This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
File: xH0VZB2jsUx05cspvMBIgSMK0U4.mft (raw, json)
Hash identifier: 4qOwFa7F+znByH6PURfJYGlyDvbbruvzd0SBwgYDRVI=
Subject key identifier: 30:77:D3:BD:E2:67:9F:06:5E:C9:67:E3:C7:47:D4:63:D5:F7:83:6E
Authority key identifier: C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
Certificate issuer: /CN=A9187364/serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Certificate serial: 02E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
Manifest number: 02DC
Signing time: Fri 19 Dec 2025 00:34:25 +0000
Manifest this update: Fri 19 Dec 2025 00:34:25 +0000
Manifest next update: Fri 26 Dec 2025 00:34:25 +0000
Files and hashes: 1: xH0VZB2jsUx05cspvMBIgSMK0U4.crl (hash: /R77OOQPhhO8fRBORKrB7IltdXzzLVuhf+SYqCZuDqM=)
2: 62B575B8104C11ED8CE56267C4F9AE02.roa (hash: ipAHoMEeSi68f+rJDCwmxc6LIwQCY1InwnKCCeoYyk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:34:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187364, serialNumber=C47D15641DA3B14C74E5CB29BCC04881230AD14E
Validity
Not Before: Dec 19 00:34:25 2025 GMT
Not After : Dec 26 00:34:25 2025 GMT
Subject: CN=69449d91-5964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:bb:20:71:a0:34:0b:66:0a:a4:95:72:87:
d8:12:b3:00:ba:1e:ee:24:23:ba:f9:a6:71:50:c2:
b8:11:35:8b:d8:bb:c1:36:40:12:49:21:1c:b4:ac:
98:a3:06:7c:dd:bc:8a:20:4a:a1:38:6d:c4:8a:f6:
a8:a9:ee:20:ca:a7:2e:3c:12:ab:35:db:7c:31:7d:
84:f2:04:cc:d3:c7:22:f0:fa:27:25:56:4c:7a:3d:
3f:bf:64:58:ad:88:23:c9:46:52:ee:45:b2:b6:ee:
6a:5a:37:f9:3d:52:9c:41:f6:3c:ba:ef:97:c9:d1:
7e:4d:76:e3:98:11:a3:9a:47:45:8f:44:fb:6e:b4:
2c:1d:98:d5:20:64:6f:40:d1:e8:36:8f:0d:9a:bc:
5e:e4:34:9c:b8:98:97:a6:f8:44:6c:26:aa:35:3c:
57:2e:67:61:81:66:74:0b:16:8d:e9:e9:55:55:fc:
b4:47:60:6e:e7:7e:5b:09:db:13:54:a9:1c:a0:3f:
0b:50:d0:5a:b1:9e:f5:3c:6b:23:e8:38:01:d9:a8:
91:72:65:4f:48:53:7c:7e:7d:8c:14:4e:7c:c8:7a:
5f:0b:a5:43:a6:eb:4e:52:87:11:5d:5e:ba:07:66:
e9:96:ce:f5:c3:16:df:a3:43:fc:2a:aa:11:3e:88:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:77:D3:BD:E2:67:9F:06:5E:C9:67:E3:C7:47:D4:63:D5:F7:83:6E
X509v3 Authority Key Identifier:
keyid:C4:7D:15:64:1D:A3:B1:4C:74:E5:CB:29:BC:C0:48:81:23:0A:D1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xH0VZB2jsUx05cspvMBIgSMK0U4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187364/E9A4EA70104911ED8EF0F762C4F9AE02/xH0VZB2jsUx05cspvMBIgSMK0U4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a6:19:57:ac:cf:8b:ce:6f:cb:2f:b1:78:4a:d5:44:46:85:
ce:98:c6:2b:0e:49:0b:e6:e9:ea:5c:e1:cf:46:da:69:71:7f:
61:a0:cc:82:c3:c5:34:12:14:9e:cd:c1:db:94:0b:56:94:36:
cc:ae:3f:aa:b8:2e:be:d1:62:97:8f:b3:a6:a6:89:e7:d3:6e:
31:ef:5a:28:c9:8b:04:b8:79:7f:e1:79:f9:26:f7:3d:8f:10:
8d:4a:0f:4d:65:97:6d:72:c7:96:8a:38:bd:0e:69:2e:65:3a:
08:0e:56:5e:1b:3e:83:e9:fe:b1:3e:96:7a:af:b3:2b:ef:25:
a8:7c:48:17:6b:50:90:ec:02:54:28:2a:ce:4f:02:7f:74:ff:
8d:e0:96:19:9f:a4:31:c0:15:2a:e3:5e:0c:72:4a:37:e2:e6:
d9:f3:f0:9e:f6:88:7f:c8:8d:08:03:5e:79:1e:2c:3f:fe:dc:
33:57:c4:9a:ec:25:d4:41:1f:6f:e6:55:ff:f3:80:c6:8f:ea:
4c:76:fa:7b:e3:d1:4f:74:f0:28:4c:1d:b1:de:70:f2:b7:2a:
b5:f9:ee:4a:0e:a3:4c:f2:6d:2c:92:51:13:c3:6a:31:32:7f:
12:2e:d4:82:48:06:60:d7:e1:78:95:d3:fd:6e:1a:27:b3:8c:
f4:c1:ba:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:53:32 2025 by rpki-client