This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
File: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft (raw, json)
Hash identifier: EHH4m3XrS42YEbg9MIOI5NZ734a8MKzWjxIHav4RYQY=
Subject key identifier: 85:9C:89:77:5F:64:B1:D1:CD:CD:56:6B:E3:88:51:C0:6D:C7:05:3B
Authority key identifier: 21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
Certificate issuer: /CN=A9176302/serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
Manifest number: 011D
Signing time: Mon 29 Dec 2025 03:54:34 +0000
Manifest this update: Mon 29 Dec 2025 03:54:33 +0000
Manifest next update: Mon 05 Jan 2026 03:54:33 +0000
Files and hashes: 1: Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl (hash: /Nv9E4x8j0fRzVThoJNY92tPQrSS/Q3KeyTMlN2w4r0=)
2: 0EE57B38378F11EF88F9BF5AC4F9AE02.roa (hash: 59HLMBrfjjdy7ZkLbK5ZAyw/H+2uYObVepiHANeb3uU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 03:54:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176302, serialNumber=21BE8C8FE953F6EC97B7F121617ED91047DAA5A4
Validity
Not Before: Dec 29 03:54:33 2025 GMT
Not After : Jan 5 03:54:33 2026 GMT
Subject: CN=6951fb7a-8579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:85:99:59:23:95:e3:2c:c3:68:16:18:35:9d:
5b:a4:58:83:bc:08:3c:f5:e9:18:4f:56:95:8a:4e:
b8:71:78:b7:e6:ec:58:1a:9d:87:d2:48:12:68:74:
b7:d2:1e:bf:5d:6d:42:7e:b8:14:72:36:9f:1c:ac:
3f:22:aa:e8:3d:34:86:92:dd:10:f1:2d:46:14:80:
77:3c:cb:68:e3:da:0e:de:7c:2c:5b:25:00:c3:46:
6c:92:d5:8e:53:d3:41:98:6d:98:23:00:54:36:a4:
af:36:dc:4c:0b:a7:af:d4:04:b3:34:95:fe:a2:5e:
2e:85:d0:7b:d0:70:91:95:7c:d4:b7:67:08:8d:e2:
0c:1e:55:ce:00:77:7e:a0:7e:0c:34:68:1e:1a:19:
ee:2c:1b:eb:25:9c:af:58:e0:05:84:94:02:9c:56:
93:e5:e3:e9:38:84:01:87:d8:2f:f9:d5:c1:10:d3:
6a:67:8d:7f:03:52:ae:63:ed:48:5a:e1:95:eb:74:
f3:a1:69:85:25:0a:34:24:a6:b0:b6:f4:a1:c8:44:
4b:01:2e:fe:c0:38:3a:79:7b:5d:87:d3:39:34:1a:
f0:6f:96:dc:8a:83:33:10:7b:85:4f:ec:a9:bd:be:
df:fe:73:a9:fe:80:78:a8:2a:7e:e3:4f:c1:33:f6:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9C:89:77:5F:64:B1:D1:CD:CD:56:6B:E3:88:51:C0:6D:C7:05:3B
X509v3 Authority Key Identifier:
keyid:21:BE:8C:8F:E9:53:F6:EC:97:B7:F1:21:61:7E:D9:10:47:DA:A5:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/A32FDFDE374611EF96653326C4F9AE02/Ib6Mj-lT9uyXt_EhYX7ZEEfapaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:79:f5:e6:11:c4:92:f6:a4:88:b7:27:bd:e5:14:21:f0:2f:
02:fc:d8:ae:94:51:c3:2e:e8:18:ec:fd:0c:53:ec:4d:ee:b0:
b7:6d:c8:b4:97:98:f3:c0:d4:e1:3e:d4:ae:89:e7:8f:97:cf:
c7:b8:87:48:0f:4e:6f:90:a1:e4:a6:83:fd:ee:0f:fd:40:9d:
da:30:e8:ab:8a:bc:02:a2:11:5e:8a:ef:48:1f:74:0d:ba:a2:
c6:c7:17:da:02:1d:16:78:56:25:34:d2:3c:6e:4a:3f:7c:52:
98:77:64:b2:72:05:29:f5:a1:bf:4d:8a:00:b7:39:e4:ea:ba:
50:9d:7e:55:95:18:7f:44:a4:68:6c:b4:1b:3c:7c:c0:e5:69:
f0:96:55:96:d0:7c:9b:ee:ed:3c:90:34:6e:41:df:e8:91:93:
2d:75:35:2c:f2:55:c3:ea:9d:8b:1c:c4:15:74:51:23:a2:d5:
1a:fa:2a:42:b1:2c:9d:6a:0e:00:eb:2c:e2:40:b0:bf:d7:42:
55:44:03:7e:a4:61:40:c8:5f:a6:6d:a7:4d:e7:b7:d5:53:fa:
9a:f0:86:cb:75:cb:b2:80:b4:4e:d5:a8:ad:a8:65:af:55:a6:
eb:c9:37:d7:83:85:d1:77:10:f1:a2:93:87:e1:2d:74:5f:55:
b8:e4:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 08:30:07 2025 by rpki-client