This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
File: tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft (raw, json)
Hash identifier: Vpol6qAJxAX5gHsCWTs6pIuwCNq7a0HrQFzYc8nbDVQ=
Subject key identifier: 7F:1F:2B:A6:A7:6F:63:44:F6:F3:B3:BE:09:DC:11:9E:69:B7:05:22
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Certificate issuer: /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
Manifest number: 0162
Signing time: Sat 27 Dec 2025 03:03:46 +0000
Manifest this update: Sat 27 Dec 2025 03:03:45 +0000
Manifest next update: Sat 03 Jan 2026 03:03:45 +0000
Files and hashes: 1: tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl (hash: UZPW9N7BAWa3nzw+pC1eFyX16RbbJ4MATiAdjZv21so=)
2: B2B006BAE3E911EEB845B268C4F9AE02.roa (hash: fj5an6uMsWFMPTZr6PrKep91XRX3rQER6UmH0deptJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 03:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Validity
Not Before: Dec 27 03:03:45 2025 GMT
Not After : Jan 3 03:03:45 2026 GMT
Subject: CN=694f4c92-283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:b8:80:14:44:3b:87:c1:b8:f9:08:bd:6c:
6c:1a:7a:bb:39:ff:54:32:9f:23:38:88:05:ca:fc:
b1:36:4b:57:9a:e7:f2:fb:80:a4:0c:0c:e7:8d:7b:
e0:7d:a1:b5:08:cd:6a:86:60:87:40:27:f2:42:a1:
cd:ff:9b:7c:bc:40:3e:9d:c8:77:41:2e:7d:30:c1:
1b:0c:64:38:f6:f9:4e:c6:50:2d:11:72:93:e2:dd:
d6:c4:02:bc:a5:7e:10:29:78:bb:59:91:b7:ef:5d:
17:57:9c:18:db:9f:4e:39:0f:3b:7d:93:46:79:0c:
d9:ff:b7:59:a4:23:9a:c1:ef:4b:9e:a0:6b:e7:07:
ad:9b:c1:dd:bb:5b:a2:55:59:eb:69:81:76:a3:8a:
22:1c:78:0e:ee:df:4d:d8:66:4e:1c:dd:03:15:50:
38:88:45:93:b4:b9:5e:b9:d7:86:57:7c:0a:9d:26:
ba:bf:66:9b:85:b3:29:87:4c:92:fd:e9:a3:5a:6c:
8d:f4:16:0c:85:13:46:73:74:c3:94:50:6a:4c:49:
19:13:eb:ae:ef:78:79:2e:d6:bb:a3:d9:0b:cb:bf:
a4:cb:fa:39:8d:06:5d:11:fa:14:60:ec:d4:3f:36:
38:76:97:45:71:1a:2e:b7:f9:94:8e:5e:ce:4a:76:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1F:2B:A6:A7:6F:63:44:F6:F3:B3:BE:09:DC:11:9E:69:B7:05:22
X509v3 Authority Key Identifier:
keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:eb:9e:65:48:cc:23:be:6c:cf:95:cb:17:35:92:21:f1:e9:
16:0b:87:ed:38:03:01:c9:17:0b:d7:93:c0:7f:a3:d0:a6:25:
45:60:ee:8e:4b:e7:49:bb:69:01:48:5d:03:7a:44:42:5d:d2:
ff:3f:35:50:fa:fc:64:a0:ec:80:c1:ed:fc:4f:1d:83:fa:6a:
b3:ff:c1:8d:f4:66:7d:a2:e3:ff:b8:00:3d:6d:94:99:35:df:
1a:b3:20:20:85:07:7f:5d:2f:a0:49:58:b1:80:50:80:f1:51:
af:7c:3d:5f:c9:a3:1d:3c:d8:74:42:ea:04:90:72:29:14:02:
79:c3:55:c7:0e:1f:28:d9:6b:aa:e3:62:a7:6e:6c:da:26:dc:
b2:4b:4e:bb:b8:07:86:9c:8a:29:f9:28:11:45:3c:8b:8d:5a:
a2:38:ca:7a:40:0b:71:2f:65:c2:7f:4c:53:5a:bc:c1:2b:4c:
8e:a6:42:20:51:ef:6d:d7:0c:f1:99:25:7d:71:74:20:c6:b9:
98:7d:6f:c8:8d:6e:b5:2c:6f:4a:c8:44:17:d3:4e:0b:b1:6f:
09:1a:7b:24:6e:08:f1:02:d1:05:6e:87:2a:b6:8d:14:0f:2b:
9f:7d:eb:e3:97:01:d4:1e:e0:3c:aa:7b:f2:08:95:d4:28:d1:
c8:b9:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 02:07:35 2025 by rpki-client