This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
File: -XxrnwabbALLPY6tWvc-UGwIyjg.mft (raw, json)
Hash identifier: dx746yfF/L3wHWqXS2EzNLw4cjqsJS2FtQHFU03rUiM=
Subject key identifier: B1:7B:DE:B4:82:F0:E3:86:C5:3A:E8:77:7B:11:AD:8B:BA:59:21:3D
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 019F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
Manifest number: 019A
Signing time: Sun 21 Dec 2025 02:41:09 +0000
Manifest this update: Sun 21 Dec 2025 02:41:08 +0000
Manifest next update: Sun 28 Dec 2025 02:41:08 +0000
Files and hashes: 1: -XxrnwabbALLPY6tWvc-UGwIyjg.crl (hash: eSAApygwiOQsw0Dv7WKR6ZErAPOpbXiXSPSbs87u+t0=)
2: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (hash: muOcSUHydOybWaIbIJqpYR7U55ErO7bT8T8E0VaV7DU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 415 (0x19f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Dec 21 02:41:08 2025 GMT
Not After : Dec 28 02:41:08 2025 GMT
Subject: CN=69475e44-c3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:1d:7a:3e:64:93:21:46:d7:6c:11:91:05:
6a:39:ef:eb:12:15:61:26:36:38:22:f4:41:65:d6:
ae:02:7d:57:89:de:8f:1e:12:d8:3b:dc:84:19:67:
74:80:81:a4:57:d2:b5:af:82:cc:53:1a:cf:ab:12:
60:27:80:c6:b0:e7:ba:e3:7a:9e:65:16:cd:6e:f2:
fb:d5:67:07:44:0b:0c:ba:5c:e7:d7:8c:45:c1:01:
87:3d:05:87:31:39:55:5d:4e:25:7f:94:06:38:e4:
54:45:65:25:9d:64:fe:54:f7:64:9f:10:42:1b:d7:
04:8c:f9:ce:53:53:98:f5:76:85:c2:02:f3:0f:1b:
92:df:b2:c7:17:af:1c:83:11:66:21:54:46:02:a0:
ba:27:aa:ca:f7:54:ba:32:58:0a:d6:74:c8:e8:2e:
fa:e5:f8:2d:d3:94:63:78:b8:d1:62:d6:d1:d5:93:
19:f3:60:3d:a4:f1:0d:7b:75:73:ab:7c:21:95:8e:
94:1d:dc:66:09:0c:f9:80:0c:fa:ee:3d:17:58:2a:
72:64:01:13:e3:3e:0f:22:5d:b9:ed:6c:fe:18:da:
86:56:5a:33:3b:2e:65:e2:00:50:19:84:5a:0e:f9:
4a:42:09:3f:96:3e:c3:2f:54:60:21:e3:0a:79:7c:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7B:DE:B4:82:F0:E3:86:C5:3A:E8:77:7B:11:AD:8B:BA:59:21:3D
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:09:c2:89:3a:09:85:77:39:75:09:90:92:59:de:b2:2e:26:
ec:ca:70:d7:f3:d4:ec:eb:81:fb:92:1f:da:07:9e:29:d2:0b:
a3:56:6f:1b:5d:35:94:2b:48:50:49:01:15:f6:30:e4:e5:af:
32:9f:a5:ee:ea:67:36:9d:85:42:fa:f6:3b:9f:37:1c:60:5d:
9f:41:b8:76:25:8b:26:3b:93:2f:2c:dc:6c:7c:b8:c2:8d:9a:
bd:6b:05:de:bf:8d:2f:31:30:73:6b:e1:3b:88:bc:24:7b:4a:
64:11:9b:3f:9f:4b:87:b5:6e:a4:db:51:6c:c7:15:ba:d2:b6:
02:32:79:75:7d:ff:83:e5:ed:f0:e7:32:a3:9f:c7:33:a9:cf:
47:09:12:1d:8c:b4:68:53:43:2f:1c:2a:0c:9d:69:52:25:e5:
31:6d:70:af:c1:ce:9b:40:15:1a:b9:a9:1b:fc:ed:46:74:91:
79:cb:ac:dc:83:d9:19:72:47:a6:eb:19:fb:b0:be:ca:ca:43:
74:19:49:a3:1b:12:db:92:a9:ec:f1:91:d6:d4:62:c8:b7:e4:
e8:c0:d7:67:2f:12:06:3f:ef:86:e4:38:b9:0b:3b:b0:d6:5e:
29:9a:0b:cb:44:6d:e1:c1:13:c8:4f:e7:4e:48:f9:90:53:e4:
66:7d:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:40:35 2025 by rpki-client