This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
File: ips7kjmTluj8a4YwntVzMMlOEX0.mft (raw, json)
Hash identifier: Lco5vBPSgBS8B2Sqz4tnPSYbZmVB1x6UtpnbgGGXrgw=
Subject key identifier: CB:05:47:19:B6:94:05:E5:1C:CD:C4:67:AA:94:CF:CF:9A:C0:75:23
Authority key identifier: 8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
Certificate issuer: /CN=A919A3CA/serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Certificate serial: 09F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
Manifest number: 09EB
Signing time: Sat 20 Dec 2025 19:22:30 +0000
Manifest this update: Sat 20 Dec 2025 19:22:29 +0000
Manifest next update: Sat 27 Dec 2025 19:22:29 +0000
Files and hashes: 1: ips7kjmTluj8a4YwntVzMMlOEX0.crl (hash: f0AtplIB3iZ0QhrIHOYO17k/K0G3t/U/TRYw/iX9l9s=)
2: B972C58C8FA611EAB095C928C4F9AE02.roa (hash: pd0z6Py0ljyQXcBSw2555Qfaeo+rQ0qMyZ2LLvuE2Pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:22:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548 (0x9f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A3CA, serialNumber=8A9B3B92399396E8FC6B86309ED57330C94E117D
Validity
Not Before: Dec 20 19:22:29 2025 GMT
Not After : Dec 27 19:22:29 2025 GMT
Subject: CN=6946f776-e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:ba:ea:b4:08:26:41:61:9d:bf:f8:e3:1c:
2e:8d:77:e2:4b:8e:c2:1a:f1:50:02:bc:ea:1a:89:
3b:55:31:9c:ad:a4:5e:5f:50:6c:2d:1e:49:a8:55:
fd:39:0a:2c:cb:ee:7c:2c:cc:76:ad:c5:72:f4:61:
a9:a7:d4:89:01:5e:ad:b1:40:01:d9:ce:3d:7f:02:
45:70:33:63:6f:db:4a:3b:9d:c2:b4:9b:5e:b2:78:
d9:f6:90:f0:a8:2d:cf:78:ed:81:68:8c:83:6b:d9:
99:8a:26:1c:e6:6e:57:df:99:cb:7b:9b:df:ae:8d:
04:69:ef:86:83:89:9c:a7:4c:2e:67:d6:45:55:2b:
46:a6:3c:d2:0f:d4:c4:7a:52:9a:e9:a8:b8:73:55:
a9:c4:92:02:16:36:4f:36:55:b9:bf:c5:1f:25:57:
94:3c:4a:06:f4:7b:27:73:c5:86:6b:67:95:4b:68:
25:f8:27:b4:3f:07:c0:76:c3:04:c3:9d:29:6a:23:
99:6b:b9:a4:35:95:42:9e:89:ac:0b:46:8e:81:4e:
13:89:37:99:0e:e4:f5:f1:f1:1b:70:f3:aa:38:db:
0e:70:61:1c:e2:6b:e1:c7:3e:c6:a7:52:6a:fd:1b:
88:69:24:1b:f6:12:3a:6d:7a:ec:98:4a:f4:07:06:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:47:19:B6:94:05:E5:1C:CD:C4:67:AA:94:CF:CF:9A:C0:75:23
X509v3 Authority Key Identifier:
keyid:8A:9B:3B:92:39:93:96:E8:FC:6B:86:30:9E:D5:73:30:C9:4E:11:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ips7kjmTluj8a4YwntVzMMlOEX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3CA/57D238028FA211EA8EC06E1CC4F9AE02/ips7kjmTluj8a4YwntVzMMlOEX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:ea:8d:b6:40:d6:1e:a2:c7:d6:96:f3:f3:1a:de:c9:ac:
32:0a:51:45:c5:b5:6b:64:4a:db:aa:08:18:a9:4b:ed:1a:9e:
2d:2d:16:fc:a7:f4:c6:04:02:26:33:4e:f9:8d:ae:2f:1e:01:
9d:65:46:52:e7:17:5b:d2:5b:8c:eb:01:03:5b:44:31:07:85:
64:5a:46:52:f1:a0:8b:45:28:92:35:0f:98:ea:ba:30:3f:03:
ed:ac:4e:83:8d:19:e8:fd:0d:84:92:04:66:57:e7:de:9c:22:
c2:1e:2a:62:2c:82:46:2c:59:9f:7c:5d:53:35:fc:63:be:83:
b8:9e:64:30:e3:95:f3:6d:7b:11:d2:79:18:2a:d9:62:f4:8f:
09:cd:f4:da:86:36:dc:29:8a:4a:9d:29:95:e6:42:90:41:ef:
54:7d:f7:c7:a0:a8:af:4d:4f:8e:20:05:0a:ba:30:c9:15:64:
6d:38:06:83:b5:01:37:61:86:94:ba:16:aa:4f:30:27:07:35:
67:e0:80:30:a7:b0:26:4a:ff:c3:d0:eb:bd:2a:94:d0:7d:b2:
60:ad:eb:b7:16:a6:b6:87:64:81:a2:0e:db:e9:52:d9:09:a8:
86:2f:88:e3:59:a0:51:0a:1a:7c:28:44:f9:df:f8:14:ad:5b:
ea:4f:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:00:11 2025 by rpki-client