This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: HY0mFPVtCSyJZZ3CNA5CcokDTwO49hAJjgUlJOcZ+o4=
Subject key identifier: 40:EC:37:F5:40:77:BC:19:36:CA:E3:D9:0D:E6:32:25:60:26:4B:14
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1D6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1D24
Signing time: Wed 31 Dec 2025 15:58:37 +0000
Manifest this update: Wed 31 Dec 2025 15:58:37 +0000
Manifest next update: Wed 07 Jan 2026 15:58:37 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: 3I/64NLdD+/UdBuXjQi97cZqWu+vzD6tcwYtARwg4dU=)
2: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: f7zJA/iphpkZ51loIl8XAKHNO9/1kyL5kdajC6MCgiU=)
3: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: WxOb0+mkj3uTgZnPmRy7eAmBIRzU3gJS47Igx4XGAqQ=)
4: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: 03/kRbzHTLkjJmxAJYa+s3kHuX847HJIPLu4kfxO3Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 15:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7534 (0x1d6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Dec 31 15:58:37 2025 GMT
Not After : Jan 7 15:58:37 2026 GMT
Subject: CN=6955482d-c815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:ba:62:a9:8c:98:95:c2:f4:de:fd:36:97:
22:6c:15:6c:48:ac:85:17:82:4d:77:11:67:1d:e6:
c3:5f:e8:2c:68:eb:4c:09:c4:16:cd:5d:0c:66:9e:
26:93:e9:df:80:7c:1a:6a:fc:41:f1:55:ee:88:6d:
35:7f:ce:70:06:0a:4f:cd:49:9d:dc:db:fd:88:6b:
3c:79:a1:07:f1:dc:66:5f:28:27:d3:d4:cb:13:69:
25:f2:8b:f7:24:fa:68:35:84:cf:75:84:17:6e:2a:
d3:f4:4a:df:81:8a:bd:35:26:c8:7f:ce:f0:44:93:
18:9f:2e:f6:cd:89:03:0f:37:2f:c9:c0:74:d8:97:
23:c5:4a:c3:af:72:ec:9e:58:53:b3:c0:01:3b:97:
be:ac:e8:e9:6e:bc:2e:b8:76:31:87:61:b2:9a:fa:
a7:89:b0:d2:44:88:62:81:f1:b9:db:4c:1c:f3:f5:
13:7e:e6:17:f0:22:fa:67:c6:ef:cb:a6:df:dd:76:
1a:ff:04:93:5c:0c:cc:b6:b3:e7:ba:c3:db:18:32:
f6:8e:b9:55:65:64:38:8c:9d:1e:2f:76:cf:46:41:
26:de:ea:38:df:a3:76:c2:5d:b9:d1:97:4a:a2:8c:
bf:36:bf:bb:3c:6e:7e:0d:a2:6d:f7:ee:f4:3c:fc:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EC:37:F5:40:77:BC:19:36:CA:E3:D9:0D:E6:32:25:60:26:4B:14
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ec:c1:8e:57:e2:54:4f:f9:b3:60:c7:7b:16:9c:5f:82:d7:
ee:7c:64:1f:b6:0b:7f:a6:f8:12:95:7d:df:6b:86:9f:cc:95:
36:e5:ed:3c:c0:7f:1a:99:00:a3:45:24:8f:4b:23:a9:29:c4:
a6:8d:d5:a4:2c:f8:ca:b3:99:43:07:fc:7a:bb:c3:67:98:3e:
30:0d:72:83:26:6e:5d:22:5e:7e:0b:27:e0:73:13:90:83:32:
04:11:22:fd:95:33:9d:45:39:6b:13:ce:8d:99:b1:d4:d3:11:
5b:e1:fb:68:e7:6a:2e:fe:4a:b5:64:d8:b8:1c:46:07:34:36:
88:f4:8a:73:bd:2e:1c:20:c6:a4:17:db:f1:1c:1c:28:59:35:
7c:32:7e:08:ef:98:e0:c2:56:79:90:f0:af:3e:a7:f0:80:90:
4e:22:a9:ff:4d:33:b4:08:43:b0:5f:61:2f:67:bf:ec:81:23:
b6:5b:9a:87:61:38:bd:e4:be:4e:d0:26:6a:c8:fa:05:e7:e2:
2e:56:44:11:a5:9f:a6:4d:c1:2a:85:4f:86:84:c5:d0:53:13:
8b:64:a5:89:6b:96:c8:76:0d:f5:7f:ef:06:38:07:54:78:f5:
3a:b2:58:fe:48:50:2e:d2:a8:ff:e0:26:04:46:93:ac:8e:3c:
ef:9c:42:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:54:46 2026 by rpki-client