This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
File: s-AwGXTWpAg9ufSdWtbloVd5KgY.mft (raw, json)
Hash identifier: GqAK+R8bn/Yj4TqNj2afM6LVDBrzYkjzgMFwEGj8RCs=
Subject key identifier: 3D:FC:2D:8E:CC:DC:8F:97:9C:85:8F:57:B0:95:0D:C5:D7:B2:3F:EE
Authority key identifier: B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06
Certificate issuer: /CN=A9116B43/serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06
Certificate serial: 06B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
Manifest number: 06B4
Signing time: Sat 06 Dec 2025 14:45:33 +0000
Manifest this update: Sat 06 Dec 2025 14:45:33 +0000
Manifest next update: Sat 13 Dec 2025 14:45:33 +0000
Files and hashes: 1: s-AwGXTWpAg9ufSdWtbloVd5KgY.crl (hash: cDLYnwzEc5aet5lxoE7pEOJ5aRgO7frwuklx8DV7axk=)
2: 3A77AE12CB9C11EC9230F70BC4F9AE02.roa (hash: TwjuoGTydiIvsI8500O496Q/mOvNfgRtaZ3KwMAE5xE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl
rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116B43, serialNumber=B3E0301974D6A4083DB9F49D5AD6E5A157792A06
Validity
Not Before: Dec 6 14:45:33 2025 GMT
Not After : Dec 13 14:45:33 2025 GMT
Subject: CN=6934418d-4dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:dc:64:6f:ab:cc:c2:73:b1:4e:ee:48:42:
7b:87:b5:bb:19:2e:5a:a2:3a:c5:bc:89:7d:73:e5:
00:34:49:12:cb:24:4d:40:b8:d0:3b:ca:b0:c8:43:
8a:e1:57:53:b1:07:eb:77:9f:36:b6:82:1f:42:29:
43:96:f9:d1:24:03:3d:8f:a2:95:69:2d:e7:4c:5c:
4d:cc:53:b7:31:5e:65:0b:e2:5c:a7:25:a8:3e:c2:
09:eb:40:c2:51:8a:8e:40:16:f7:1d:36:8c:32:46:
ab:44:41:22:f6:17:42:97:b7:35:95:3f:19:82:f0:
be:1b:6e:c2:b0:22:25:0a:c1:17:89:1c:22:a2:c1:
1e:5d:63:8f:04:0c:38:ce:33:ee:43:77:43:86:ba:
88:7d:1e:c6:9e:54:2a:f2:16:d1:a5:cb:2e:c6:71:
58:93:df:32:98:3f:71:53:e7:72:da:cd:29:e2:bd:
16:e1:06:95:30:88:45:9f:b0:f7:1e:3b:27:74:18:
38:6a:b7:14:79:01:07:7b:c1:8f:65:f4:7d:86:05:
7c:28:8f:89:8c:3c:a3:ea:4d:fc:16:de:31:05:48:
6f:62:37:c9:1e:fd:d9:5b:fa:ef:4d:c3:83:e9:01:
02:fc:fc:8a:86:e9:22:e0:c7:4e:87:38:1a:2a:45:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FC:2D:8E:CC:DC:8F:97:9C:85:8F:57:B0:95:0D:C5:D7:B2:3F:EE
X509v3 Authority Key Identifier:
keyid:B3:E0:30:19:74:D6:A4:08:3D:B9:F4:9D:5A:D6:E5:A1:57:79:2A:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-AwGXTWpAg9ufSdWtbloVd5KgY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B43/59421A4E8D7C11EB8D8BD60BC4F9AE02/s-AwGXTWpAg9ufSdWtbloVd5KgY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:7d:93:a4:a9:2e:d5:5e:4a:4f:fc:c6:43:a2:1c:44:16:07:
99:fd:f9:b1:63:1d:75:f4:80:17:41:2f:4a:58:47:9e:31:58:
43:1a:c2:b1:56:e9:13:0d:5f:51:c7:6a:ea:1d:bf:4e:d9:fe:
b8:c4:0c:dd:b5:75:cf:c3:33:99:3b:c8:83:c3:22:8e:56:81:
2a:84:5a:e0:7d:82:18:62:dc:36:3d:89:9b:78:11:83:f3:7e:
5b:a2:93:ba:41:7c:f2:6e:ce:63:70:aa:0a:fa:a2:7b:d6:61:
3b:84:ff:22:67:20:79:9a:c6:08:88:c9:20:eb:70:18:b1:37:
5c:56:e3:be:e0:c6:9b:b9:0d:07:9c:bd:49:01:9e:b5:a2:3d:
38:13:bb:b3:91:c0:5c:b6:94:f8:cc:8b:26:df:67:f7:43:67:
10:db:14:c7:2d:61:73:f8:11:b5:74:83:44:99:7d:bc:96:38:
97:ad:c9:9d:8d:08:f4:a4:c2:04:50:99:70:b2:cf:54:4a:52:
61:f2:14:74:ce:1d:fe:cf:10:17:22:69:f2:10:3e:c0:84:99:
69:44:e2:39:47:d4:b6:83:ba:3e:e7:0a:0f:6b:db:81:74:5b:
20:98:91:9d:92:a7:f5:be:a9:4f:d9:2b:9f:04:3b:30:25:2c:
24:a5:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:18:27 2025 by rpki-client