This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
File: K0TIiRquK4of20jr9KV-mJrrc2M.mft (raw, json)
Hash identifier: DsiPtW+/7Mye5ze9QejicoMEd4+XuuCgmRcX8toOAQY=
Subject key identifier: 06:0D:BF:CB:B4:CB:83:09:89:67:43:9C:8E:4C:6F:C0:E7:37:C3:70
Authority key identifier: 2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
Certificate issuer: /CN=A918BBBA/serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Certificate serial: 04D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
Manifest number: 04D2
Signing time: Tue 30 Dec 2025 22:58:44 +0000
Manifest this update: Tue 30 Dec 2025 22:58:44 +0000
Manifest next update: Tue 06 Jan 2026 22:58:44 +0000
Files and hashes: 1: K0TIiRquK4of20jr9KV-mJrrc2M.crl (hash: Ym68do63Ud6uI0dxgATv2ZslCBIlEqjoWo9jeOR0V3c=)
2: 0CD36EF4500B11EC9430721DC4F9AE02.roa (hash: 8h3Fcn9zCfGj652v4nJxVKS7wYl2fmSD4heI9aLrZzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 22:58:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BBBA, serialNumber=2B44C8891AAE2B8A1FDB48EBF4A57E989AEB7363
Validity
Not Before: Dec 30 22:58:44 2025 GMT
Not After : Jan 6 22:58:44 2026 GMT
Subject: CN=69545924-594b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:63:33:91:72:5a:33:4e:f3:45:7f:07:0f:
d5:64:b9:62:a4:3a:b7:67:cd:5c:ce:89:98:f4:6b:
99:e2:ea:e4:5b:1a:7d:cf:5c:02:a3:00:f6:6e:c0:
02:2f:c4:c3:cf:b4:7b:88:4c:75:59:17:cd:80:1f:
68:dc:79:14:80:98:18:dd:57:6b:67:dd:5c:d2:b1:
29:4a:ba:59:6f:45:4f:7f:53:87:8c:f1:27:c5:a9:
50:6c:eb:e4:1e:57:b1:38:32:c0:1d:73:61:34:27:
18:b7:8e:3a:94:60:a1:94:91:38:5c:49:00:e9:d8:
f6:f6:e6:69:8e:07:5c:95:8c:af:e0:b8:b5:94:2d:
62:40:c5:fd:b8:c6:af:4c:5a:9b:33:65:f7:9c:4c:
a7:86:56:3f:a8:7f:ca:ef:6a:cc:30:29:73:46:59:
ff:e5:df:ab:62:d5:fa:f8:30:8b:99:55:ed:05:82:
92:a9:2b:f4:ed:ff:fa:ad:c7:2b:9b:98:05:87:1d:
c8:74:3c:e0:d5:80:af:9c:b5:c5:a0:34:15:d0:06:
f9:4c:ca:48:a2:56:9d:7e:35:03:fc:bb:45:0a:38:
25:64:3c:70:31:54:d8:40:1f:1b:be:45:a8:3c:20:
64:f9:88:ae:07:68:6a:9c:f3:f9:60:b9:62:d4:7e:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0D:BF:CB:B4:CB:83:09:89:67:43:9C:8E:4C:6F:C0:E7:37:C3:70
X509v3 Authority Key Identifier:
keyid:2B:44:C8:89:1A:AE:2B:8A:1F:DB:48:EB:F4:A5:7E:98:9A:EB:73:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0TIiRquK4of20jr9KV-mJrrc2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BBBA/F913C0BA4C4211EC96658A31C4F9AE02/K0TIiRquK4of20jr9KV-mJrrc2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:70:fb:cd:de:c9:ff:3c:ea:c4:da:ac:6e:1c:3e:4b:3a:79:
41:8d:20:77:00:16:47:52:64:f0:79:21:c8:65:45:d7:e8:5e:
ee:fc:5e:88:13:20:2f:d4:bd:78:ae:98:b0:bc:cd:6a:40:93:
d8:52:18:28:8a:6f:78:ab:6e:1b:57:3d:fe:0b:24:0e:75:e6:
fc:63:79:2a:e5:0e:b2:69:d1:15:a1:a0:55:0d:13:7f:3d:87:
45:d6:cc:12:11:2b:c5:f6:5d:29:d1:d2:7b:8f:9e:d3:18:ca:
71:ca:d3:db:f6:40:59:49:20:df:01:69:a9:64:11:c7:98:da:
fe:b9:02:5f:0d:97:4e:b5:53:82:ec:2e:fc:89:21:eb:39:e1:
bc:cd:71:1a:79:47:47:d6:b5:d6:27:b5:ce:f7:53:53:94:41:
b6:52:cd:67:34:78:d9:26:24:32:4b:9a:8d:33:a5:6d:f9:1b:
ab:03:cf:4f:5d:20:b8:6a:f2:b0:1f:e8:a1:e8:26:1b:ed:51:
72:af:d2:bd:93:f9:1f:72:29:80:17:28:b8:62:3c:15:f8:a5:
76:48:a1:a9:68:11:cf:08:88:54:3a:d0:05:92:c9:23:47:96:
a2:c9:27:fa:54:69:7d:2f:e0:f9:7f:c4:0f:1c:81:ba:4a:a2:
43:d4:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:21:15 2025 by rpki-client