This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File: ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier: Y/diYYd7+s83flX6MgyYG/e/MkQkEjdenTsIS8z8JRw=
Subject key identifier: 9F:D3:90:95:5B:43:A5:AE:05:81:84:64:9E:FD:80:16:C0:BA:31:DD
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial: 0857
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number: 0850
Signing time: Sat 06 Dec 2025 19:50:53 +0000
Manifest this update: Sat 06 Dec 2025 19:50:52 +0000
Manifest next update: Sat 13 Dec 2025 19:50:52 +0000
Files and hashes: 1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: LeXTObYEpGRR/4nUCvNRRGoNeGd0fjGpQtotMomGfPA=)
2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Validity
Not Before: Dec 6 19:50:52 2025 GMT
Not After : Dec 13 19:50:52 2025 GMT
Subject: CN=6934891d-2796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:14:2c:28:8a:09:98:f8:cb:b5:08:d1:0f:8d:
49:a5:d3:22:01:92:4a:8b:e9:2d:7d:41:2e:65:1f:
89:a6:6a:f4:16:77:19:03:9c:e8:3b:d9:75:c5:a8:
10:f9:1b:f7:6a:b0:79:3b:d3:e8:75:e6:94:48:b5:
88:72:52:25:7c:b1:d2:c8:85:2d:6c:a4:6c:00:70:
f8:65:3d:63:b9:9f:77:2a:a0:1a:06:41:a9:c4:d2:
60:6f:ce:ba:c0:2c:a1:1a:37:c5:18:8a:22:a6:34:
ab:d4:09:7d:a8:ee:95:c1:12:05:24:de:86:5f:73:
0d:f9:2a:59:4a:e7:80:25:20:f8:fe:39:05:87:55:
f2:cf:3d:46:b1:9c:13:65:b0:24:6f:2f:95:b3:0e:
35:3b:41:8b:1c:67:fc:1e:7c:23:e4:c3:97:ee:f1:
f9:6b:51:78:db:77:93:c7:69:b7:46:24:06:57:ad:
d3:c8:f1:02:b1:57:8a:21:ca:b0:37:02:43:5f:5d:
e2:72:c1:31:74:9c:11:93:90:1a:3c:b7:49:a0:d8:
3b:d2:f2:99:1f:0a:6e:81:0d:b2:98:f5:ae:9f:93:
b7:6d:c2:09:09:5b:fc:9e:2c:4f:52:56:ae:63:9a:
ff:20:34:b9:13:9f:5d:68:8e:3c:80:4c:bf:46:64:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:90:95:5B:43:A5:AE:05:81:84:64:9E:FD:80:16:C0:BA:31:DD
X509v3 Authority Key Identifier:
keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c7:ca:76:4c:a3:49:83:57:75:de:f9:0b:30:6a:59:b8:f3:
c4:f8:5b:90:75:41:92:70:e4:3d:57:a5:a1:20:a1:53:a9:42:
d2:4b:e8:74:f5:66:95:9b:8d:c3:91:a4:f3:47:db:e6:fe:64:
a4:c7:6e:0c:10:c0:44:7c:67:fb:8a:68:71:fb:2a:80:28:8c:
08:b3:44:4c:1f:c8:82:f3:dc:e5:64:2d:aa:a7:1e:e5:3a:c9:
a8:cd:aa:4f:db:4d:90:36:8b:56:a6:9c:90:07:fe:32:30:68:
fa:37:ef:c7:13:34:de:ed:0d:0d:97:51:a0:f2:03:b6:de:d8:
db:f6:78:3d:69:24:6d:6a:1c:9e:f2:4a:c9:98:ff:fd:43:cd:
d4:f4:7f:30:59:d6:cc:e0:57:3f:d1:cb:bc:0e:67:58:d8:cc:
cb:4f:76:4a:b2:27:3e:9b:5d:db:4e:aa:a0:49:7f:b2:ec:7e:
fe:31:4a:cf:f3:87:98:23:1a:41:6e:ab:b9:6a:5f:ab:f4:d9:
21:35:19:c3:7c:b3:4d:ed:d3:74:cb:73:54:c0:1e:64:c4:9c:
e2:b6:9c:49:23:72:57:4b:01:d6:f7:82:4f:d0:63:53:f3:90:
50:bc:b5:ca:73:a4:b6:9f:28:05:90:c2:99:66:e1:c1:36:69:
95:13:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:37:34 2025 by rpki-client