This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
File: FyftFR9AiSEOw-Nopaae45SE4-Y.mft (raw, json)
Hash identifier: AZ+p4cjYYRGtGVdtU2OW15KJI+/zT6RMroafBMFOMwc=
Subject key identifier: 32:1F:3E:EF:C4:FC:8D:30:C9:9F:58:1B:A9:8C:2D:CC:5B:92:B5:57
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Certificate issuer: /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
Manifest number: 0109
Signing time: Fri 19 Dec 2025 04:08:18 +0000
Manifest this update: Fri 19 Dec 2025 04:08:18 +0000
Manifest next update: Fri 26 Dec 2025 04:08:18 +0000
Files and hashes: 1: FyftFR9AiSEOw-Nopaae45SE4-Y.crl (hash: rpMpF8NUkSAut/DXspob6+2jcRNSt9V9M7z0KovzDLc=)
2: F149E6BE45B611EFA10B0632C4F9AE02.roa (hash: oxyCeNFM/JV3FlgREEjrGNxGIzoK5Vk5MzO+fwua+7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Validity
Not Before: Dec 19 04:08:18 2025 GMT
Not After : Dec 26 04:08:18 2025 GMT
Subject: CN=6944cfb2-e890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b5:d8:bb:dd:2a:4b:f5:55:89:41:1b:81:95:
7e:5f:7c:db:9e:23:09:7d:e3:bf:ae:9c:da:09:10:
8e:6d:93:a2:cd:a1:10:f2:a4:51:05:62:ab:65:48:
cf:82:d8:6a:8d:3c:86:77:94:45:ce:66:cf:09:a5:
10:ac:03:de:9a:8c:7d:53:9b:c0:5a:20:e1:47:a7:
33:6b:e9:73:fa:cf:7e:2a:a1:c1:4f:f8:b3:7c:de:
23:6e:66:cf:f1:aa:4f:db:68:c7:c8:63:67:0a:d9:
07:94:e7:8a:a0:5e:75:f2:a5:b6:e2:73:e6:aa:d9:
c4:f8:3d:53:4f:b8:1a:90:3f:33:77:cf:4a:6a:c1:
9f:c7:ec:63:00:6f:f6:43:3d:6a:e3:5e:bb:24:c0:
93:00:2b:e8:fc:c4:fb:6a:9c:32:12:cb:47:12:4b:
9e:32:4b:0f:12:57:e9:43:c0:40:07:e6:3e:d4:e6:
37:a5:cf:82:04:d4:d3:5a:59:57:21:b7:33:35:72:
19:1d:97:0b:46:aa:54:45:74:02:c7:7a:2a:06:33:
bf:0c:83:c1:cc:64:6c:d9:2e:93:38:0d:36:f6:a0:
34:e2:76:c9:3d:5f:62:78:ea:3c:d1:58:9c:33:31:
9c:27:05:fe:1e:53:a3:65:80:7d:7e:f2:0c:70:39:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:3E:EF:C4:FC:8D:30:C9:9F:58:1B:A9:8C:2D:CC:5B:92:B5:57
X509v3 Authority Key Identifier:
keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:6d:45:50:22:a0:6a:31:f1:04:00:34:01:2c:74:63:ae:
84:30:76:62:6e:6e:30:6c:9c:86:ce:0c:05:c1:73:ab:34:5c:
ec:72:e5:4c:39:d6:26:e2:d5:79:7b:f6:64:c4:2d:b5:bf:b9:
19:aa:53:a6:25:a5:d4:80:72:1c:95:ba:1b:b6:a5:ed:cf:83:
ba:b4:1f:1c:c1:57:b7:3d:08:39:f3:da:9c:a7:ee:ba:ad:0e:
ee:02:c5:83:9e:ed:0e:13:b8:a7:51:f9:c3:2f:74:9b:f7:a2:
c0:6a:cf:cf:d8:5b:25:c9:87:9d:b7:8e:fe:72:83:fd:9a:4c:
ce:3b:82:8e:4f:4d:e5:a0:91:f6:f6:ce:f3:e8:79:3b:af:1d:
0d:89:6e:3d:cf:d3:35:6f:01:0c:49:a0:1d:96:0f:a4:1b:f8:
8a:85:42:53:c0:42:55:57:ea:ef:8e:12:a6:e5:bb:6a:5e:8c:
6f:a3:6c:b8:e9:1a:8b:5c:62:39:ca:61:7d:6a:20:dc:a7:19:
c2:2c:0f:b8:ef:0b:8b:7e:f3:12:4d:35:7b:16:92:f7:98:97:
a0:78:51:4a:1a:ca:9d:48:b9:e2:c1:92:b1:75:4c:1f:73:68:
18:a1:38:aa:07:60:96:93:9b:4b:14:a7:57:58:b4:8b:d8:e8:
4f:f3:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:53:33 2025 by rpki-client