This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
File: FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft (raw, json)
Hash identifier: Ajdi3xJjFTvTOvJu/ltzXagiOxPI1QN20nGjWkQIC6k=
Subject key identifier: 05:3B:64:CB:25:F5:FD:91:57:2E:0C:50:FB:99:26:BC:86:17:AB:E7
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
Manifest number: 012B
Signing time: Sat 27 Dec 2025 03:39:56 +0000
Manifest this update: Sat 27 Dec 2025 03:39:56 +0000
Manifest next update: Sat 03 Jan 2026 03:39:56 +0000
Files and hashes: 1: FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl (hash: /1dACNZ91tUu0Q7rkZTX/txLsQW1dKhS6kstgwInS40=)
2: 1501E24625F511EF8F342F3EC4F9AE02.roa (hash: nyb0dAzbvJzklMfthLLqpt+z0+HXJ9fgrE8gdxbb/So=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Validity
Not Before: Dec 27 03:39:56 2025 GMT
Not After : Jan 3 03:39:56 2026 GMT
Subject: CN=694f550c-eb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:92:98:d9:80:2e:36:1e:21:d3:e8:a9:51:
d8:05:a1:6b:17:9b:f8:7e:43:75:0f:0f:09:10:b9:
19:cd:40:36:3e:b9:83:29:35:ec:b6:c9:ad:ca:b6:
a7:8d:67:d9:9c:cf:24:ce:ba:d1:99:be:57:13:ea:
38:41:6d:26:3f:8d:68:a4:f7:f6:61:67:74:73:b8:
31:6e:56:59:ac:b1:a1:fb:1a:e6:fb:c0:1f:bd:e8:
30:40:a9:12:5f:0d:34:a3:fc:99:dc:aa:b7:fa:03:
ff:74:f8:aa:76:53:b4:35:29:43:25:f1:45:58:c0:
a1:38:3a:8c:40:70:f0:37:de:60:33:08:52:ae:05:
5e:64:33:27:1f:ed:10:ef:6e:33:96:ec:8f:7a:1c:
2b:41:4b:df:69:1f:7b:b3:84:b6:73:75:21:62:28:
5e:94:e5:fc:56:11:0e:29:d7:1e:e2:b4:b4:3f:e6:
b1:bb:69:45:52:71:cb:6c:b8:26:2f:d3:f9:5c:c1:
80:93:70:99:45:64:a8:0f:71:70:88:05:72:cc:0e:
dd:5c:4a:e6:e7:51:f7:3b:09:97:e1:3c:5e:b6:e4:
9c:01:b6:3e:67:01:bf:91:c2:96:82:cc:57:4a:34:
44:fb:a5:8b:8f:e1:3c:14:86:d6:03:f1:3e:a7:ba:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3B:64:CB:25:F5:FD:91:57:2E:0C:50:FB:99:26:BC:86:17:AB:E7
X509v3 Authority Key Identifier:
keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d7:4b:07:e2:11:82:2c:6f:fe:fb:95:97:49:46:db:32:2b:
f1:63:6c:82:6c:2b:1e:bc:ec:a0:75:ed:a9:91:52:5f:1f:de:
68:2c:46:4c:3f:a5:74:4e:34:5a:4f:86:08:55:19:3e:b1:c1:
b5:e0:ed:76:ed:87:c4:e8:b9:05:6c:06:f9:9d:a1:6d:0b:b6:
a1:f3:f2:d9:bc:bf:6f:77:3c:6f:ec:c0:a8:ae:5b:14:27:d4:
59:fd:05:0f:6a:29:e9:51:d3:9e:a5:e5:09:a6:22:ce:ae:aa:
e1:b3:52:c5:f1:39:bb:70:da:43:d0:7a:5d:c4:7e:2d:5c:dd:
18:8e:b0:61:f6:a8:68:d7:07:8f:39:8c:fd:08:8b:5c:fc:fe:
d4:b9:16:aa:21:b8:a7:56:39:51:18:4e:1e:30:32:59:f0:9c:
6c:a7:45:01:51:96:81:73:b8:49:31:fd:c6:31:83:a6:ef:3e:
47:92:c0:03:81:a7:13:3e:ff:f7:bd:f6:b9:2e:72:ce:c4:58:
f1:ed:21:ff:33:4a:19:7f:c1:a3:56:32:38:ca:2a:78:c4:cc:
94:74:87:fd:33:18:3f:f5:4d:9b:94:85:36:6a:59:07:78:ef:
10:30:04:57:1e:f6:29:24:f1:c9:7f:36:82:34:83:8a:9d:7c:
5d:46:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:46:39 2025 by rpki-client