This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
File: sgBZBkA-medoWaqrsdy92uRCBvY.mft (raw, json)
Hash identifier: y5hy2gzSInRD4L8MkISKFSuau83zzBPjL7IbYDY/8wI=
Subject key identifier: 43:B2:24:0B:DF:D3:F7:B1:76:93:F2:BD:C2:7B:DD:D6:57:04:27:EE
Authority key identifier: B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
Certificate issuer: /CN=A913A748/serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
Manifest number: 010C
Signing time: Sun 21 Dec 2025 04:06:26 +0000
Manifest this update: Sun 21 Dec 2025 04:06:26 +0000
Manifest next update: Sun 28 Dec 2025 04:06:26 +0000
Files and hashes: 1: sgBZBkA-medoWaqrsdy92uRCBvY.crl (hash: RIz+upAjh4zrtajNgO/3MfPxo3z64OLW2j1Qd3HyuQo=)
2: 0B7CF64642B211EF82734679C4F9AE02.roa (hash: 27rK3Z1qcHlOppUZILp7xoMUwx1rozG0ZQxJ/OJVU4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A748, serialNumber=B2005906403E99E76859AAABB1DCBDDAE44206F6
Validity
Not Before: Dec 21 04:06:26 2025 GMT
Not After : Dec 28 04:06:26 2025 GMT
Subject: CN=69477242-f5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:d0:db:24:3f:9b:0a:08:1a:d9:fb:09:80:
23:44:9a:b8:42:5a:91:69:d3:07:01:1d:a1:93:1c:
f2:20:2f:fa:38:4c:76:0e:3b:1a:1f:fc:75:75:43:
a6:62:78:ba:8b:df:71:2d:f9:5b:e7:c1:de:f6:dc:
14:f1:f0:67:21:74:00:a9:4c:78:aa:81:1e:1d:b8:
4e:e7:a5:e8:c0:c9:36:b7:f5:7c:23:34:51:61:b3:
3d:d4:94:5b:1d:25:61:56:3d:68:0e:69:97:98:81:
b4:22:ce:a5:bf:d7:5f:00:08:b8:58:84:cd:a9:da:
6f:d0:28:4f:7f:89:cd:3f:09:13:4d:b1:d4:d5:1b:
b8:df:8c:4e:20:76:d9:07:de:24:97:b9:8b:1b:03:
a0:0c:5d:24:71:43:b6:d3:ba:f9:7f:42:1f:50:0d:
93:99:f6:fe:d9:f0:ca:f0:fc:88:a9:a0:ce:87:59:
d6:79:47:4f:04:04:f2:17:9e:c1:cb:f1:83:a5:88:
d8:2c:f1:b1:bf:26:f2:08:bf:41:33:72:c7:8c:f2:
8b:c3:dc:24:7e:d5:c0:be:24:a2:ae:0f:e8:bd:c4:
f2:a2:8a:bc:64:87:db:d7:6b:88:cf:b5:03:d3:7d:
d4:af:9f:e4:7e:95:3a:96:59:95:cf:de:e7:2c:e0:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:24:0B:DF:D3:F7:B1:76:93:F2:BD:C2:7B:DD:D6:57:04:27:EE
X509v3 Authority Key Identifier:
keyid:B2:00:59:06:40:3E:99:E7:68:59:AA:AB:B1:DC:BD:DA:E4:42:06:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sgBZBkA-medoWaqrsdy92uRCBvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/AACD13A842B111EF92E56578C4F9AE02/sgBZBkA-medoWaqrsdy92uRCBvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:1c:0a:26:eb:13:56:c5:64:8a:78:6d:e2:3b:cc:3d:97:d0:
cb:c1:00:bd:91:5c:24:db:15:02:43:d7:14:f7:70:d2:4c:fe:
76:a4:c0:ac:11:ef:60:c8:af:19:7d:a5:cd:e1:53:95:56:45:
ee:f1:e5:ed:1a:c3:14:84:42:41:fb:b9:01:e5:b5:6b:b4:d1:
bd:06:89:00:17:3c:1b:34:3f:68:36:86:d1:a7:d8:0c:27:d5:
17:58:af:40:59:70:e1:bd:61:80:ae:12:e6:ed:6d:53:38:d9:
2d:bf:5d:15:53:ee:36:c8:f3:a8:2a:d7:c9:3f:dd:97:b0:29:
15:02:ee:15:d9:2b:42:fa:db:7a:cc:37:54:72:35:e9:cd:7e:
7b:75:9c:ce:1a:cf:f6:b7:b0:7a:ea:2e:66:9e:6d:dd:78:bf:
b6:21:e0:bb:fb:7a:4e:c6:44:33:22:04:f6:f8:90:25:85:3c:
9a:c8:7a:bf:b3:c8:32:26:de:d3:c7:f3:4b:53:4b:79:2a:56:
42:ad:27:e5:dd:b7:f7:af:8f:86:ea:7e:9d:30:fc:be:1b:d3:
6f:7f:bd:45:0b:5f:5c:e3:f5:1e:5d:8c:8e:e8:e9:e6:12:4b:
d4:32:58:89:00:a2:d2:d9:a1:56:b8:0f:8e:23:ff:87:5a:38:
20:c7:2b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:18:56 2025 by rpki-client