This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json)
Hash identifier: CI/wT6M5Q9af5tvnN6CG0EPH6wxMEhgc8K3yX7FPPmI=
Subject key identifier: 94:A8:41:54:CA:64:3F:A2:9B:72:78:DB:EC:14:90:76:2E:15:D4:24
Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
Manifest number: FC
Signing time: Fri 19 Dec 2025 04:18:08 +0000
Manifest this update: Fri 19 Dec 2025 04:18:07 +0000
Manifest next update: Fri 26 Dec 2025 04:18:07 +0000
Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: FO3YTIQbhkl1/2dciW/k8uVUMwsIQQd9B7FNwRVYGxI=)
2: D93EF164ABF311F0BBF66516C4F9AE02.roa (hash: NGI5hrHduSRPEthUQK06fSfxELn6PeFYPGY/eePELJg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:18:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E
Validity
Not Before: Dec 19 04:18:07 2025 GMT
Not After : Dec 26 04:18:07 2025 GMT
Subject: CN=6944d200-b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:b9:76:3e:8b:4f:3e:86:6d:09:f4:13:29:
db:d4:7f:72:87:8b:d4:3b:4f:0e:8e:d3:22:04:3f:
87:c0:75:7b:9d:ce:73:2a:c1:33:47:8d:2b:02:4f:
66:ec:fa:8f:04:2b:f7:15:ba:e5:06:22:b6:ee:86:
8d:9a:05:73:20:86:1f:6b:2e:db:77:34:88:9c:ff:
d2:f1:77:a2:42:85:d6:bf:5b:b0:cd:41:08:34:32:
6c:13:14:b5:69:b9:db:37:4d:c1:d8:c0:d5:58:72:
5e:dc:eb:12:39:16:51:f7:79:c8:f8:3a:f8:fb:53:
ed:c3:a9:f7:d5:62:a2:8a:78:01:1f:85:31:04:ff:
db:eb:b7:ef:87:cf:95:53:12:b5:85:6a:00:9f:cf:
99:56:ed:a4:3e:16:43:6d:29:20:87:5a:7a:1b:dd:
f2:11:26:43:9c:bf:6d:c6:23:c9:4b:c2:93:09:b4:
6b:20:d4:59:b3:5f:96:a7:77:02:dd:29:a5:c8:94:
ca:eb:ec:d0:7b:4f:44:a4:6b:bd:e3:f8:a9:d3:a4:
7e:81:2f:af:fc:8a:07:42:f3:b1:10:4f:ff:2d:e6:
39:ce:62:dd:a3:08:3e:b9:b5:a4:f5:a2:e7:b6:1d:
fd:32:6e:2b:6e:9c:24:ee:8c:6b:32:95:44:36:44:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:41:54:CA:64:3F:A2:9B:72:78:DB:EC:14:90:76:2E:15:D4:24
X509v3 Authority Key Identifier:
keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:cf:0e:a4:2f:c1:a8:00:d3:0b:3b:59:d0:0c:36:67:02:81:
85:9c:b4:68:5f:bb:b8:d9:a5:8a:34:36:d9:d1:5c:a8:04:5c:
9f:a2:5e:20:a3:6c:a7:c0:69:d9:e3:fd:59:22:a1:d1:a5:22:
aa:6a:32:a1:6a:c6:d8:ee:0a:b3:75:24:bd:43:27:9a:72:14:
0d:c9:88:22:ef:c3:ac:97:0a:66:1b:bf:5f:8c:12:cb:56:dd:
5c:4f:eb:62:06:84:9d:14:71:19:dc:aa:8c:68:82:5f:ec:65:
da:c9:d0:ca:54:96:34:f9:72:89:93:26:c7:53:79:55:f1:66:
b9:61:4b:b7:cb:e4:47:8e:e8:6e:39:e3:56:b6:58:e3:76:53:
40:54:88:d6:29:b1:1b:d6:b5:52:73:58:8f:67:c4:26:c8:8e:
00:e2:a9:81:61:c5:95:93:fd:bc:a5:fa:cb:05:da:4d:e3:4e:
02:21:9e:2c:41:56:57:ca:40:ec:71:9c:87:36:d2:6f:7f:ad:
81:50:8e:ef:e9:1a:a0:a5:74:9b:34:6a:be:43:2b:88:79:84:
77:40:7a:29:27:b8:8b:46:80:5e:48:16:5b:17:40:7c:32:87:
22:7d:3d:ba:01:95:73:3a:d2:c2:c8:4a:10:5a:00:2e:7f:96:
03:ed:59:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:52:37 2025 by rpki-client