This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json)
Hash identifier: w7m499vFvSlZxFQlI+8XcEB72zXCjbd9KAA/ESwEEm0=
Subject key identifier: 52:AA:42:E6:0D:FE:0D:EB:D1:AD:08:89:19:EC:E6:24:E2:74:AE:40
Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Certificate serial: 054A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
Manifest number: 0545
Signing time: Sat 20 Dec 2025 22:43:43 +0000
Manifest this update: Sat 20 Dec 2025 22:43:43 +0000
Manifest next update: Sat 27 Dec 2025 22:43:43 +0000
Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: 32aiU79QHmM3xURZNtbc0kg2zC3IdyxgfLQ8KB6FQTY=)
2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: VqWOdJpzHU4g7FfrJlbFpwfob9hyB+C2diH5Mhn8hxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1354 (0x54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849
Validity
Not Before: Dec 20 22:43:43 2025 GMT
Not After : Dec 27 22:43:43 2025 GMT
Subject: CN=6947269f-13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:c9:0c:c1:d0:ff:19:18:08:7e:4c:61:b9:
1c:8c:6b:99:11:fc:a4:f5:a4:60:95:c7:3b:b3:5c:
82:9e:30:03:ab:ca:38:5c:98:f1:a2:5a:89:a1:b1:
56:1d:00:ec:a8:dd:53:ca:57:cf:27:a8:1b:58:eb:
4b:ae:4e:b9:b9:33:5d:30:79:1a:85:0c:e2:61:0e:
62:c7:2c:78:bb:91:55:c1:fe:f6:02:14:6f:4e:c8:
fd:7d:c6:df:3e:c6:f4:60:2d:87:f7:40:1e:d7:f5:
10:84:c7:de:a5:cd:ad:66:a2:38:22:d2:64:c5:b4:
23:6f:77:b5:53:6f:60:5e:46:c6:43:3a:a9:84:05:
a1:7a:fd:bf:af:f7:1b:59:e9:c4:a6:17:96:3c:36:
bf:04:67:76:0c:97:d4:5e:91:6c:27:13:19:ab:80:
a3:d5:b6:41:6f:cf:af:f4:b4:25:58:30:42:5f:88:
e5:a9:c8:88:05:c5:74:2e:60:96:34:94:14:d3:62:
4a:fe:4b:38:a6:7c:b9:ad:08:72:1a:59:9f:a5:a2:
42:2f:b2:11:5c:31:d7:5b:01:9f:51:c3:23:ef:d1:
b0:82:7e:f3:42:f7:c5:ae:19:af:15:a4:a8:39:d5:
00:54:5f:4d:6b:b5:0d:84:59:fe:c4:0d:54:0d:a0:
2f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AA:42:E6:0D:FE:0D:EB:D1:AD:08:89:19:EC:E6:24:E2:74:AE:40
X509v3 Authority Key Identifier:
keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:0d:1a:cd:e9:36:7c:05:77:ac:58:77:24:8a:bf:10:65:c7:
73:b0:1e:c7:fa:2c:ff:20:37:7c:7e:c5:40:d9:0f:db:6e:4a:
26:cb:b7:fe:7e:cb:46:77:c6:91:a9:63:a1:b1:b3:75:b5:f4:
d1:16:63:c5:54:82:0c:68:e3:4c:db:9a:32:3c:14:d4:35:ea:
d8:54:ae:bb:49:e1:39:09:79:21:3e:62:0f:5e:ac:06:ec:42:
d9:ae:e7:93:ca:e8:cb:94:36:13:27:36:5f:45:06:6d:26:48:
61:12:3f:02:26:06:fe:a0:de:b3:54:20:11:d1:7e:6d:bd:3a:
2c:ab:25:e5:a7:9f:63:0e:94:a5:17:33:ea:09:c0:fc:50:06:
db:21:68:88:21:77:bf:90:d7:dc:3b:8e:6d:6c:43:fe:a4:36:
68:86:24:50:ae:22:a5:dc:c2:6b:16:68:52:a8:34:61:6f:9f:
cf:78:5d:ca:ad:b6:0b:7a:02:a6:a3:d7:ca:4e:95:d3:be:e7:
b1:21:5b:42:94:d2:7f:6a:48:9d:d5:0b:f5:11:ff:12:a9:16:
de:6a:f9:51:98:2a:c2:71:96:1b:56:57:12:1d:c5:8c:a4:ba:
da:12:1b:0d:59:12:15:df:35:06:f5:26:07:06:be:e2:d0:96:
e2:a4:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:21:16 2025 by rpki-client