This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
File: F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft (raw, json)
Hash identifier: fhyHXf9Y6IOM4vO5b585CJ3ZZO2fB2jXC3Ws5lnlA7s=
Subject key identifier: 34:D9:3D:58:77:24:55:C2:91:A3:CE:49:96:3A:49:2A:3E:30:1A:16
Authority key identifier: 17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
Certificate issuer: /CN=A9148C7B/serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Certificate serial: 3582
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
Manifest number: 353B
Signing time: Thu 18 Dec 2025 14:43:28 +0000
Manifest this update: Thu 18 Dec 2025 14:43:28 +0000
Manifest next update: Thu 25 Dec 2025 14:43:28 +0000
Files and hashes: 1: F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl (hash: u/5+PBQaYmK3DTIgDB3d2vILbaSPaqsM81m06bwJuWA=)
2: 0AD382BA3AC211F08E4A722CC4F9AE02.roa (hash: Xmx7r1RGT7f/JoA9c/U1eUxsqAqHU53hlPB4+oTq2f8=)
3: 8F40C09ACCDB11EE9490B979C4F9AE02.roa (hash: sZVhikXu0+BgylCyd4weUDz3omEWpmI+GLV51J/cwuU=)
4: 7165DB28E2C911EF8A1C1514C4F9AE02.roa (hash: q2ExykZAmfzp0xfcMOWOgSv2/3eS55YeYtvtqyJjJO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13698 (0x3582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148C7B, serialNumber=17577F1E92EB33B2CDE6E489C0B9A99A2E02FDA3
Validity
Not Before: Dec 18 14:43:28 2025 GMT
Not After : Dec 25 14:43:28 2025 GMT
Subject: CN=69441310-be7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:1b:86:b7:23:72:62:d6:84:0c:3e:5a:93:
95:04:64:cf:23:fe:85:5b:09:28:ec:68:f8:6c:cd:
aa:05:80:bf:43:8b:62:02:de:ca:bc:5a:d7:83:27:
ca:49:88:00:81:50:8e:9c:f7:be:10:78:8e:de:e0:
48:4c:dd:13:92:ac:10:db:f6:f5:50:7d:ed:8d:fe:
c4:fa:e8:4e:70:2c:60:74:98:fb:fb:3b:8a:60:b3:
e3:7e:6a:6c:a8:1a:d0:9c:b4:f5:74:07:66:38:d6:
a8:8e:a5:38:68:c8:9a:5e:8a:20:0b:38:19:a4:f8:
68:20:53:e7:97:fb:ee:e0:2d:d0:54:2a:e7:6f:c3:
57:8d:83:cd:a2:97:20:15:a7:81:0e:39:76:04:a3:
4f:dd:16:83:2a:71:da:65:3e:df:82:41:2a:3a:34:
0a:c6:6c:4a:78:ad:bc:6c:30:36:d2:a4:25:de:86:
a3:f2:6f:e4:bf:74:23:b6:6b:3f:e9:ba:01:22:c7:
ac:d2:42:9e:d6:a3:d1:5c:4e:7f:70:43:42:17:49:
2a:94:a4:7c:2e:c6:e2:d7:7e:7f:5a:ce:8b:41:82:
d1:54:91:8f:3c:e6:66:c3:87:e8:89:c1:8b:25:7c:
a3:14:bb:c8:07:78:57:d8:03:26:bf:f1:86:68:f1:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D9:3D:58:77:24:55:C2:91:A3:CE:49:96:3A:49:2A:3E:30:1A:16
X509v3 Authority Key Identifier:
keyid:17:57:7F:1E:92:EB:33:B2:CD:E6:E4:89:C0:B9:A9:9A:2E:02:FD:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/675208AE1D9311E2BCBDE5F608B02CD2/F1d_HpLrM7LN5uSJwLmpmi4C_aM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:04:9e:70:7b:1c:c4:e7:59:f0:f3:9c:a4:5d:63:94:4e:89:
ae:45:52:fc:bd:40:20:5b:be:04:a7:ac:2f:8f:dc:f2:13:81:
ec:a3:e9:1c:f1:f7:4f:bd:a2:f9:d3:90:e9:7f:b3:70:f3:32:
62:30:3b:5b:e3:d1:fc:b7:ab:b0:11:ca:7f:a1:4b:f2:b8:98:
70:29:54:74:b1:89:d9:57:25:99:6e:7f:fc:22:b6:9a:e5:fd:
91:53:15:8c:45:9b:dd:83:c1:97:3f:fe:5d:b3:b3:b9:b2:47:
28:74:10:a8:4f:24:51:d0:35:e8:3c:50:8a:53:76:16:48:15:
6b:9a:ea:e4:2b:4c:99:54:aa:7c:fd:26:0c:82:c0:6e:56:b9:
f2:b8:2f:d4:6d:c6:a6:b0:17:45:5b:72:6b:b4:dc:a2:12:1c:
99:92:a5:26:3e:ef:82:a8:d2:df:27:16:4f:2f:2c:e1:7c:15:
c8:45:2d:39:3a:49:63:01:a0:3d:35:36:95:6a:7d:64:a3:0a:
36:75:d4:99:1b:47:4d:b7:9b:43:85:b0:cf:b7:7c:e7:98:11:
d4:85:b6:b0:1f:ec:bb:d8:b2:89:0a:0a:c0:db:a0:26:65:f5:
29:ee:f6:72:53:66:cf:06:ba:2e:7d:22:fb:e3:28:4c:e6:5e:
fa:f4:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:43 2025 by rpki-client