:
b9:97:83:3d:4c:f1:69:7a:ae:0e:6e:52:53:b8:17:a2:5a:5a:
5e:0e:97:66:da:04:88:c9:53:78:60:b4:61:8b:25:00:86:17:
c5:3c:0e:db:4d:fd:ba:16:fc:47:22:2f:99:8d:04:c7:7f:c9:
6e:a2:7b:34:1b:02:38:1e:11:af:42:dd:a5:14:24:f8:4c:c0:
2e:b2:e7:7a:17:4d:b3:01:5e:de:fa:37:28:75:7b:f5:fe:d7:
45:51:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:48:01 2025 by rpki-client