This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier: oQM60Cb0R176cwyHdxIc/H9G6G3pZOD2CsouNS6mWoU=
Subject key identifier: 5B:B5:B2:68:03:C2:5B:43:10:49:63:76:59:BA:76:35:C5:41:57:F0
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial: 34ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number: 34ED
Signing time: Thu 18 Dec 2025 14:33:01 +0000
Manifest this update: Thu 18 Dec 2025 14:33:00 +0000
Manifest next update: Thu 25 Dec 2025 14:33:00 +0000
Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: Jed4eDHX65K83R3St2wCl195okIUwhKoTYtQNrjZyho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13549 (0x34ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Validity
Not Before: Dec 18 14:33:00 2025 GMT
Not After : Dec 25 14:33:00 2025 GMT
Subject: CN=6944109d-52cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:91:2c:35:e2:e5:8c:03:f8:8c:c7:9f:ec:fb:
20:05:3f:43:32:09:f5:bc:8b:40:db:f3:fc:29:8a:
0f:1c:39:61:0e:e4:29:12:a5:d1:66:80:89:5f:ce:
70:34:eb:9e:31:fa:e3:43:8d:26:3f:bd:23:d6:ba:
cf:39:af:5a:22:0e:38:41:05:f0:96:40:3a:3c:39:
f4:08:f2:df:27:87:21:ad:b8:1f:ab:c5:cc:03:2c:
db:7e:04:94:c2:d8:a1:ca:b2:83:08:4a:2d:6e:79:
80:2a:dc:55:64:7d:5f:c8:e0:7a:34:02:9e:4d:24:
09:2b:0c:31:eb:c9:d2:b2:c9:2e:e6:34:46:7d:f6:
2d:0a:85:2d:ca:82:58:80:7a:01:d1:d2:25:42:f7:
1b:6b:e0:39:55:a3:b6:1a:51:ac:7e:d3:3d:ac:a3:
bf:58:20:99:05:53:41:9d:b5:c8:8f:12:71:71:ba:
83:4c:39:bc:45:0d:df:46:ad:f0:80:c5:1c:24:74:
e6:d8:84:4d:b2:2e:f8:86:99:47:3c:0c:02:26:51:
f5:72:76:5f:ae:49:23:de:5c:01:7c:38:51:48:77:
51:cf:b9:3b:54:eb:72:6c:3c:21:ee:a3:d1:84:1e:
3c:e1:06:38:ff:11:b9:09:3f:88:2f:73:6b:1a:c2:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:B2:68:03:C2:5B:43:10:49:63:76:59:BA:76:35:C5:41:57:F0
X509v3 Authority Key Identifier:
keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1d:72:34:a1:7e:bb:34:e8:68:73:6d:d8:9e:39:26:9a:7f:
3a:32:3f:4c:9d:05:c2:3d:f7:1a:4a:d2:f8:92:e7:35:c7:60:
3a:f4:93:7b:72:db:36:13:34:6e:05:c1:ac:91:5f:65:96:4f:
4b:0f:0c:6b:8d:1c:5f:dc:37:08:b8:ab:0d:45:eb:2b:7d:61:
76:b7:b5:5a:e4:4e:86:21:92:d8:6b:cf:9e:89:7a:15:ad:03:
28:be:6b:a1:d9:06:a0:47:7e:15:38:75:3d:14:84:d9:7e:48:
bc:94:ce:1a:16:ce:22:b5:33:43:b3:09:1a:73:08:bd:c9:00:
e2:56:bf:51:b0:96:52:4d:33:10:31:08:b2:88:cf:a9:db:2a:
33:95:39:4c:eb:e0:51:5b:ab:e0:5a:e5:0c:03:8f:58:bc:35:
a5:b3:32:97:3e:63:fd:e7:9a:62:57:26:27:4b:5c:36:5c:6b:
86:d0:76:6a:b5:0f:d2:c3:d9:ae:9a:02:88:8b:6e:50:2f:ff:
47:f9:b2:91:13:ed:c6:ab:f3:d4:18:8e:d3:9e:e8:27:13:2b:
59:68:8a:c7:47:ce:be:58:f0:e5:b8:6f:df:45:d9:4b:a7:33:
a4:60:0e:80:0e:66:7a:75:4f:15:9a:c7:52:b4:3b:00:b6:a2:
cb:81:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:49:42 2025 by rpki-client