This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier: 2VKxLtpAN6X3mVW+zhWu46MCcIG31Nf9rugtBztMqRM=
Subject key identifier: 28:8E:09:3B:2C:BD:6F:1D:C0:8E:06:DC:0B:DA:88:39:34:57:8C:FB
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer: /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number: 0F
Signing time: Fri 19 Dec 2025 06:52:08 +0000
Manifest this update: Fri 19 Dec 2025 06:52:08 +0000
Manifest next update: Fri 26 Dec 2025 06:52:08 +0000
Files and hashes: 1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: Z+xu0r1+NIvHS7PDCJJLOfnr4Jcry1wNf1Rk1+1pkik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:52:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Validity
Not Before: Dec 19 06:52:08 2025 GMT
Not After : Dec 26 06:52:08 2025 GMT
Subject: CN=6944f618-03d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:50:88:90:a7:14:77:65:32:79:30:b1:05:
ba:0d:c0:f5:cf:f4:d6:b5:b2:30:91:13:63:d0:50:
19:7e:48:b5:b0:9c:62:43:8c:22:32:0b:b5:62:8f:
8b:17:bf:9d:13:d3:c2:93:66:95:16:a1:ea:25:ca:
02:d5:a1:f6:3c:38:a4:ba:da:1c:70:28:2e:3c:7f:
d4:6c:74:a1:5a:a4:0b:2a:02:b6:75:d0:d2:48:45:
e0:7a:39:95:96:33:ff:70:e9:78:2b:87:52:fd:10:
45:bb:54:c8:f2:f3:23:da:6a:5a:45:69:9d:d4:48:
ee:0d:1d:d2:b0:c0:b4:bc:f2:15:81:43:f4:0f:51:
87:11:a7:ab:0c:15:1e:4f:11:4d:a5:a7:18:ba:fc:
e5:76:66:ea:46:e5:63:1a:90:89:a6:ce:63:2c:ac:
95:4f:d7:91:f0:12:ae:2e:96:02:f3:7b:ba:02:b7:
5d:20:da:a2:32:08:53:69:97:38:f9:1f:fb:cb:4f:
e7:89:ad:23:ef:3e:6e:71:fb:23:8d:f8:6a:69:ed:
ed:20:a2:a9:eb:83:68:68:8b:39:58:2a:1a:53:18:
6b:fb:2f:9d:b8:45:4d:32:62:a1:e9:57:d4:3a:ad:
64:e7:1d:bd:7d:46:86:f2:35:21:c6:48:de:cb:ba:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:09:3B:2C:BD:6F:1D:C0:8E:06:DC:0B:DA:88:39:34:57:8C:FB
X509v3 Authority Key Identifier:
keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:ba:cd:4c:1a:e7:00:68:8a:4e:a3:e5:d2:8d:4d:67:c4:81:
22:01:01:d7:c4:38:51:c6:a3:51:80:19:be:30:82:2b:ab:8a:
de:47:67:58:73:b3:4f:2a:4b:61:50:76:fe:10:30:c5:ad:b4:
fb:75:b9:18:a7:aa:a7:02:f5:15:61:ea:6a:2c:df:64:ad:2e:
8f:95:4a:0d:90:f5:b3:d2:8a:d3:40:d6:35:a5:d4:13:91:f1:
10:57:da:73:ad:c8:93:c5:3e:36:a0:c3:9c:07:42:99:b0:37:
3b:9e:c8:d4:2b:b6:68:d9:87:88:62:8f:bf:05:77:6f:c4:53:
27:4b:86:02:29:09:61:e6:2a:30:b6:63:20:60:d6:2a:09:1f:
82:93:59:19:03:7a:51:23:e3:76:94:87:1c:6c:7b:bb:bc:92:
94:80:2e:13:b5:0c:aa:15:14:22:a5:df:4b:cd:85:72:e7:49:
6f:48:87:69:a1:b0:71:bf:fb:df:31:e1:ac:82:24:32:4b:91:
a2:13:20:18:80:14:3f:1c:42:77:03:2e:6a:af:50:1f:45:ca:
7c:3e:3a:71:dd:30:5d:ba:e8:8c:ac:e4:15:ae:7a:dd:65:b1:
6f:e2:bc:f7:5e:67:a3:a6:fb:5f:04:f9:89:1c:4f:81:cb:12:
32:66:02:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:58:56 2025 by rpki-client