This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
File: _ksuVPGAyAmvHsmemnx-JzLZ3aY.mft (raw, json)
Hash identifier: SXYpuT0CcYCmSDEWnonLjeMRySvNMD4lYDMSh+g5rUc=
Subject key identifier: 53:74:B6:14:90:D3:3D:77:14:6F:CE:DC:82:58:38:24:4C:74:9A:B8
Authority key identifier: FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
Certificate issuer: /CN=A914BE96/serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Certificate serial: 103F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
Manifest number: 1030
Signing time: Thu 18 Dec 2025 17:15:47 +0000
Manifest this update: Thu 18 Dec 2025 17:15:47 +0000
Manifest next update: Thu 25 Dec 2025 17:15:47 +0000
Files and hashes: 1: _ksuVPGAyAmvHsmemnx-JzLZ3aY.crl (hash: lDJEGLfsxx8SntU7Hzm4L+Q1GI65CvUtNHbJWGRzsgI=)
2: 8F75257455E911E9AE112D6CC4F9AE02.roa (hash: thEUPRHmxogbvRJ6Y3FkP32LyqLTW2o8NNUuKxB2tbk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4159 (0x103f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BE96, serialNumber=FE4B2E54F180C809AF1EC99E9A7C7E2732D9DDA6
Validity
Not Before: Dec 18 17:15:47 2025 GMT
Not After : Dec 25 17:15:47 2025 GMT
Subject: CN=694436c3-7c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:16:3c:b5:9a:33:06:a0:95:78:d3:41:27:
d7:39:6d:d1:24:51:db:a4:50:d2:a7:9a:3b:11:e5:
fb:7c:67:27:99:4d:6c:ba:a8:07:03:52:82:4b:76:
2c:93:6d:00:dc:04:73:a2:72:ac:1b:74:f4:67:4c:
7c:91:bf:6f:e4:d5:83:a5:1d:d4:31:30:b5:86:9e:
c9:17:da:71:8c:74:92:12:58:35:7f:ba:27:b8:80:
e8:17:6c:d1:cd:ff:19:86:99:5b:26:1b:94:bb:29:
b8:7b:62:d4:7f:db:96:fd:b3:c1:a0:cd:54:dd:58:
92:8a:3b:04:fe:09:89:e7:55:ae:e8:5b:35:0d:1b:
73:59:74:c5:61:c0:95:e3:f0:1a:77:25:58:e2:3d:
d4:93:42:cc:f2:c2:0b:30:56:1a:97:80:f4:00:fc:
a9:a8:11:c5:83:aa:0f:27:89:d1:9b:bf:82:4e:06:
d5:2d:2b:78:3e:bc:fa:5b:6c:65:b6:48:2e:17:22:
43:7a:e7:10:86:a4:23:c4:bc:04:0d:78:44:d2:7a:
e5:69:c0:32:0b:fc:03:5c:3f:89:70:2f:61:6e:41:
0d:b4:1f:7e:3f:11:05:a5:09:33:f0:f2:b4:01:11:
61:c6:f9:9e:be:be:d8:71:d5:2e:85:3e:33:2d:be:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:74:B6:14:90:D3:3D:77:14:6F:CE:DC:82:58:38:24:4C:74:9A:B8
X509v3 Authority Key Identifier:
keyid:FE:4B:2E:54:F1:80:C8:09:AF:1E:C9:9E:9A:7C:7E:27:32:D9:DD:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ksuVPGAyAmvHsmemnx-JzLZ3aY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BE96/EDA65AC455E811E9B305376BC4F9AE02/_ksuVPGAyAmvHsmemnx-JzLZ3aY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:48:0e:e5:73:5c:1a:96:da:4d:53:0d:98:e3:58:29:cd:
fd:fc:e6:6f:71:34:7b:84:c4:5a:2b:1f:38:5d:21:1d:07:0f:
0e:36:14:82:50:7a:ce:24:eb:be:1c:a3:65:53:ba:ec:9a:c3:
9c:2f:ad:15:7e:af:8e:13:8f:fa:6d:cd:4b:9f:e9:75:ae:f7:
31:73:af:8f:13:c3:ab:7e:c2:58:ef:60:7c:46:67:1d:97:57:
d0:9f:a7:5b:4b:75:fe:71:60:21:10:ac:cb:1e:f8:55:83:e5:
f8:c1:e1:04:76:8d:ba:39:a5:99:e2:cf:42:f7:6a:78:66:fe:
1a:e4:53:33:97:2a:9b:a5:54:0d:ef:bd:67:9b:17:a4:b4:10:
49:a9:a9:5d:2f:30:b8:1a:24:fb:31:8b:a4:8a:f7:f4:da:2d:
da:2c:70:e1:c4:78:9d:3d:ba:cc:35:01:5a:e7:2e:f1:ce:32:
df:d3:c6:8c:4c:c0:05:eb:d7:85:39:9c:15:b9:d6:8c:16:ab:
b9:19:57:44:bc:49:dc:c8:9a:67:ca:1d:57:4a:96:3c:a4:a9:
5a:4d:a7:55:75:40:f3:15:fd:c2:1e:60:2d:18:85:7e:08:7c:
fb:97:8f:96:e9:98:e0:9d:9d:64:92:fc:8b:f6:ad:b5:83:b3:
c1:17:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:54 2025 by rpki-client