This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
File: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft (raw, json)
Hash identifier: Gy3RQKR6d/ik5a5CaqGSO5u97daVSqLET2J6SKnASzk=
Subject key identifier: BD:E9:83:F3:A8:98:C8:8E:25:ED:51:E7:9B:C1:96:CD:77:FB:A3:B6
Authority key identifier: 79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
Certificate issuer: /CN=A914541C/serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Certificate serial: 0146
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
Manifest number: 0146
Signing time: Tue 23 Dec 2025 03:18:59 +0000
Manifest this update: Tue 23 Dec 2025 03:18:59 +0000
Manifest next update: Tue 30 Dec 2025 03:18:59 +0000
Files and hashes: 1: edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl (hash: RJDhykjf3s92mP0isNEnWhZCk+RPf7dRIAFVeQI8CcU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914541C, serialNumber=79D6305FA22FFDF7E351067497862C64A165472F
Validity
Not Before: Dec 23 03:18:59 2025 GMT
Not After : Dec 30 03:18:59 2025 GMT
Subject: CN=694a0a23-7684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:28:b0:27:71:47:06:f4:ac:53:c9:21:cf:
e1:50:14:d1:47:bc:88:2c:c0:9b:b6:ea:6b:b5:58:
17:f6:17:ad:54:ca:40:c6:e6:a2:ef:1c:b9:2c:fe:
c2:b0:ad:60:64:12:96:0f:60:92:85:f5:99:a5:5b:
cc:a9:05:ce:92:c6:ec:57:17:4e:c6:ec:d2:22:09:
fb:e9:90:32:eb:e0:29:ae:13:e9:87:8f:7a:16:c6:
0c:1e:e5:6b:50:d2:7e:d2:09:09:8f:50:1e:ba:dd:
9a:99:8c:fc:5c:88:b2:24:9a:09:62:1e:77:80:15:
a7:27:38:0d:1c:fe:6d:5a:ac:c2:ee:d1:64:6a:ad:
68:a3:43:fd:73:8f:bb:c5:e7:2e:48:3b:1e:75:d9:
ed:97:98:ba:3a:63:8c:59:a0:0f:d7:76:f8:9a:7a:
b8:5c:c4:18:82:75:66:4e:db:dc:1f:6d:45:2f:28:
ae:19:7e:78:46:a9:9a:ba:90:e9:7f:94:42:17:eb:
40:c8:2b:44:43:f0:23:58:54:bf:84:b8:d5:af:81:
52:90:05:eb:5b:04:ba:3c:fa:45:93:db:b9:8c:e9:
c0:cf:81:fa:00:37:f8:36:dd:66:f0:7d:bf:cb:b3:
c9:cc:70:7d:bf:24:de:08:9d:2f:f8:09:6b:af:73:
f2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:83:F3:A8:98:C8:8E:25:ED:51:E7:9B:C1:96:CD:77:FB:A3:B6
X509v3 Authority Key Identifier:
keyid:79:D6:30:5F:A2:2F:FD:F7:E3:51:06:74:97:86:2C:64:A1:65:47:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914541C/53AAB4E6E72F11EEB72C6E68C4F9AE02/edYwX6Iv_ffjUQZ0l4YsZKFlRy8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:11:d8:2a:21:1d:60:24:eb:8f:34:b3:83:85:a9:b1:62:
0a:32:e9:bc:bc:7b:50:7f:b1:03:3f:d8:2c:8c:9c:67:9e:73:
a7:89:36:a6:57:3f:f5:72:ae:12:0d:6c:aa:33:9c:8d:12:d6:
f7:d7:4d:48:f5:36:7a:ed:b7:5f:91:ce:91:26:97:53:86:9a:
90:08:8d:8b:84:da:bf:56:d7:1e:00:71:6a:74:fa:ca:9e:0b:
7f:32:24:c4:c0:58:ea:ae:c0:c6:d0:8d:c6:c5:88:ba:12:fd:
15:d1:91:4a:1e:34:87:0d:f7:8b:e5:c2:25:dc:db:5c:21:af:
ca:5a:93:8b:e6:79:fa:46:37:46:8a:4c:60:d7:0d:c1:e7:7d:
99:8d:fe:84:e1:6f:0b:70:5c:64:a4:e3:c3:4a:2e:fa:38:7b:
11:5d:2c:a3:4e:eb:e5:ac:9b:91:01:04:48:e5:57:35:1f:47:
81:a4:e2:4c:2a:be:73:74:3d:14:a8:63:a2:36:5f:98:ed:a1:
b4:30:76:12:b2:04:a7:e3:58:fc:31:16:4c:2c:e4:6b:40:ab:
d0:c5:4a:08:13:47:b3:d1:27:af:b4:aa:a4:38:59:50:a6:9f:
ea:38:1a:21:ab:b5:42:2b:16:58:e9:76:18:4a:db:3b:2b:8a:
c0:b3:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:23:01 2025 by rpki-client