This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier: AQ5iJksYIt8QYz+/7/hWimpjVU4n/9Mdh9NqTFprCyk=
Subject key identifier: 63:C0:5E:CA:69:02:24:0E:3A:A6:85:B9:CC:B8:45:05:08:60:0F:06
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial: 0CB5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number: 0CAB
Signing time: Thu 18 Dec 2025 18:05:17 +0000
Manifest this update: Thu 18 Dec 2025 18:05:16 +0000
Manifest next update: Thu 25 Dec 2025 18:05:16 +0000
Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: ar5MiAXO5dak/CHHstw4lLBedvyRv9Hw/A5QE2whcR8=)
2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3253 (0xcb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Validity
Not Before: Dec 18 18:05:16 2025 GMT
Not After : Dec 25 18:05:16 2025 GMT
Subject: CN=6944425d-505a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:41:98:17:13:c3:f7:11:e6:3c:69:19:03:
c8:2a:52:97:19:16:e0:71:51:f9:b7:eb:f1:98:38:
cf:29:c5:08:63:32:ee:5b:3b:37:25:e8:ab:ed:cd:
90:7c:08:bf:8b:d1:ce:94:c9:95:ab:83:89:fe:ae:
d3:b0:bd:39:08:72:a8:bc:4b:28:9c:3b:30:98:53:
35:6d:66:32:6c:d0:4e:55:2a:36:a5:90:d3:31:72:
3d:b6:1d:5b:fa:00:a2:95:73:1e:46:a0:ae:84:59:
95:0f:1c:5c:b7:49:f3:f0:9d:d6:e6:0a:bc:0d:1d:
0d:ca:8a:6f:b9:0b:77:d9:48:d7:6a:22:d4:f9:ba:
6c:03:19:8b:c9:e5:aa:34:d9:69:63:fd:79:56:cb:
81:07:fc:24:c7:85:10:ad:9d:69:62:1e:c6:66:52:
da:28:bc:09:81:13:18:37:1e:7b:55:b4:b5:01:76:
f7:98:ee:39:14:dc:37:be:62:23:9e:f7:f3:e1:bd:
15:81:09:09:de:8e:cc:fb:95:62:f5:17:59:8e:e8:
74:11:b7:b7:aa:50:0d:36:6f:67:56:85:07:51:45:
c5:49:f8:48:0c:12:43:52:4d:13:36:01:23:81:f0:
8d:11:a6:86:d5:1c:0a:7d:b8:33:12:93:60:43:29:
38:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:5E:CA:69:02:24:0E:3A:A6:85:B9:CC:B8:45:05:08:60:0F:06
X509v3 Authority Key Identifier:
keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:58:0d:de:49:2d:bd:e6:15:bc:25:1f:97:8e:4e:1a:8c:22:
b9:b0:38:16:93:98:a0:ba:b7:32:e5:e2:de:e7:9f:c1:e0:c3:
ab:af:25:79:03:98:df:61:69:18:e0:2e:8a:ed:5f:8d:8c:d3:
4c:27:51:ab:25:9b:61:bb:69:df:a8:e3:68:d8:36:8c:f3:f8:
ff:66:46:73:e7:45:fa:01:82:46:72:e1:fb:be:5b:d9:06:be:
be:7c:26:6c:11:0e:f4:e3:bc:fb:ae:70:a3:97:83:b7:ec:08:
68:1e:22:77:d0:c7:9c:db:95:4c:ea:27:bc:87:87:ff:ff:4e:
be:cb:dd:33:a5:38:d8:56:15:aa:8b:27:d3:3c:8d:7c:fd:6a:
e2:92:3a:52:ad:f4:c6:2f:f1:ee:b1:ab:14:9b:f4:c4:69:e1:
f2:64:ad:69:94:89:17:92:aa:14:c3:8c:71:c0:13:49:ec:80:
34:ac:97:f9:ed:54:d5:4d:65:a5:00:01:a6:c5:9d:99:20:05:
27:03:89:a7:72:e7:71:ff:86:cc:ed:4c:f8:04:8f:d1:ea:5f:
58:fc:f4:7e:f4:4f:15:33:b0:e1:f0:84:ca:2a:73:f4:e4:17:
d0:56:6e:f9:e7:63:c5:0c:f7:c3:42:a1:f3:d8:e2:9c:62:ac:
13:3b:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:00:16 2025 by rpki-client