This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json)
Hash identifier: ueFjIWMhDVE2oeAGux+0VRWJaCMJUAa+W2Aji+61X+8=
Subject key identifier: B9:68:F2:5E:8A:5D:7E:93:11:F8:C4:98:79:1C:E8:F1:42:BB:EA:D5
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
Manifest number: ED
Signing time: Fri 19 Dec 2025 04:33:10 +0000
Manifest this update: Fri 19 Dec 2025 04:33:10 +0000
Manifest next update: Fri 26 Dec 2025 04:33:10 +0000
Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: iS0QVPIiHY5YAV/NYPtLe9mpk6TTh0merWsRKhDGc84=)
2: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: 2fQyEMRkeBroC7JG6dhKWVMOmAu2peytDIRfiN3h3TE=)
3: F7981812F38811EFAC05053AC4F9AE02.roa (hash: D/9SKPwUI+9VjDA2s/SYyY7F96WxlOAy4mRC6PjrPZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Validity
Not Before: Dec 19 04:33:10 2025 GMT
Not After : Dec 26 04:33:10 2025 GMT
Subject: CN=6944d586-b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:53:16:6a:57:8b:ea:e6:e7:23:ea:d7:94:
81:b7:58:5c:9c:3d:4a:90:a2:43:0f:a2:9d:c7:f9:
d5:f2:4d:80:ff:f0:ab:e8:4e:d2:bb:13:d5:b6:2b:
8d:fb:d5:f1:79:e9:4e:dd:d5:82:8b:3b:0d:41:14:
89:d8:23:ee:ce:17:53:a8:f7:b0:48:75:3b:52:29:
6d:45:12:f8:aa:92:18:f2:13:bf:78:10:be:04:db:
54:d5:c2:6d:e4:98:c3:0e:04:f6:49:eb:4a:8a:6d:
db:ce:3b:1e:44:dd:23:d6:e2:38:c9:2f:69:16:31:
f4:06:2d:b8:40:57:68:33:8b:d8:fd:94:13:f6:92:
77:a7:b9:f2:d5:54:5a:0f:a6:9a:8e:2e:08:97:1d:
37:65:1b:a9:d2:48:0d:40:f3:e7:28:11:6f:b1:43:
80:73:46:87:50:67:9b:12:3f:e2:92:1f:80:a7:26:
09:03:c4:9a:83:0a:d3:fc:c1:a6:eb:50:3e:e3:68:
5f:2b:c8:44:39:08:fd:3a:17:f6:e1:23:e7:25:07:
ad:22:37:14:ee:a6:32:92:72:68:17:3a:a8:62:db:
39:63:d2:c2:f1:b9:54:80:5d:43:64:eb:21:2c:ff:
ac:ba:f9:e1:b4:78:b8:7e:40:b0:90:25:6f:80:7e:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:F2:5E:8A:5D:7E:93:11:F8:C4:98:79:1C:E8:F1:42:BB:EA:D5
X509v3 Authority Key Identifier:
keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:c1:ee:24:4a:74:0b:01:1e:ae:58:c7:ee:32:c7:c4:d9:2b:
8b:11:c4:00:cf:87:d5:7e:e1:86:dc:08:48:8d:af:53:ca:72:
3c:dd:c1:01:43:39:90:ea:0a:a8:72:3b:7f:d9:10:bb:14:de:
db:47:41:28:78:5a:83:04:5b:c3:0a:6f:09:83:b3:d2:1d:c4:
d2:09:8d:a9:39:89:ac:77:02:16:33:09:e6:eb:a5:57:a1:72:
69:51:81:26:bd:5f:fa:87:1e:dd:c1:3f:b6:0a:ab:e7:6d:7b:
78:ae:d9:86:1c:fa:0f:78:44:38:bc:34:27:55:ba:e9:53:78:
f0:d7:be:76:60:b6:6a:b3:d2:d1:64:cb:23:e2:2d:94:a7:f6:
02:74:60:14:34:37:22:e0:7c:0c:7b:c0:d6:4e:06:13:d5:d8:
f2:05:ad:49:ff:b2:73:f9:25:9e:75:c6:d7:5c:ec:af:05:d6:
f4:9d:c7:30:50:a9:46:10:70:02:6f:73:3a:72:58:98:64:e0:
11:b3:8c:16:12:65:ca:fd:da:c6:33:32:47:89:6f:6c:92:98:
00:bd:ab:2e:fa:d7:fc:b0:d1:e6:18:f8:98:07:e9:51:77:af:
9c:ec:75:4d:1f:ce:0a:3c:1e:17:0b:e2:39:28:2f:ec:ca:02:
e8:e0:c7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:47:55 2025 by rpki-client