This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File: cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier: WsenDV5wd3hHnDaSMPNXkJh1uoOnimWO/Iz4t+mnQYE=
Subject key identifier: 15:3C:4A:09:55:01:C8:F9:55:5E:2A:9D:13:3C:5C:96:E0:7A:56:FF
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer: /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial: 0C16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number: 0C03
Signing time: Sun 28 Dec 2025 18:23:25 +0000
Manifest this update: Sun 28 Dec 2025 18:23:25 +0000
Manifest next update: Sun 04 Jan 2026 18:23:25 +0000
Files and hashes: 1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: 2V7eu+/Jo6JKfYsMIiXRktHUkxROTbW0cOzXZlDGBnM=)
2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: 3kF8zJlwF4UbEFsgd+jLuLFD7uUy5scRolMoxM2c994=)
3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: Jnuyh/tjlmXzh/W0FC+nfv2/1A+JOUdoR1QdMOg2nAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 18:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3094 (0xc16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Validity
Not Before: Dec 28 18:23:25 2025 GMT
Not After : Jan 4 18:23:25 2026 GMT
Subject: CN=6951759d-7f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:b7:a2:19:a4:1c:d7:01:1c:57:99:37:b2:
e6:89:7c:be:c4:62:a9:8f:84:0a:93:3a:84:8b:52:
0d:ee:a8:c1:eb:f2:fd:b6:a6:e8:4c:1c:9a:7a:32:
e6:cf:e7:76:e3:17:ba:a8:2e:a2:b7:ee:a8:a4:b5:
68:c4:4b:c0:d7:c4:a4:9f:67:d1:b0:90:34:18:97:
3a:97:d4:11:75:6f:7a:b8:83:8c:ef:07:ce:09:0c:
23:ed:d7:1b:be:1e:02:53:1c:87:87:27:91:98:17:
21:92:87:ee:2a:66:19:90:4f:38:b7:13:14:29:a1:
b5:54:e9:9b:cc:17:9c:bd:e2:fa:2a:55:8d:f2:a8:
48:7f:07:11:ce:cb:ee:39:8e:53:81:47:c6:ca:3f:
2f:84:f1:c9:5f:04:e9:43:5d:42:e7:8a:4c:6a:ea:
57:b7:50:a0:c3:cd:5b:e4:9a:4d:7f:28:ca:85:95:
8a:a3:86:3f:e9:ef:d1:d7:4f:eb:a6:08:cb:06:d7:
c5:6e:bf:2e:17:d4:fc:56:6c:6a:a1:ce:96:eb:55:
90:bb:b4:ed:71:69:47:4e:65:70:33:13:44:c0:39:
2c:f7:80:44:fc:ec:c9:10:a3:54:8f:be:e8:06:e1:
5f:98:aa:30:0c:0c:99:83:56:49:e6:2f:2e:87:7a:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:4A:09:55:01:C8:F9:55:5E:2A:9D:13:3C:5C:96:E0:7A:56:FF
X509v3 Authority Key Identifier:
keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:79:f4:5b:a4:ec:b0:65:29:7a:68:82:10:e2:7c:25:9b:97:
12:46:9c:ec:71:89:61:2d:3b:55:f8:28:cc:7d:29:f0:74:68:
89:19:1c:74:2c:9a:72:ca:4c:64:2f:56:75:04:bd:33:56:c8:
41:a2:62:9e:82:0b:67:10:41:b7:c9:2d:6b:c6:ca:e7:72:97:
57:64:e1:a4:0e:09:0b:90:c3:a4:a7:a6:dc:f5:49:44:60:32:
7c:21:68:d1:be:5e:58:a0:5b:31:46:e8:ce:62:df:f5:c1:66:
ea:b0:b6:cb:57:25:d7:47:09:76:54:31:e6:f7:ab:25:3e:77:
ec:2f:3c:6a:24:7c:7d:f8:9b:e0:15:c2:2a:56:83:0f:a0:97:
5b:ff:b9:2f:1c:14:45:b5:91:8a:20:51:51:03:15:21:2f:e9:
a9:36:a9:df:95:45:fb:8c:4f:71:3d:a7:81:bf:9d:b6:fe:f6:
3d:b1:79:0c:f8:2b:fa:a0:3e:80:6d:db:b7:34:64:e2:2e:98:
62:a0:8c:44:18:12:da:ed:16:73:34:89:da:5f:47:31:ee:15:
2a:98:2f:92:be:db:f0:f1:85:f5:9d:20:66:f6:a1:c1:7f:1f:
d1:5d:94:e1:d4:a3:ac:61:fa:05:ba:71:a0:51:f1:33:95:8c:
a2:cc:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 23:22:45 2025 by rpki-client