This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json)
Hash identifier: ge8nMVK+LK6mOeAp8yPYh93aE7iqSjnXO+Yoqsh97mw=
Subject key identifier: E0:7F:42:BA:66:10:D1:DD:E2:2F:84:58:C7:B5:05:FB:CC:D7:08:52
Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Certificate serial: 0868
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
Manifest number: 0862
Signing time: Thu 18 Dec 2025 20:10:46 +0000
Manifest this update: Thu 18 Dec 2025 20:10:46 +0000
Manifest next update: Thu 25 Dec 2025 20:10:46 +0000
Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: ddKOBbL3Kx2d89zsLXs1n+igfnlc//V32oU1nGnOOJU=)
2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: 2kaLA3OXyUts1hifmBFAJDN2z6cyzPCnOT2p5MOkteQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981
Validity
Not Before: Dec 18 20:10:46 2025 GMT
Not After : Dec 25 20:10:46 2025 GMT
Subject: CN=69445fc6-353a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:38:6c:b3:94:de:13:76:a3:8f:be:c3:62:8e:
2a:36:ad:2c:70:ec:42:f2:3f:61:41:88:6c:93:6d:
d3:98:e9:67:12:5b:90:51:a9:cf:73:9d:7c:a6:58:
5f:13:4a:e1:5c:85:8c:ac:c7:ce:11:2e:4c:af:26:
b5:b1:ab:af:2f:72:25:b7:7e:d3:29:ff:84:14:5c:
51:77:85:29:de:ca:a7:54:2b:88:93:f1:3d:97:d6:
55:9a:51:3d:bf:c0:cf:63:a6:e7:20:db:34:9b:60:
a6:e2:67:03:b4:2d:a9:94:78:0e:9d:a9:dc:7c:b4:
f5:bb:35:0c:6e:68:b4:c7:16:dd:8c:35:72:6c:c0:
a9:67:a6:d1:30:09:e9:e8:d2:04:b4:b8:04:ed:04:
bf:22:91:0b:28:35:f6:15:4b:98:8a:64:f7:d0:f9:
70:70:53:00:8a:6e:7b:93:a5:ed:ae:af:7d:18:06:
6b:43:55:1a:d0:67:f1:92:0d:b5:dd:ed:1a:a3:26:
e0:01:f8:1f:52:a3:63:fd:91:46:26:fd:35:39:53:
d5:b2:91:7a:73:86:76:2b:9e:ad:e8:08:ec:8c:c3:
76:1e:7e:36:12:1e:91:7a:28:d0:95:32:d6:37:f6:
27:22:8f:53:8c:6c:d9:a8:7f:10:b3:9e:a3:fc:09:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7F:42:BA:66:10:D1:DD:E2:2F:84:58:C7:B5:05:FB:CC:D7:08:52
X509v3 Authority Key Identifier:
keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6b:c5:d1:1a:59:53:8d:62:98:d0:17:c2:02:e1:d6:d7:d7:
9f:7a:74:92:2d:78:38:26:dd:6c:2d:54:e4:c3:2b:c9:4a:64:
2f:29:e9:15:98:aa:7d:d9:fa:8c:e3:4b:db:1a:48:96:1e:28:
e5:14:9e:1a:2f:48:3c:fa:66:da:4d:2f:81:b2:2e:9b:e7:8f:
42:0b:cb:ce:8f:41:5c:34:ca:e3:80:27:71:64:0f:a3:2f:9c:
c3:f4:a2:41:60:44:2a:6f:5b:1e:22:b6:21:01:48:15:7c:e2:
ae:54:0e:15:4f:91:59:01:29:38:c7:3d:74:01:f8:19:d4:26:
54:86:20:73:c3:e2:80:99:cf:0e:8b:6b:87:f6:37:24:4b:e2:
5c:38:68:45:7c:de:61:07:63:c6:85:de:9f:cc:3e:d0:d0:44:
f5:fd:b7:5f:fe:94:17:78:dd:26:f6:0f:7f:9b:9e:76:64:aa:
f9:ab:47:ff:c5:06:6f:b1:5c:48:72:39:aa:21:11:dc:03:36:
15:34:c8:81:29:23:65:fb:ac:06:6b:35:6f:55:48:16:49:d3:
9e:6a:a2:23:9b:ed:f6:19:ed:8b:a2:39:4c:b6:38:67:27:5a:
ac:cd:91:59:30:41:00:85:0d:23:3a:36:ed:f9:a4:9a:a5:f4:
92:d1:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:20 2025 by rpki-client