This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json)
Hash identifier: mPmSgFOcieA+SxlpGb4FqnCY8CWj0K0TzxJt1ndCo50=
Subject key identifier: C1:4F:AB:F0:89:4C:1B:9A:46:7E:F3:C7:14:1B:FA:71:C7:87:0F:BE
Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Certificate serial: 0589
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
Manifest number: 0584
Signing time: Thu 18 Dec 2025 22:37:49 +0000
Manifest this update: Thu 18 Dec 2025 22:37:49 +0000
Manifest next update: Thu 25 Dec 2025 22:37:49 +0000
Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: sFFYFxuxatO9FcxGHj6d+pnfwMahEbiL/Sko+53PDnc=)
2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1417 (0x589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209
Validity
Not Before: Dec 18 22:37:49 2025 GMT
Not After : Dec 25 22:37:49 2025 GMT
Subject: CN=6944823d-1330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:71:7e:5e:27:2d:aa:96:3b:a3:1c:4a:7b:
33:2e:a7:43:95:e9:ad:a2:ff:91:09:1b:7e:2c:5d:
43:55:cd:0e:19:f0:d5:2c:97:b5:94:5e:24:b3:f2:
f6:26:36:55:5c:7a:f4:99:12:62:f9:cd:57:9f:7a:
3d:cd:11:81:07:c4:0a:5f:0a:30:e6:bf:04:df:32:
83:b3:f3:f5:f5:d4:b2:d3:93:5f:cb:b5:2a:fd:0a:
a7:32:37:6a:93:46:bb:64:ae:03:df:3b:10:3a:ef:
d6:05:7a:91:7f:11:3e:46:4d:a2:1e:0c:88:2b:92:
c7:4d:e5:9c:c7:18:52:7d:2e:4d:ad:63:ce:56:f5:
df:dc:ca:d5:1d:20:e7:fb:51:b0:63:ab:79:d4:7f:
8d:2c:72:e8:96:e3:79:85:18:97:8f:07:8d:90:b6:
b6:8b:fe:bc:e7:93:24:e1:f0:6a:d2:36:44:fe:9b:
cc:35:2a:a1:81:1e:7c:98:28:77:92:b3:ec:66:75:
f5:a8:c5:1a:66:4d:3d:23:79:a4:39:31:f9:12:e1:
23:9f:fa:67:ee:94:46:d1:8d:c2:dd:73:60:0f:49:
b1:59:74:c3:11:ea:53:a0:d3:36:cd:b9:23:2b:ea:
d8:f4:39:fd:4c:21:96:f8:2c:b8:41:2a:48:42:aa:
f7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:AB:F0:89:4C:1B:9A:46:7E:F3:C7:14:1B:FA:71:C7:87:0F:BE
X509v3 Authority Key Identifier:
keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d8:d1:b7:44:80:ce:79:7e:f5:b5:b5:ca:46:a2:61:6b:30:
63:13:4b:34:0d:4e:de:c1:83:d1:44:86:a5:47:6d:74:2f:5f:
a7:d6:6f:59:4a:1a:ae:6e:59:10:23:ae:8b:ff:96:a9:43:7b:
8e:67:3c:ae:f0:20:20:89:5f:d9:ee:ba:ab:75:3a:ef:ce:6b:
bc:6e:7f:00:71:fb:d6:54:90:ca:75:ae:5c:4d:dc:67:38:a2:
63:07:34:47:6e:b9:ad:5c:5d:85:2a:a3:38:24:5e:37:b5:3f:
d6:e3:a4:28:df:0b:1f:fe:17:14:5d:2d:35:cb:66:1b:2c:75:
26:e7:41:80:0b:c8:3d:dd:40:9d:a3:52:96:f7:de:bb:89:4f:
a4:50:ce:3d:47:80:6b:dd:7d:87:c0:35:ea:c8:23:8e:b3:c5:
73:a8:5d:dc:0a:c2:a1:30:67:6f:c9:6b:68:f3:b3:1f:b5:73:
9a:da:54:d6:17:a3:69:17:df:3e:12:d0:2f:e0:4c:98:60:20:
ed:af:d3:17:93:db:1e:20:a0:7d:15:e7:a6:d1:5f:b4:13:7e:
aa:80:a2:bf:cb:44:e5:5b:96:0c:6b:bf:3e:1b:f0:89:bb:7b:
90:20:63:ca:ed:49:35:33:09:c9:b0:16:04:e9:40:db:b5:08:
94:3d:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:34 2025 by rpki-client