This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier: qYtXxgIDNQwx5FhHyy8mMQx19HxnOULUwWbGxzzqHxg=
Subject key identifier: 53:87:39:4D:F5:E6:F2:E3:42:B5:38:42:E1:8C:4A:D5:D8:3D:48:F9
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number: 74
Signing time: Sat 27 Dec 2025 05:39:48 +0000
Manifest this update: Sat 27 Dec 2025 05:39:48 +0000
Manifest next update: Sat 03 Jan 2026 05:39:48 +0000
Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: qVze1xT340361efJCbpYg96TSB93y6pnOTPFoJk5qfQ=)
2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 05:39:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Validity
Not Before: Dec 27 05:39:48 2025 GMT
Not After : Jan 3 05:39:48 2026 GMT
Subject: CN=694f7124-3296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:cf:90:d8:70:56:43:34:6d:09:7f:b0:90:
6a:49:6e:b6:ae:00:f9:79:0a:d5:d5:d9:fa:d1:42:
fe:b2:08:97:18:ad:bf:40:b2:94:80:09:4f:ea:3a:
59:a6:5d:a5:94:43:e2:b2:ab:df:21:7a:8c:23:88:
24:e3:87:82:c4:fc:82:fe:14:53:ac:4d:5e:dc:04:
81:6e:12:0a:26:67:91:bd:a4:4a:05:74:0c:e4:9e:
3f:35:8e:df:d6:eb:a2:dc:3a:a6:96:69:4d:c0:97:
f6:3e:ae:71:0f:de:55:89:76:eb:ec:ae:8a:32:59:
3c:3b:ba:c1:af:17:c1:4b:58:d7:8b:d1:ac:1a:1a:
5c:aa:5d:a8:dd:56:69:9d:f1:f9:ef:36:81:36:1f:
66:e7:97:fa:02:92:bf:0b:06:c9:f4:c4:c9:06:2e:
ef:4a:fe:41:e6:90:d7:4a:fa:a1:32:9e:bb:3d:6b:
45:aa:e9:21:3e:e9:45:c6:10:22:c4:5b:28:7a:ec:
d3:92:a3:9b:a9:86:c5:e2:da:77:02:65:a8:f7:4a:
8a:8a:07:a3:94:88:63:e6:f6:17:fa:b3:2d:4f:c9:
a7:64:e5:96:d2:95:19:dd:50:37:9d:eb:64:c9:4b:
9c:b5:e8:36:93:43:ca:31:75:9e:3c:55:5a:cb:50:
76:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:39:4D:F5:E6:F2:E3:42:B5:38:42:E1:8C:4A:D5:D8:3D:48:F9
X509v3 Authority Key Identifier:
keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f7:20:4e:5c:7b:73:71:88:bb:fc:29:ba:8d:ad:32:b5:d8:
5a:54:18:14:04:2c:d2:ed:30:ef:8c:2e:1a:0b:05:d5:56:07:
cb:c7:14:98:cd:1b:46:e5:5f:3c:10:61:3c:08:ed:fc:20:00:
f7:79:19:10:4d:2b:19:93:6d:ad:45:00:69:1b:bc:9e:ed:3e:
af:a4:8c:ee:b9:58:b2:cf:36:dc:1a:0a:67:1e:6b:e7:df:fb:
3a:39:8c:c5:4c:63:06:ab:a2:d2:4c:03:a0:5c:0c:aa:21:f0:
d3:2b:7d:7e:61:ac:dd:b5:bb:b0:53:04:8c:30:03:66:34:0f:
18:d2:b4:3b:2a:ef:36:13:cb:74:0a:ba:a0:68:f3:0a:61:9e:
fe:4b:d4:fc:b0:34:c0:f2:7a:3b:72:81:6d:1d:6b:04:0c:0d:
d7:62:c4:ab:61:e9:b5:76:e5:ba:fa:12:e9:da:b3:66:47:56:
8a:c4:a9:ff:fc:e3:86:2f:78:93:89:2c:77:6a:fe:f4:78:38:
0f:75:df:b4:9e:0f:da:ff:13:0b:13:11:5f:32:fc:19:fb:c5:
0d:92:cd:96:2e:ac:a3:6c:85:5b:25:68:f4:c6:62:9f:a7:f4:
da:85:20:1d:a7:15:6f:4a:4e:a2:b3:67:c6:c7:43:2a:a4:43:
b3:56:55:d5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
QzMxMTExMC8GA1UEBRMoQzZERTM2QTRFNDVFN0E5OTFGQzQ0NEY4Q0IxQjQ1NUYx
NzQ2MkM4RDAeFw0yNTEyMjcwNTM5NDhaFw0yNjAxMDMwNTM5NDhaMBgxFjAUBgNV
BAMMDTY5NGY3MTI0LTMyOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCn9s+Q2HBWQzRtCX+wkGpJbrauAPl5CtXV2frRQv6yCJcYrb9AspSACU/qOlmm
XaWUQ+Kyq98heowjiCTjh4LE/IL+FFOsTV7cBIFuEgomZ5G9pEoFdAzknj81jt/W
66LcOqaWaU3Al/Y+rnEP3lWJduvsrooyWTw7usGvF8FLWNeL0awaGlyqXajdVmmd
8fnvNoE2H2bnl/oCkr8LBsn0xMkGLu9K/kHmkNdK+qEynrs9a0Wq6SE+6UXGECLE
Wyh67NOSo5uphsXi2ncCZaj3SoqKB6OUiGPm9hf6sy1Pyadk5ZbSlRndUDed62TJ
S5y16DaTQ8oxdZ48VVrLUHYrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU4c5TfXm
8uNCtThC4YxK1dg9SPkwHwYDVR0jBBgwFoAUxt42pOReepkfxET4yxtFXxdGLI0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDMzExL0YxRjdBRjI2MkZC
RjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBrZnhFVDR5eHRGWHhkR0xJ
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveHQ0MnBPUmVlcGtmeEVUNHl4dEZYeGRHTEkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND
MzExL0YxRjdBRjI2MkZCRjExRjA5QTkzNjA1N0M0RjlBRTAyL3h0NDJwT1JlZXBr
ZnhFVDR5eHRGWHhkR0xJMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJ/3IE5ce3NxiLv8KbqNrTK12FpUGBQELNLtMO+MLhoLBdVWB8vHFJjN
G0blXzwQYTwI7fwgAPd5GRBNKxmTba1FAGkbvJ7tPq+kjO65WLLPNtwaCmcea+ff
+zo5jMVMYwarotJMA6BcDKoh8NMrfX5hrN21u7BTBIwwA2Y0DxjStDsq7zYTy3QK
uqBo8wphnv5L1PywNMDyejtygW0dawQMDddixKth6bV25br6Eunas2ZHVorEqf/8
44YveJOJLHdq/vR4OA9137SeD9r/EwsTEV8y/Bn7xQ2SzZYurKNshVslaPTGYp+n
9NqFIB2nFW9KTqKzZ8bHQyqkQ7NWVdU=
-----END CERTIFICATE-----
Generated at Mon Dec 29 05:25:44 2025 by rpki-client