This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json)
Hash identifier: 5AMreTuZQy/6OzfGcEjzKR5qTlacMHsuOE7SY4o0j+0=
Subject key identifier: 37:F3:00:B9:87:88:F1:FC:60:97:E0:EA:22:34:4C:79:F2:EE:39:92
Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
Manifest number: 06CB
Signing time: Wed 24 Dec 2025 21:26:56 +0000
Manifest this update: Wed 24 Dec 2025 21:26:56 +0000
Manifest next update: Wed 31 Dec 2025 21:26:56 +0000
Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: LECyvHL2zlvvvT1O/znkkEl5h2QJ1XOKinWbCpSrwlQ=)
2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: c9M9mRbjF0BZcSk0yGj1HQe17Ih56nG/Gq+RFkDxc6g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 21:26:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745
Validity
Not Before: Dec 24 21:26:56 2025 GMT
Not After : Dec 31 21:26:56 2025 GMT
Subject: CN=694c5aa0-bd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:1e:9d:57:3c:0f:61:18:05:78:8b:69:7f:
be:b5:a5:0c:06:ab:50:08:ff:5c:74:59:72:cc:e8:
37:05:9e:be:18:76:5a:0e:d4:89:83:a8:5e:e5:30:
32:70:07:bd:d1:85:d3:52:d6:c9:6e:55:16:4d:7f:
88:84:62:8a:dc:6e:a2:30:f5:84:7b:46:5c:62:20:
50:77:ed:42:55:74:b3:06:49:f5:36:5e:1b:d3:3d:
70:3c:41:6c:ed:ce:0e:47:b0:9c:09:17:85:29:e7:
dd:6d:06:78:24:2c:b7:9d:37:a1:4c:52:7f:d3:81:
a8:cc:b0:eb:c4:41:a9:8c:e8:91:33:27:7f:0f:a0:
e1:ab:14:15:54:81:56:98:c6:72:c6:46:fd:7f:ae:
45:3a:dd:1e:ca:62:c7:31:fb:a2:53:cc:17:80:db:
b2:76:0f:36:f4:6e:4a:f1:55:30:4d:40:f0:53:00:
86:a9:55:2b:ce:2e:38:54:51:52:f2:08:cd:7f:6f:
c9:b6:24:3a:3f:7d:75:9f:47:3d:18:39:23:b8:39:
0e:eb:9f:d7:09:e3:46:ad:2f:ad:68:22:55:f0:72:
86:da:cc:30:36:b5:50:6f:dd:6b:fd:be:71:5e:6c:
ef:82:4f:1c:37:2e:07:35:05:78:a7:9c:65:5b:42:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F3:00:B9:87:88:F1:FC:60:97:E0:EA:22:34:4C:79:F2:EE:39:92
X509v3 Authority Key Identifier:
keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:3e:7a:98:3e:b1:94:3a:ac:a0:97:f6:fe:7c:38:84:cd:08:
2c:f9:70:1a:4d:bd:01:06:a1:c7:be:81:be:4b:b2:99:d1:45:
ab:49:e2:38:f7:da:69:74:e2:39:b3:e8:e4:b6:fc:9b:be:8e:
af:7e:55:02:d9:5b:24:92:f8:03:4b:20:f9:06:cb:6c:e8:47:
3e:0c:df:3e:83:38:53:a9:e7:56:76:4f:f4:d5:03:0d:70:eb:
63:e3:73:79:15:36:12:a1:ae:99:52:bc:93:69:eb:18:a5:7d:
a1:21:81:7a:29:a2:51:41:bf:9b:c3:ec:1c:f7:01:58:d6:1e:
ef:cd:62:c7:04:51:a9:7f:cf:0f:8a:00:96:e3:44:2d:33:79:
67:de:e1:43:a9:36:8a:81:9f:23:b3:7e:2f:0a:f7:35:85:eb:
3f:b1:ec:48:0c:c9:44:18:03:0d:c3:19:8c:2a:77:cf:ef:81:
16:5a:ca:7c:0a:3d:45:3a:37:f9:fa:97:79:b2:b0:ab:05:f0:
50:ab:16:f5:94:20:2f:f5:24:d6:df:c7:a2:1a:39:b8:76:a1:
34:c1:30:7d:18:87:2a:51:a9:23:8b:03:50:f1:8a:f1:d4:bd:
49:1e:34:a4:69:0b:64:aa:33:39:73:e6:ee:6b:a1:b6:9a:b6:
e3:fd:94:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 10:42:07 2025 by rpki-client