This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json)
Hash identifier: xl2zbC3Bxv4z6sUAdpqT67p64WF9oFfwWb0Rd3gOxPQ=
Subject key identifier: 30:85:D7:9A:89:4F:EE:7A:32:8F:65:AC:DD:6D:22:7E:5E:B2:AE:90
Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Certificate serial: 84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
Manifest number: 82
Signing time: Sun 21 Dec 2025 05:44:23 +0000
Manifest this update: Sun 21 Dec 2025 05:44:23 +0000
Manifest next update: Sun 28 Dec 2025 05:44:23 +0000
Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: f+WkBkGULv+82U3M7R7El45ChxZKAk67OBd4dDYDUUQ=)
2: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=)
3: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 05:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4
Validity
Not Before: Dec 21 05:44:23 2025 GMT
Not After : Dec 28 05:44:23 2025 GMT
Subject: CN=69478937-9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:b1:03:26:4c:df:7c:a3:70:af:81:7d:5b:
6a:30:f7:e5:7d:02:80:9c:cf:11:3e:46:5f:fb:f4:
88:16:38:bb:31:a7:94:97:1a:bc:cb:3c:c7:05:5f:
7e:be:5a:7f:74:85:35:54:cc:7d:01:73:5d:bc:d7:
78:f8:c6:f2:6f:c3:06:5d:6b:a1:94:60:27:33:60:
5f:63:68:51:55:c2:cd:5a:49:68:92:10:f6:2f:2e:
5f:41:63:04:9f:5e:84:13:14:97:cb:87:a1:46:dc:
95:ff:cd:5f:10:1f:0c:3e:56:c5:9d:80:0d:96:5b:
7c:f5:63:5c:65:a4:44:75:88:0f:49:e3:a0:e0:6e:
cb:a6:11:3a:fd:a7:51:a6:7c:19:ca:23:2d:53:39:
c8:ee:94:c5:44:08:72:4e:98:d4:7c:76:d9:3c:01:
b7:34:43:86:ea:ed:f7:f3:7f:1b:49:58:fa:d5:ea:
be:cd:34:5b:ef:06:92:b3:1b:08:08:76:19:14:cd:
c0:1f:26:33:fe:a1:e5:55:bc:30:68:e7:c0:11:c7:
d1:9e:ec:3b:7e:84:fe:d4:99:fb:c1:d4:dd:22:e0:
de:07:ba:f6:18:2a:af:df:82:b7:5a:c1:c9:ba:d9:
8f:57:72:a9:2e:fd:3b:48:5e:9e:ba:96:db:18:f9:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:85:D7:9A:89:4F:EE:7A:32:8F:65:AC:DD:6D:22:7E:5E:B2:AE:90
X509v3 Authority Key Identifier:
keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:8b:9f:c2:1b:4d:a6:b6:fe:81:1b:31:29:c9:e0:58:81:85:
33:5c:00:c7:3d:b3:03:cb:1c:1f:e6:ad:df:49:72:f4:a4:c8:
35:89:cc:88:88:ec:23:79:47:82:4e:68:ee:c7:18:8e:90:63:
97:18:6e:8f:a6:51:65:f8:e7:d7:b5:17:98:11:2b:49:87:4a:
2a:2b:14:f6:bb:ff:09:94:bb:15:98:6d:17:50:a4:0d:b8:aa:
1e:83:04:d4:4c:b7:47:54:6c:47:3d:9e:61:14:6e:c0:6f:f4:
74:c9:29:da:b5:e2:c2:a9:9f:b3:fe:fc:e1:13:be:ce:e3:ae:
ea:c1:b9:ca:c5:1b:60:c7:e4:7f:d9:ba:38:a4:c7:35:1c:55:
81:68:e8:75:96:ad:dc:15:29:d6:b7:b3:ed:81:e6:10:c3:32:
e6:5f:a2:86:18:61:a0:0b:03:89:54:20:c8:f5:2a:a6:eb:73:
b3:77:12:7c:d7:3d:58:59:33:ec:82:82:cb:b8:f1:18:eb:18:
43:3a:1e:ad:1a:0c:2f:61:7a:5e:74:da:22:91:3f:ed:bc:bd:
8a:e1:9f:8e:2d:2e:9a:00:fd:bb:33:56:dc:5d:22:32:83:96:
e9:7a:b1:e1:ea:d9:09:78:05:85:38:55:74:06:3c:b1:98:c5:
b3:d9:53:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:01:18 2025 by rpki-client