This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
File: -tfsycBc2OsgVpCdbGFHFeLFEz4.mft (raw, json)
Hash identifier: jphvAuUgWW1e4Sfg6Jv6PzHqTjMq6GlZtXinwmOiJi8=
Subject key identifier: A0:3E:33:02:78:EF:EC:8F:E5:8B:20:0F:BA:CC:73:3F:94:6C:3B:04
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Certificate issuer: /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial: 0494
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
Manifest number: 0473
Signing time: Sun 28 Dec 2025 23:20:31 +0000
Manifest this update: Sun 28 Dec 2025 23:20:31 +0000
Manifest next update: Sun 04 Jan 2026 23:20:31 +0000
Files and hashes: 1: -tfsycBc2OsgVpCdbGFHFeLFEz4.crl (hash: 4nkEqq0S29XWMO/NkPTTwHaXJOkfgotXXV4UD/r9SDM=)
2: 4AD77714823D11F0A5490821C4F9AE02.roa (hash: VRtVYC+afvhigywAUFy8UkGyU1t5gq1k2av2NI5KhIY=)
3: 3FBB06DAA33E11F087A31D6FC4F9AE02.roa (hash: 3hX8h88yIE4bG4c6BEhKQMbhzT9emXY29GoQUCoDJvc=)
4: 98CF37B28F0E11F0880D4780C4F9AE02.roa (hash: Ic4R+w1Q3P51Ahg1QyjlaOiynLUhpiYZLqnU6ACR3P8=)
5: 1821352EA82D11F0A44D2F49C4F9AE02.roa (hash: eUCAdWAAJYU2vithU9v2dxzSk9NHzeoy+gq9VsH9MFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 23:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Validity
Not Before: Dec 28 23:20:31 2025 GMT
Not After : Jan 4 23:20:31 2026 GMT
Subject: CN=6951bb3f-8df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:52:f0:1a:e7:f9:75:29:62:58:04:83:a8:
42:80:25:87:aa:e4:76:2e:33:b2:e8:a2:91:4a:ab:
75:6e:d4:23:1a:c6:05:10:bd:cf:d9:02:8f:0d:01:
92:ce:f3:aa:14:a1:6a:c4:a5:00:f8:84:02:8a:c9:
fd:5e:e5:09:02:7b:83:6b:78:23:76:63:f4:59:4e:
cf:f3:0b:57:59:39:9a:fb:df:a8:d9:08:ce:97:83:
fc:0a:8f:47:5d:94:dc:e6:15:d0:01:d5:b7:f0:4f:
ae:bd:2d:b6:6e:b8:3e:fc:e6:6c:d0:64:35:84:fc:
20:92:6a:69:6a:42:56:73:14:28:37:43:bc:e1:dd:
2d:13:b2:b3:64:6e:5b:8d:1b:18:6d:cd:b4:38:c7:
71:01:67:9b:49:fc:bf:35:8d:8b:cd:0d:7d:09:a0:
74:e9:ca:97:0f:ac:9c:58:5d:c6:9a:75:32:37:74:
da:5d:f3:42:df:41:c0:2b:46:e9:61:4c:1f:5a:6c:
4b:e5:31:c4:4e:69:dc:57:f1:d7:77:da:68:89:e1:
bf:c4:9a:cc:82:4d:bd:68:c1:95:75:16:4e:74:9e:
90:8a:7e:f9:fe:00:9f:80:fe:5b:3f:cc:b6:d3:a6:
de:ec:c7:7a:6f:0c:24:3e:e5:1d:32:7e:c2:28:89:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:33:02:78:EF:EC:8F:E5:8B:20:0F:BA:CC:73:3F:94:6C:3B:04
X509v3 Authority Key Identifier:
keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:53:3e:6f:c3:31:78:0e:25:7c:3d:62:e7:98:5a:7c:63:34:
c8:58:fc:5b:66:78:82:1d:d1:cc:35:53:82:9f:57:7d:dc:84:
2f:44:88:98:a9:70:c1:57:72:c4:e1:c4:e1:9e:b0:95:25:2c:
8b:da:d8:17:a4:f2:df:25:71:39:17:f6:3c:27:7b:3b:6f:87:
c9:01:85:d0:24:43:ba:3b:0c:8e:62:d7:78:78:1b:aa:c2:bf:
e0:59:a4:75:41:c3:6e:d4:a2:ac:16:4c:4a:29:d6:a2:44:35:
14:be:bd:f0:26:8f:93:15:f1:e9:d6:4d:2e:bb:8d:45:9f:d2:
47:eb:0b:c3:b8:7d:be:b8:30:b3:2c:30:a1:83:63:38:75:5b:
63:95:e3:36:40:d9:36:41:6c:22:c0:20:9a:38:d4:11:ad:f7:
ec:1b:6b:f8:c2:bb:1a:a1:c2:68:c6:04:41:db:55:6e:87:16:
b5:9b:34:11:74:8a:9c:9b:40:3e:8b:3a:5a:5a:45:58:26:e6:
71:f5:c3:c1:05:62:af:95:fb:22:bf:4c:7b:25:57:fc:f4:1f:
ec:9c:e5:43:58:36:40:65:71:07:ab:03:2b:fb:ea:a3:a0:8b:
97:b4:c1:df:b5:5d:e1:e1:31:cc:6a:f0:fb:5d:14:c6:28:fa:
75:7b:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:49:57 2025 by rpki-client