This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File: Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier: JuDEt306+XJEIQtNXH3BkFdD2IZDo+iCxplkV7OvenA=
Subject key identifier: C8:E9:11:4E:59:94:A1:ED:7B:CB:94:3F:50:0C:FC:99:6A:53:74:8C
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer: /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number: B1
Signing time: Fri 19 Dec 2025 05:10:38 +0000
Manifest this update: Fri 19 Dec 2025 05:10:38 +0000
Manifest next update: Fri 26 Dec 2025 05:10:38 +0000
Files and hashes: 1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: do0YM4//U7x9lLLzvKT7kib7VGY8RWq/ArpuaGXkrG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Validity
Not Before: Dec 19 05:10:38 2025 GMT
Not After : Dec 26 05:10:38 2025 GMT
Subject: CN=6944de4e-9d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b6:07:94:52:2c:41:61:01:58:c5:27:54:c4:
1d:4f:bb:31:23:2b:2e:e2:74:0c:61:d2:f0:28:20:
8e:9c:7d:97:a8:fd:bb:f8:dc:fb:5f:49:1f:5b:76:
d0:04:07:f6:d1:6b:23:bb:e9:2b:ef:89:4d:ba:7b:
16:85:83:fc:15:5a:c8:15:f4:f0:5a:8c:97:09:c9:
af:e6:5e:a3:5a:3b:16:17:b4:f0:e9:ea:d6:d7:c1:
7d:fc:af:57:d6:15:3d:e1:69:a9:d1:ef:14:80:46:
aa:42:fe:80:20:8b:9c:c3:87:f4:1f:65:2e:21:a2:
17:89:fe:c2:4e:4f:6d:ee:99:e6:e4:b5:4e:bd:12:
96:63:1b:5a:21:2a:4e:41:67:34:e9:86:59:88:ef:
25:50:99:fc:57:54:66:bb:28:8e:d4:33:92:61:b0:
4b:60:35:57:4c:ed:7d:1d:d9:b8:23:7a:cf:71:63:
df:db:67:49:d7:d2:aa:e4:42:d0:28:53:0d:20:62:
54:a6:61:47:2b:4e:b0:4c:e4:04:c3:34:1a:06:49:
2d:a8:bc:ad:53:23:1a:df:67:03:8d:d9:e5:e5:6e:
2c:b8:4f:4d:e9:36:6d:8a:b0:6d:5c:97:e6:e7:c2:
a6:5d:5d:bd:6b:73:70:58:18:bc:59:c4:d0:fd:b0:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:11:4E:59:94:A1:ED:7B:CB:94:3F:50:0C:FC:99:6A:53:74:8C
X509v3 Authority Key Identifier:
keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:58:7a:32:8b:45:49:e7:19:eb:37:ae:01:cd:b0:ae:fb:0d:
fb:f4:d8:4a:99:68:aa:f8:0c:db:57:8e:43:ca:4c:05:a6:5b:
e8:d3:7b:6e:7c:1b:0a:39:df:e4:aa:21:80:0b:88:b6:56:7c:
bf:c8:53:98:49:2f:e6:08:62:ab:91:5f:14:a3:ba:33:09:df:
e2:1a:f6:f5:52:b2:63:83:24:6d:5d:bc:1b:fc:d1:1a:30:2a:
b5:fb:a2:e9:68:e4:bb:5b:30:e9:7b:6c:07:df:b3:32:28:a6:
00:ab:1e:fd:90:f9:85:3e:44:a4:8b:9c:4d:4f:14:f2:20:f7:
39:eb:2c:c6:b8:33:87:be:af:32:16:d4:e3:ab:22:23:f9:19:
8f:97:59:fb:67:a7:60:30:40:4f:30:21:fd:56:55:7c:25:49:
a4:8d:1c:93:7f:2b:f0:84:70:3f:45:ce:e4:d2:2b:d1:3b:af:
33:05:ce:1e:03:23:a2:48:17:3a:00:db:b5:3b:23:84:30:04:
ae:b5:d0:ea:f4:1a:8b:8e:a7:68:64:95:ce:33:9c:f7:49:9a:
30:39:24:28:28:ce:7f:f6:8c:d9:66:5d:21:f9:15:b9:36:62:
be:90:eb:50:2c:1a:b3:9a:48:69:15:29:f1:5b:32:62:ef:fa:
60:c1:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:20 2025 by rpki-client