This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json)
Hash identifier: gdIJKm34y9SJLOMiUbJRgB3SiAczfN/SOfODZCoGdLc=
Subject key identifier: C0:22:A8:14:E1:DA:37:04:77:7C:02:8C:14:23:47:9C:2D:97:E3:A6
Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Certificate serial: 0E10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
Manifest number: 0DF9
Signing time: Fri 26 Dec 2025 17:29:54 +0000
Manifest this update: Fri 26 Dec 2025 17:29:54 +0000
Manifest next update: Fri 02 Jan 2026 17:29:54 +0000
Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: 2GAU2OuG87kda3jxqX8Y0t57bJFJUB5SCqCaBT3WRdM=)
2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: QRiQWTuHs2N0n4uouzBGjUh3RsRbuch8nwIeKPyOutw=)
3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: ETp781o8T+wZdwMPTqGeE3MpSkYl74AAxIyGewKtm10=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 17:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3600 (0xe10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85
Validity
Not Before: Dec 26 17:29:54 2025 GMT
Not After : Jan 2 17:29:54 2026 GMT
Subject: CN=694ec612-b0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:49:a8:de:33:50:b7:c9:ad:ff:8a:4a:02:47:
32:62:1a:dd:95:04:41:39:a3:a2:08:b1:07:7d:08:
97:f3:a1:8c:90:ca:16:1c:de:7d:3a:0d:47:1d:ed:
fc:53:28:f5:a8:87:cc:67:b8:54:f9:27:e2:a8:03:
b4:5f:21:f3:31:60:10:67:29:b8:b5:32:00:4c:fd:
93:c8:50:dc:4e:3a:11:a7:74:f4:14:85:9d:ac:10:
04:ec:79:e2:c2:fd:79:e3:f8:4e:8c:9b:94:0e:2e:
99:ac:bb:33:99:a9:ef:11:02:9a:3d:76:c8:be:11:
ea:f6:a6:87:41:81:d1:36:38:e6:5d:52:41:24:14:
85:fd:f1:44:e6:be:54:75:5d:1a:07:8c:ba:7c:e0:
07:ec:3d:5e:45:d3:e1:2d:43:92:56:a9:4e:9d:e0:
26:6c:6b:62:98:c4:c0:fb:b6:5b:44:07:74:63:7e:
84:34:8d:49:60:3c:9e:c3:30:72:a8:4b:7a:41:36:
20:ac:bb:29:4e:42:bc:c8:9b:36:44:d5:68:e2:42:
ec:98:7c:18:77:1a:ca:80:31:47:e7:23:eb:cc:c9:
cd:6b:1d:e4:64:3d:18:ee:11:a4:07:bb:42:0c:c6:
d6:9c:c5:85:e4:dc:64:11:5a:b9:3b:01:2e:44:59:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:A8:14:E1:DA:37:04:77:7C:02:8C:14:23:47:9C:2D:97:E3:A6
X509v3 Authority Key Identifier:
keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:04:64:57:3f:33:f4:42:0c:d2:61:3b:f1:68:c6:58:69:
8d:f2:61:e2:fe:0d:1c:d0:fb:7d:98:e7:d3:d6:c3:3b:2c:00:
a5:a9:70:1d:ba:5c:e9:d2:87:29:a1:21:c3:6a:b9:5a:f3:11:
39:81:a9:04:c9:5f:a6:fe:1e:f5:cd:19:49:89:86:a1:b1:22:
10:f1:24:3e:9d:37:03:99:18:79:c6:21:6d:be:77:99:28:2a:
0c:0c:ca:b6:a5:7c:4a:c2:23:1c:1c:b0:b4:bf:67:54:cc:2f:
c1:95:b2:e0:5e:6d:73:b8:6f:30:40:1e:b5:23:69:6c:f0:9f:
6f:47:5a:39:ce:66:51:87:65:c1:c4:d7:a1:94:aa:38:ac:e1:
39:b4:d0:55:2e:df:be:5e:80:42:ab:a3:11:50:fa:1c:dc:b4:
ea:17:4d:4f:ea:f8:84:c3:0b:c0:6e:ea:e2:68:12:17:bc:93:
3b:af:a0:e7:ab:58:00:47:4d:41:27:4d:ce:cd:26:3e:38:ab:
62:d4:69:bc:43:64:35:64:0f:6d:3d:6d:7f:1b:13:50:35:85:
a2:4f:05:be:7f:35:31:29:3b:50:9b:4c:2f:a5:70:0c:e3:6f:
7f:4b:fa:c8:c5:0a:86:01:9b:98:61:68:da:7b:47:0a:07:03:
4b:80:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 23:44:30 2025 by rpki-client