This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier: zpmQ+Mm0RquUU7yzMhY/+MeNdtz1BnVHTaR8wAqaNAk=
Subject key identifier: B0:4D:D9:D8:C9:61:DE:15:70:20:40:9D:56:48:A9:27:11:D1:E0:34
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number: 0212
Signing time: Wed 31 Dec 2025 01:29:56 +0000
Manifest this update: Wed 31 Dec 2025 01:29:55 +0000
Manifest next update: Wed 07 Jan 2026 01:29:55 +0000
Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: OtvNtWcRr+g8M0jpsF+hBlZwmDDGMS4EcpT1RR+C80I=)
2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 01:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Validity
Not Before: Dec 31 01:29:55 2025 GMT
Not After : Jan 7 01:29:55 2026 GMT
Subject: CN=69547c93-ac00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:e1:93:f7:11:a9:9c:be:fd:30:2b:19:48:
8c:fa:49:f3:d0:11:1e:9d:cf:f0:bd:fa:48:cd:99:
81:aa:33:f7:a6:b5:84:e0:15:fb:0e:dc:2a:93:f9:
fe:c8:83:d3:1a:b7:a5:41:a9:c0:7f:f3:c1:06:d2:
37:9d:c8:cb:dd:54:13:e5:65:2c:30:3b:c2:c7:cf:
6c:d5:68:91:13:52:8b:d0:71:b8:07:0e:b9:d6:58:
cd:c2:bc:c0:2e:1a:92:64:7e:f1:1d:af:7d:43:8f:
e6:1b:60:6a:ee:68:2a:cc:90:50:70:70:7d:fe:e8:
7b:cf:59:e8:cb:bb:a7:3a:b8:2f:dd:62:9f:77:6a:
c2:23:2b:f3:09:8e:15:11:19:b7:71:98:a6:38:97:
f7:41:72:75:89:29:11:d6:40:23:1c:ef:71:b9:b3:
d7:df:10:5f:94:17:c7:f9:b0:2d:fc:18:9a:b7:35:
a2:54:43:c8:40:be:da:60:75:fd:68:f7:54:fb:0b:
28:1c:80:06:86:54:fd:ad:ef:e9:65:89:81:d4:92:
86:5f:0a:01:43:3a:72:bd:ce:ac:2c:fe:c6:46:2b:
58:17:cd:c2:78:33:27:f2:43:31:e7:e8:ee:8d:06:
be:b5:4d:71:4b:4e:f2:97:5d:1a:4c:1e:e0:27:48:
ab:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4D:D9:D8:C9:61:DE:15:70:20:40:9D:56:48:A9:27:11:D1:E0:34
X509v3 Authority Key Identifier:
keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9f:07:58:25:d0:44:8d:3b:4f:d5:a4:ab:65:97:d6:4c:e7:
9c:f8:05:6b:f6:04:c6:ff:47:d0:39:15:a3:c8:c6:b2:fc:2f:
15:4b:b3:f6:72:77:df:2b:8c:63:01:9b:32:fa:f5:6c:01:2b:
e5:57:85:de:75:e9:22:cb:09:81:cd:da:f0:7e:ef:f8:b0:c6:
b0:00:82:28:00:30:14:71:3f:61:3a:f0:31:37:23:c4:4f:a2:
f2:96:78:06:ca:40:c2:ef:da:5e:55:72:30:1d:d3:21:21:87:
3a:5a:79:81:52:85:80:3f:8c:56:a9:84:6f:0d:f9:62:7f:29:
75:19:79:51:e4:e1:7b:9c:2f:8d:a9:12:0f:a8:13:0f:13:f8:
b0:e3:6d:73:f4:00:88:a5:f4:ab:16:f2:12:14:12:9c:63:fa:
d5:83:62:23:9b:1b:d3:06:5d:a6:54:8b:67:e7:6a:3a:a5:fa:
ab:5c:23:31:e1:25:50:2c:a1:c3:27:32:38:f7:47:93:7b:35:
b2:e4:4f:a8:45:f4:e5:18:e0:7f:4a:3e:13:7f:18:1e:a0:90:
7c:a3:cf:3e:8a:00:29:0a:25:ef:36:0c:39:71:bd:d3:5e:d4:
27:a6:46:17:70:b2:fe:38:30:a2:5c:79:53:3e:49:42:87:5b:
71:13:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 23:30:46 2025 by rpki-client