This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json)
Hash identifier: 0NThxon8bpOPtCSjgMF5rOJ0AIaVQ7cHl6Vxu/8j8fU=
Subject key identifier: E6:70:19:1C:E8:0E:1B:7C:E4:AC:64:42:0B:A9:12:F5:7E:96:3E:64
Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
Manifest number: 0183
Signing time: Fri 19 Dec 2025 02:55:03 +0000
Manifest this update: Fri 19 Dec 2025 02:55:02 +0000
Manifest next update: Fri 26 Dec 2025 02:55:02 +0000
Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: 4vlm/MRSKihF2cLo3Q6V+/1Xc2JjMZ4IRzyZepuVKwQ=)
2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5GVQ1bIBa+U3v3tASIB7alCOpvULFOKmUN8ptv6R1ws=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:55:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA
Validity
Not Before: Dec 19 02:55:02 2025 GMT
Not After : Dec 26 02:55:02 2025 GMT
Subject: CN=6944be87-72a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:d1:34:b4:5d:86:48:a1:77:5e:5f:8f:7d:
0d:5b:ee:a2:3b:63:f1:8c:03:a6:b8:e7:07:f6:c9:
66:64:a1:76:48:fe:95:3a:f8:b6:c8:2c:01:f2:39:
1a:0a:65:7b:52:60:9b:2b:23:28:57:e4:4e:42:6b:
77:27:ec:51:09:23:72:fb:f2:b8:48:f0:74:4d:9d:
e7:22:bc:5f:d6:c8:19:4f:56:0a:d9:25:93:8e:82:
fd:6e:6f:f0:ff:39:03:96:50:23:eb:a0:c6:46:dd:
ee:d2:31:81:1b:8e:2d:ed:46:a4:d5:dc:6a:11:cd:
02:40:d2:56:6d:14:91:76:8e:63:e8:7c:df:75:ff:
05:5d:e6:04:e5:59:58:77:7c:72:91:10:d9:7c:9a:
77:79:a7:96:72:84:ce:4e:8c:84:4a:2c:28:bd:20:
bd:ae:9a:2e:60:d3:61:5d:d6:71:4a:5b:79:07:e6:
f4:07:df:3e:f1:9f:68:f0:b8:1c:9e:b3:b2:f0:b2:
82:86:c3:c9:0d:f5:c9:01:0b:56:df:c0:db:aa:dc:
c8:4b:fd:19:45:55:96:b4:65:d8:b6:c4:38:98:60:
7e:70:77:a5:a1:b6:47:82:70:68:b3:c2:88:2e:e9:
ea:0d:dd:0d:6f:0c:d5:44:a3:25:81:07:a3:8a:e5:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:19:1C:E8:0E:1B:7C:E4:AC:64:42:0B:A9:12:F5:7E:96:3E:64
X509v3 Authority Key Identifier:
keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:d8:7f:c0:c3:14:32:72:37:dc:a7:24:73:38:38:8a:32:
f6:f5:8c:53:58:3c:a0:f6:7e:ec:e4:98:3a:c8:85:b1:cd:a1:
e4:17:96:4c:79:c5:74:69:c4:96:b1:d1:df:70:09:97:71:67:
3f:8c:c8:97:86:f6:cc:2e:b9:7e:ac:a3:18:db:d8:cf:a9:bf:
fc:06:6f:cd:4e:3c:6b:79:0a:c5:cd:28:96:11:16:16:79:66:
98:a2:27:f9:d6:f9:64:be:6b:69:4e:50:6e:99:87:82:e0:ff:
40:b2:76:ef:ad:0a:93:c3:3d:ef:c2:e8:fe:9d:b7:4b:94:32:
c4:a7:32:81:12:a0:a0:8b:fe:f9:63:cd:82:08:24:2d:38:3e:
68:5a:af:64:bc:03:10:84:ef:af:06:3b:3c:2f:cc:0c:ed:ba:
ee:5f:83:30:1a:ed:de:bd:91:d6:54:7c:46:7a:9a:cb:42:06:
75:26:dd:3d:63:12:82:26:01:82:e4:3e:16:47:f8:8b:a1:ad:
b5:5c:51:de:73:01:c4:ab:85:8f:47:ba:9d:d3:bb:e5:74:85:
6b:b7:21:86:60:92:7e:7d:27:24:a4:62:e7:c0:e3:25:eb:ae:
1b:cb:1e:63:fe:c5:0b:71:b2:6e:7b:ce:24:f0:9f:87:3f:9d:
eb:5e:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:37 2025 by rpki-client