This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
File: kCSWwSsdqlhOQrNDNM8XIBI2snw.mft (raw, json)
Hash identifier: +pNESp3Ermx7pk8oV3n2qCei34tVhnvVZJLd8Y+bGHY=
Subject key identifier: CA:9E:79:5D:66:69:20:96:3B:2B:F7:FA:5C:3B:7D:ED:E2:0D:8C:25
Authority key identifier: 90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
Certificate issuer: /CN=A912346E/serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Certificate serial: 0682
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
Manifest number: 067D
Signing time: Wed 24 Dec 2025 21:47:13 +0000
Manifest this update: Wed 24 Dec 2025 21:47:13 +0000
Manifest next update: Wed 31 Dec 2025 21:47:13 +0000
Files and hashes: 1: kCSWwSsdqlhOQrNDNM8XIBI2snw.crl (hash: +YVMMd6FSjHdsb+xoA6jU2xt2laekbby7yGvfoqkWwc=)
2: 5E54C4BEA06411EBB6AFCD55C4F9AE02.roa (hash: gD2pdRxoUHqWRJCmsWGE/SoCkIZoZVizTbKUYmffLCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 21:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912346E, serialNumber=902496C12B1DAA584E42B34334CF17201236B27C
Validity
Not Before: Dec 24 21:47:13 2025 GMT
Not After : Dec 31 21:47:13 2025 GMT
Subject: CN=694c5f61-32ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:f0:41:e5:09:13:2b:07:e3:c3:24:df:fc:
9a:e0:18:02:a7:f3:72:3d:a7:b5:b5:86:a1:6f:f9:
9e:81:7e:42:eb:6a:c3:7c:03:db:8f:b4:64:7d:96:
88:d4:48:1d:65:7d:99:b7:ee:50:38:9d:21:57:77:
6f:ca:dc:b2:7b:56:a0:b8:2a:04:34:57:b4:1f:f0:
7d:ca:b0:63:69:15:64:99:f0:df:24:f8:af:1a:04:
95:22:cc:77:42:48:79:07:fb:f8:b5:ab:90:d5:db:
15:4b:4d:33:51:9d:dc:90:02:58:ae:00:3c:8e:90:
0a:6b:2e:7c:ad:2a:69:65:f3:d1:82:8c:eb:4e:a3:
e8:3e:a3:a8:d2:be:5c:7e:fc:34:4a:50:b0:a5:2c:
ef:bb:e2:9e:2c:43:09:d3:20:b8:09:33:40:6a:61:
65:72:d9:e2:95:56:ea:4e:b8:95:11:fa:22:ba:3b:
c9:77:c1:1e:4a:45:f4:9d:20:ff:1c:2d:f0:11:2c:
53:58:60:98:4e:f5:21:bf:5b:35:45:94:15:e5:1a:
2b:7d:ac:c3:50:9f:3a:cc:f8:30:f1:ea:d2:cd:60:
17:19:61:e7:2b:33:55:12:25:11:f7:04:b9:fa:c4:
b2:db:7c:97:9c:b9:dc:b7:6f:1b:9c:0a:28:10:04:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:79:5D:66:69:20:96:3B:2B:F7:FA:5C:3B:7D:ED:E2:0D:8C:25
X509v3 Authority Key Identifier:
keyid:90:24:96:C1:2B:1D:AA:58:4E:42:B3:43:34:CF:17:20:12:36:B2:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kCSWwSsdqlhOQrNDNM8XIBI2snw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912346E/85C43FFEA06211EB859E7653C4F9AE02/kCSWwSsdqlhOQrNDNM8XIBI2snw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:90:59:f1:dd:d6:64:43:7b:71:00:0c:07:fc:2f:02:2a:3a:
b1:0b:ae:e5:39:77:5b:9d:9c:ba:3b:03:c6:a3:6a:b9:66:5d:
50:f5:9a:bb:25:3e:4d:d8:4e:cb:64:a5:bb:0f:92:a4:d4:3b:
b5:2b:62:61:25:06:8a:e6:89:20:b3:0e:09:a9:ed:5f:27:f4:
77:16:cc:7c:73:3e:fc:e1:ac:70:57:e7:89:f7:94:78:e0:e3:
7a:cc:38:48:0a:9d:44:1a:58:c0:47:35:e9:fa:4d:12:5e:be:
d5:6f:29:9e:fb:91:15:3b:25:0d:60:a7:2a:c1:9c:79:96:e6:
c4:d7:12:bf:9b:8d:df:15:72:4d:d2:c4:e6:29:17:ff:32:6b:
5b:64:97:c7:cd:c7:97:4f:57:66:1d:78:fc:03:61:df:d2:92:
a2:81:2e:a1:60:04:af:b4:7e:f5:bb:5c:86:5b:48:ef:81:27:
7f:bb:3d:b9:71:00:03:95:af:56:dd:c7:eb:1c:03:ad:a3:f5:
77:6e:e8:f7:ff:36:7a:f9:85:28:49:fe:d3:22:58:a6:30:65:
55:e2:dc:81:00:fc:04:f1:28:27:71:4f:b4:97:92:19:c6:7b:
30:1f:71:95:c3:40:fa:b9:fa:03:7e:e4:11:5b:0e:b0:f2:9c:
7a:14:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 06:29:19 2025 by rpki-client