This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
File: T2c1YxYAI2yAWYoeMyE7vWgezlc.mft (raw, json)
Hash identifier: mfPNuPidUK2L4KGK8wHQmXd+Tv0tIcL3zeb6xb0MHJ0=
Subject key identifier: 1D:BF:2E:8B:44:65:6D:D3:08:08:35:E6:B1:6B:86:36:C9:1B:FE:EF
Authority key identifier: 4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
Certificate issuer: /CN=A9194CBD/serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Certificate serial: 0199
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
Manifest number: 0196
Signing time: Fri 19 Dec 2025 02:37:09 +0000
Manifest this update: Fri 19 Dec 2025 02:37:08 +0000
Manifest next update: Fri 26 Dec 2025 02:37:08 +0000
Files and hashes: 1: T2c1YxYAI2yAWYoeMyE7vWgezlc.crl (hash: BVVqtemlPcGvhKpmDuUMeWsR8O+PzYdatBqSvp9Zo+g=)
2: 32357EA676C611EEA45B7909C4F9AE02.roa (hash: 7rc08NoUx6luLOLc4SLZl6pXq3BAAEvf8G5/Y6oZSx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194CBD, serialNumber=4F6735631600236C80598A1E33213BBD681ECE57
Validity
Not Before: Dec 19 02:37:08 2025 GMT
Not After : Dec 26 02:37:08 2025 GMT
Subject: CN=6944ba54-2351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:5a:bf:8c:46:73:69:94:ea:b0:88:c7:91:
01:40:cd:29:db:a5:6a:7c:ef:4b:0d:3d:3d:4f:6c:
df:36:17:19:5f:aa:cb:a0:04:65:8e:64:59:80:62:
39:fd:25:0f:98:7a:c6:cf:d4:3b:5b:da:29:cc:da:
81:f6:e4:71:cd:52:65:8e:d1:42:d1:46:39:d6:6b:
1b:a2:28:1d:e9:ea:1b:87:6a:dd:50:43:b0:5f:5b:
a3:73:2e:f4:54:09:07:12:7a:14:2d:e6:9c:5a:f4:
57:79:71:2d:b3:a7:1a:45:30:25:d9:75:42:fe:4c:
61:5c:69:a4:e3:0a:c0:cc:6e:28:9e:1e:ba:e3:ef:
e7:a8:47:0c:71:54:50:2d:dd:d5:72:78:f7:a1:58:
29:89:92:e9:80:34:4a:1d:16:82:f9:7d:b1:e7:54:
be:c7:ad:3f:72:38:7b:93:a7:ce:44:2a:d9:c6:d6:
7f:f1:e9:67:00:37:e3:50:b5:e6:42:8a:67:c0:fd:
66:5f:ab:16:85:1b:78:97:55:1f:c9:65:a6:f7:a3:
b8:a4:a4:6b:4f:8b:9f:9c:53:8e:27:ea:66:3a:a9:
3f:1b:06:2d:e1:04:f5:2e:53:80:9c:04:87:b8:79:
aa:20:a2:b1:63:54:46:26:42:93:70:e1:2d:21:f4:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BF:2E:8B:44:65:6D:D3:08:08:35:E6:B1:6B:86:36:C9:1B:FE:EF
X509v3 Authority Key Identifier:
keyid:4F:67:35:63:16:00:23:6C:80:59:8A:1E:33:21:3B:BD:68:1E:CE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T2c1YxYAI2yAWYoeMyE7vWgezlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194CBD/580BE3AE6E2411EE91D88037C4F9AE02/T2c1YxYAI2yAWYoeMyE7vWgezlc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:3a:9b:45:82:c4:6b:26:2d:3f:fd:9c:e9:e0:30:a4:a8:04:
5d:06:de:29:05:1f:59:2c:20:d6:c2:65:6a:ac:72:31:3c:74:
88:1e:ba:1f:c6:64:ad:91:7e:a7:de:35:7b:75:d3:9c:d4:65:
e0:22:cb:2a:d7:0d:77:47:17:72:8e:48:15:14:cb:87:a4:3c:
15:a3:a9:b1:75:9f:d8:47:a3:15:a8:ff:1d:38:0c:0a:20:21:
ce:d8:09:f7:34:2e:5b:0c:46:5c:b2:1f:45:a6:ec:26:f3:73:
4b:32:e1:3e:ca:48:81:87:c3:38:76:cb:36:58:fb:a0:4b:6d:
37:56:21:65:28:21:b8:15:95:ba:82:8d:35:8d:a6:ff:e0:e9:
26:5b:57:2b:df:22:8d:21:9c:c6:cc:fe:aa:2d:26:ed:31:f4:
f1:f1:c2:75:1e:8a:0e:c2:a1:fa:12:d0:c1:26:bd:dd:77:38:
42:ef:f2:f3:fc:57:b1:88:bf:07:0f:b0:1d:11:5a:95:cc:9d:
53:b3:24:62:57:f9:ec:7a:c0:63:84:00:c9:21:75:30:2f:7f:
fe:48:94:a3:07:c0:8e:43:14:a3:d8:06:c3:12:ba:40:27:0d:
51:43:68:89:60:e4:44:9d:47:5c:76:b0:d8:85:6e:c2:56:16:
fe:99:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:33 2025 by rpki-client