This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
File: PXdT_euyLwk6cQIag9ZYZlXpJKA.mft (raw, json)
Hash identifier: aOUKvRHI30jbIVfvCwoPlBNVgW1EEy4Xh3LrvbQJ2Ec=
Subject key identifier: 10:37:59:FD:66:12:4B:A6:04:6B:41:22:29:22:7A:C0:16:D2:F6:80
Authority key identifier: 3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
Certificate issuer: /CN=A911D857/serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Certificate serial: 08F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
Manifest number: 08EB
Signing time: Sat 06 Dec 2025 19:32:15 +0000
Manifest this update: Sat 06 Dec 2025 19:32:15 +0000
Manifest next update: Sat 13 Dec 2025 19:32:15 +0000
Files and hashes: 1: PXdT_euyLwk6cQIag9ZYZlXpJKA.crl (hash: Ys0bkA8dW4GsogaUthDeF7HBnWYSzZwWXYWFIWu80mU=)
2: 162EA00C442411EB911D086BC4F9AE02.roa (hash: +enQgUid53gMaFPCBDOzsd0TE3j6ha7MQxAZKWnZpAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D857, serialNumber=3D7753FDEBB22F093A71021A83D6586655E924A0
Validity
Not Before: Dec 6 19:32:15 2025 GMT
Not After : Dec 13 19:32:15 2025 GMT
Subject: CN=693484bf-df51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:61:65:9f:a1:29:c8:9c:c3:dd:97:df:8b:
09:e7:f5:9d:c8:91:5c:7f:3e:24:d3:24:c0:1f:d7:
b8:87:9e:61:72:28:83:9a:04:01:c9:38:6b:94:ce:
44:8b:4b:8b:e5:2b:d9:cc:78:64:56:d8:ab:57:1f:
54:51:8d:65:a6:b0:5c:d5:da:43:af:c1:79:9d:5c:
d4:0e:c3:3c:cf:49:8e:e9:1c:d3:8c:59:5f:54:f5:
ad:52:94:36:bf:54:b6:ee:a9:89:d1:29:53:40:51:
42:5b:12:35:ac:47:8f:4c:8b:5c:e0:75:0e:bd:98:
c8:f9:98:ad:6d:6e:ca:66:15:2e:a2:a3:b8:d0:0a:
3d:d4:dd:53:9d:7f:b6:3d:07:23:f1:82:e2:f5:84:
df:35:21:8b:94:92:39:78:e8:de:a7:28:87:81:66:
bf:94:4a:d8:85:1b:6b:e1:47:ea:4b:05:c7:72:f2:
c9:52:88:b3:d1:0f:82:d7:7b:f3:02:10:9f:a8:d2:
82:11:1d:49:d6:ee:24:3c:65:c1:d6:ee:33:94:fe:
de:1b:7c:b5:ad:c2:02:62:bd:63:35:1a:b7:a6:be:
e8:8b:17:a3:51:ec:c4:77:63:15:84:33:6d:3c:23:
a9:0d:04:7a:f1:5b:c0:89:2d:74:90:f2:9c:8d:ec:
ba:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:59:FD:66:12:4B:A6:04:6B:41:22:29:22:7A:C0:16:D2:F6:80
X509v3 Authority Key Identifier:
keyid:3D:77:53:FD:EB:B2:2F:09:3A:71:02:1A:83:D6:58:66:55:E9:24:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXdT_euyLwk6cQIag9ZYZlXpJKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D857/5380EF6CBF7E11EAB6FA375FC4F9AE02/PXdT_euyLwk6cQIag9ZYZlXpJKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:a2:be:a9:02:39:4d:cb:4e:0c:dc:9e:d6:1e:22:6c:b4:12:
1c:fd:58:fb:64:38:81:16:9d:a1:47:36:26:cd:de:cb:21:51:
14:a3:f0:eb:77:b9:52:da:68:45:fa:25:35:73:f7:81:4c:b7:
71:d1:84:c0:13:09:16:a6:77:54:9a:3d:37:9b:a7:aa:07:6f:
69:48:82:95:e3:72:c1:ed:a6:d6:31:c3:94:ef:a6:56:13:eb:
17:9f:39:b5:71:3d:bc:31:26:c7:75:16:06:cb:5f:12:17:12:
40:06:af:14:4b:0d:bd:fc:e8:d4:c2:2b:03:70:db:2c:31:1a:
2a:90:29:17:46:6e:73:8d:45:88:39:3d:ee:85:63:c2:4f:05:
cc:7b:23:4d:bb:11:0a:0a:7d:a7:78:1c:73:c1:33:9e:7e:fa:
8b:27:f8:ce:68:5e:09:4f:20:5d:15:fd:ce:c2:f3:36:71:79:
06:25:ba:47:5f:bf:66:f5:05:47:a1:6b:9a:7b:57:4d:f7:e9:
48:d5:2b:33:3d:7b:1a:ae:f1:aa:df:4c:f5:4a:c2:27:63:dd:
eb:53:39:26:43:7f:9c:e3:95:db:49:35:d8:dd:19:77:a6:91:
93:5a:89:2e:9f:05:49:db:74:19:62:7b:3c:5c:57:2c:77:22:
9e:e1:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:48 2025 by rpki-client