This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
File: 45n1PPpSq9Wox8HTkpWcOV854n4.mft (raw, json)
Hash identifier: XnnThTK2MufU5GCtk4Wgfy18yswyU+jZb2DGUF3Vi6g=
Subject key identifier: 24:99:AD:29:9F:A7:AD:2E:00:AE:02:52:0F:69:63:2D:41:12:D1:69
Authority key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
Certificate issuer: /CN=A912D0B6/serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Certificate serial: 0F60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
Manifest number: 0F46
Signing time: Sat 20 Dec 2025 17:17:37 +0000
Manifest this update: Sat 20 Dec 2025 17:17:36 +0000
Manifest next update: Sat 27 Dec 2025 17:17:36 +0000
Files and hashes: 1: 45n1PPpSq9Wox8HTkpWcOV854n4.crl (hash: zbVd2DvgQeoeL0l+SjLGTybddLPFJAzcB9lk8gU/flY=)
2: 57A86D66553F11EBA47EB279C4F9AE02.roa (hash: Ao2MdtIoRl87gC2mtEAscioKdKAFmPGREnFCP9lsjgM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3936 (0xf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E
Validity
Not Before: Dec 20 17:17:36 2025 GMT
Not After : Dec 27 17:17:36 2025 GMT
Subject: CN=6946da31-3d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:0a:d3:75:0c:bc:d2:f5:80:ba:06:d7:e5:
85:f7:3a:5b:0e:ea:51:c0:dd:6b:21:35:03:fd:d0:
3c:c7:f7:ac:6b:3c:65:05:98:e1:8e:e9:c1:1f:35:
9c:96:cc:26:44:ea:94:40:ad:19:b8:f7:62:ed:27:
35:72:a1:db:30:68:cd:3e:4d:35:ba:b2:5c:55:07:
69:46:dd:9d:d4:49:d4:9a:78:9e:4e:41:8b:3f:ec:
b4:2c:88:54:0c:41:a0:74:92:16:0a:6b:0b:d1:0e:
09:54:b7:86:82:dd:82:8c:e6:6a:21:74:4a:7f:f7:
d3:10:63:4f:cc:11:b8:9b:37:11:70:8e:d0:fe:12:
1d:17:d4:3f:8a:ef:b3:93:3c:a5:20:c3:2c:9f:db:
01:fa:de:01:e5:e7:89:a2:7c:3c:1a:24:d8:71:5f:
ef:86:23:27:62:d2:70:c2:c8:9c:3e:c6:a0:b1:d3:
69:87:e2:8b:97:92:9a:af:53:e2:b2:66:e8:54:c4:
3a:9c:80:6b:03:2a:24:6f:c6:3f:b5:94:0e:65:77:
84:7f:0c:c7:84:76:0a:e7:7e:7f:ef:62:1a:ad:93:
c7:6f:fb:74:ce:e9:71:c9:58:c0:2c:15:8e:a6:26:
37:64:76:57:6f:66:cd:11:ad:3c:c8:de:83:9f:20:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:99:AD:29:9F:A7:AD:2E:00:AE:02:52:0F:69:63:2D:41:12:D1:69
X509v3 Authority Key Identifier:
keyid:E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e4:94:e9:74:13:2c:35:4a:fd:bd:52:29:c0:00:28:d8:8d:
1c:a8:1d:f6:fd:af:ab:9d:bb:62:b7:02:34:23:91:bc:84:91:
a0:e8:18:95:f0:fc:65:48:e8:ab:10:53:11:e6:ee:6f:bf:c9:
b1:38:0f:56:73:ab:b9:28:48:fc:ea:5e:40:b7:9b:17:20:41:
c4:c9:da:21:b4:68:7d:4a:95:a9:37:ff:b5:cd:77:74:f0:e9:
4f:9e:71:6c:ae:0c:8b:1c:fd:a9:49:84:c1:24:09:5c:f7:1e:
d7:04:6f:25:a7:da:da:a8:88:16:83:cc:ac:43:6d:d9:f4:d2:
a6:ee:82:68:bc:3e:84:ab:a3:3f:54:ba:41:7d:40:20:0a:83:
ca:6e:77:e4:d1:02:04:f3:75:7a:8c:e2:e3:99:6c:77:a7:e2:
f9:16:5e:c3:2a:72:58:0e:fc:06:b2:bc:9f:f5:a2:97:e0:bb:
e9:63:15:bf:fb:d9:7a:dc:e6:f5:c3:ff:b9:b7:ca:df:b2:96:
41:f5:0b:8f:1f:83:57:a6:3f:76:b9:51:fb:4f:9f:2d:01:a9:
16:f3:b8:69:58:e0:7b:5e:0d:16:24:c7:21:5a:57:14:0d:a5:
87:34:c7:48:ce:26:7c:c0:00:9d:d3:f4:75:ca:9e:26:46:1b:
f0:91:1d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:35:47 2025 by rpki-client