This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json)
Hash identifier: JwF+uRgepI21Dk0Uan/iPXLdhunj7gFb3kuHLglKvgE=
Subject key identifier: AA:D0:6F:62:88:20:3F:2C:31:82:13:6C:64:FA:DC:72:90:E4:D9:D5
Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
Manifest number: 020B
Signing time: Wed 31 Dec 2025 01:27:48 +0000
Manifest this update: Wed 31 Dec 2025 01:27:47 +0000
Manifest next update: Wed 07 Jan 2026 01:27:47 +0000
Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: 8atyzHjVO/KXk8zHJmjtxgIm9hjcYWAK8bxNnJVIo0Q=)
2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 01:27:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Validity
Not Before: Dec 31 01:27:47 2025 GMT
Not After : Jan 7 01:27:47 2026 GMT
Subject: CN=69547c14-6cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:95:a2:e3:63:d0:13:61:cb:18:9b:e1:b1:
30:d2:70:f7:d9:43:f6:eb:d9:c5:41:34:ad:b6:22:
d4:e6:e3:9f:89:3f:fa:de:88:a9:7d:a3:d2:36:79:
05:be:a8:fb:24:31:29:58:3c:52:53:e1:b4:af:71:
df:de:f0:ab:8c:53:8d:07:9a:a8:95:02:35:a1:8e:
3f:eb:76:ad:d5:a1:96:8b:d9:9a:b1:ac:50:06:81:
e7:bc:44:e5:4e:c9:37:31:61:ba:e1:43:a2:28:6b:
d4:e2:f0:c0:d1:ab:1b:7d:5f:f7:2c:74:46:ec:75:
11:d8:a8:2e:b1:7f:6f:fa:c3:72:6a:e9:4d:60:5f:
51:61:49:29:23:22:f4:89:19:c1:fe:e7:ee:59:89:
60:df:4a:87:c9:a4:4d:e5:8b:f8:47:49:53:c2:15:
29:23:6b:25:14:b0:4d:1f:03:e9:2e:a2:2a:10:4e:
5a:83:cb:aa:6b:26:a4:e1:8c:f4:b8:7c:8a:16:b6:
57:4d:69:de:1f:52:63:b4:83:49:0c:43:80:e0:c7:
08:48:81:59:62:92:9b:4e:3b:34:b6:c1:32:cd:04:
9d:c8:4f:77:73:8b:18:d5:a6:b1:20:5d:6e:4b:ff:
1c:59:64:ee:01:85:78:fc:3c:0a:72:5c:a7:bc:79:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D0:6F:62:88:20:3F:2C:31:82:13:6C:64:FA:DC:72:90:E4:D9:D5
X509v3 Authority Key Identifier:
keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:bc:eb:d1:c5:85:83:c0:49:6d:2d:a2:17:27:e2:ed:f0:03:
64:08:7a:81:f0:08:a9:a4:de:69:67:69:8d:ef:69:90:d3:45:
5b:80:4e:58:8d:fa:e0:1e:cf:f1:45:1b:d4:af:df:d3:93:34:
46:b5:ef:64:5e:36:b5:5c:ec:a7:e5:6d:19:d1:8d:28:41:c4:
f9:d9:b9:75:a2:9a:86:65:7f:cf:88:72:6b:b5:59:b8:92:3e:
e6:2f:e7:5a:c4:0a:02:df:43:14:3a:0d:e7:6b:f5:77:2a:12:
ab:05:1c:a9:23:eb:63:2a:36:59:a2:c5:bf:72:7e:c2:11:0e:
a5:0d:5a:be:22:6d:b4:e0:9b:d3:2a:59:b5:7c:0d:0b:53:8a:
e5:e5:53:b0:85:1c:29:e2:84:27:00:68:21:da:86:b1:d0:c1:
b2:21:29:59:f6:06:5a:05:fc:f2:fe:27:71:41:2a:a4:ba:9d:
75:17:8c:0f:fa:77:ca:9c:e6:1e:5e:e8:d6:e9:6f:ca:3c:7c:
a6:ad:5e:43:7c:bd:20:e3:69:79:ea:58:53:dd:17:47:d0:57:
1a:40:4b:ef:64:4b:2f:62:bf:c3:1d:ed:ef:81:68:2c:fa:76:
86:e9:67:f6:32:d7:10:92:57:e4:47:d5:a3:00:6b:11:76:96:
7b:fe:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 15:24:14 2025 by rpki-client