This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
File: ItPpdE2tSXUDbMQirBHEBHIOZuo.mft (raw, json)
Hash identifier: neT7yXVi+0vkTMIHQL6MUDh41jkRolsE8PZTgaEZ5Ks=
Subject key identifier: E5:51:C4:87:D7:CA:68:0D:4A:D6:0F:B2:12:A1:4F:D5:28:58:CC:D2
Authority key identifier: 22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
Certificate issuer: /CN=A917A4F7/serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
Manifest number: 018D
Signing time: Thu 25 Dec 2025 02:38:24 +0000
Manifest this update: Thu 25 Dec 2025 02:38:23 +0000
Manifest next update: Thu 01 Jan 2026 02:38:23 +0000
Files and hashes: 1: ItPpdE2tSXUDbMQirBHEBHIOZuo.crl (hash: rro9t6QzmwO2CGrADXQgVFYXtk0Ezrt5tWI3GGenWcE=)
2: 9BE3C7087E8311EEBC7E6681C4F9AE02.roa (hash: gkpGu4s3lw8zurLXdvn6Zq+w59lx0+P+q37arJjTECg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 02:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4F7, serialNumber=22D3E9744DAD4975036CC422AC11C404720E66EA
Validity
Not Before: Dec 25 02:38:23 2025 GMT
Not After : Jan 1 02:38:23 2026 GMT
Subject: CN=694ca3a0-e7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:b0:9a:23:9c:ff:06:78:b5:84:6c:69:08:
c9:25:28:a5:e4:42:f4:93:99:23:21:33:d9:05:52:
82:e7:c1:b0:8f:de:d1:1b:fa:f8:50:5e:10:4b:4d:
08:4b:94:8e:0b:ea:0e:4c:09:fc:54:3f:03:f0:5b:
a8:db:95:d8:4a:a8:5d:74:a0:80:58:e2:f7:f3:d6:
9c:30:c5:63:28:35:47:1a:b0:ce:e2:b4:92:be:1b:
a6:aa:1d:64:9e:24:04:45:13:95:fb:39:46:66:c3:
06:32:8f:e9:c8:ed:26:bc:43:5a:8d:71:a6:1e:31:
3a:e8:ac:1d:06:9a:dc:83:fd:97:8b:29:4f:9b:ae:
54:82:b1:1b:9a:b3:f8:be:06:70:0a:aa:f2:28:ac:
a7:f9:62:ca:7c:3f:db:30:36:87:e7:f0:97:99:84:
a9:ce:8f:19:d2:3f:e9:48:37:c0:de:d2:fc:6d:d3:
7d:61:86:56:1f:e7:c5:5f:31:35:e4:29:3d:88:f4:
a8:ad:b5:51:88:9c:b0:f6:bc:d5:9e:ca:c2:ee:95:
86:ca:25:19:03:f4:55:e3:90:0b:0b:1b:1e:b8:76:
90:71:fb:a2:84:b7:79:ba:a6:87:35:39:2a:f9:da:
06:5b:f7:12:76:14:17:51:c4:59:37:6a:7f:80:4b:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:51:C4:87:D7:CA:68:0D:4A:D6:0F:B2:12:A1:4F:D5:28:58:CC:D2
X509v3 Authority Key Identifier:
keyid:22:D3:E9:74:4D:AD:49:75:03:6C:C4:22:AC:11:C4:04:72:0E:66:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItPpdE2tSXUDbMQirBHEBHIOZuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4F7/2A4893867E8211EE99DA9B7AC4F9AE02/ItPpdE2tSXUDbMQirBHEBHIOZuo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:29:85:ea:ff:8d:a0:f2:47:9d:2e:01:76:ed:71:81:fd:e6:
1f:a1:5b:95:d4:62:5d:d6:97:5b:5b:5f:90:63:dd:c2:e3:9c:
ae:67:05:cb:9a:80:64:25:fa:07:3c:cb:ab:bc:fa:8f:a7:32:
f7:c9:48:78:0e:ca:b0:66:49:9f:97:35:b9:02:66:e7:ab:61:
f7:6a:6a:ca:ed:11:24:6c:8d:bf:81:30:12:8c:42:cb:11:17:
0e:73:c0:fe:15:14:2d:2e:69:70:75:97:a3:22:25:3d:28:2c:
4b:da:7e:5c:7e:2b:7d:bf:00:3b:09:55:24:6b:b8:fb:af:95:
5b:fd:00:0e:81:b8:e5:f0:8b:1e:ab:4e:e4:33:8f:65:c8:66:
17:01:d8:ca:e8:53:46:63:f3:97:e6:f6:b3:a7:1e:57:5e:3b:
fa:e8:92:68:a9:b6:3b:5d:58:f1:1d:e6:17:00:ab:7a:8e:d3:
e1:d1:c0:d5:81:a0:bf:20:76:00:0e:dc:35:05:e0:0b:55:46:
92:e5:a9:c5:27:8c:b1:05:7f:91:88:e6:3c:57:48:25:5c:b0:
34:52:65:96:43:4f:74:a4:95:99:f1:55:b9:41:a5:a3:46:51:
65:56:92:4f:ed:7e:b9:f4:7d:0d:d7:fb:24:78:d1:20:e4:2a:
d5:bf:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:13:15 2025 by rpki-client