This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json)
Hash identifier: Y0yqoRi8QR66bfKhqQY5x9TPp2/KOdZuUFxSyczfjFU=
Subject key identifier: B8:07:5D:47:BD:6C:C2:0F:7D:7B:53:40:04:ED:6B:BC:3E:B5:0C:EA
Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
Manifest number: 049E
Signing time: Thu 04 Dec 2025 22:31:32 +0000
Manifest this update: Thu 04 Dec 2025 22:31:31 +0000
Manifest next update: Thu 11 Dec 2025 22:31:31 +0000
Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: RZg45mL+j9yD1w7LUBX60Deg9e79tk6wJhPzNAhffJ4=)
2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 252kB+fX+BBhzn4gsCNSBIXgmIL37+s/mdPS5IK/AQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C
Validity
Not Before: Dec 4 22:31:31 2025 GMT
Not After : Dec 11 22:31:31 2025 GMT
Subject: CN=69320bc4-d1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:3f:f1:13:01:3e:bd:f5:74:0b:3e:22:a6:
26:ff:e3:db:9d:35:bb:ed:4b:31:f0:35:cd:20:a5:
2d:94:ad:c0:11:fd:f4:46:ed:1c:92:5e:26:e3:15:
f6:1b:c8:96:07:45:f7:03:f1:3f:4e:65:fd:ed:09:
f6:fc:e4:2c:83:12:3b:e4:f9:d0:41:0b:9b:df:a6:
bb:d3:ea:22:45:bc:32:e5:b8:fc:fc:be:42:40:04:
d9:79:a1:83:fd:03:0e:e3:8c:bd:cc:f6:5e:8d:85:
ec:d8:37:b7:f7:7b:41:22:75:4c:ad:1d:dd:31:21:
e1:18:13:6d:23:b1:ad:89:36:5a:da:cf:1a:b7:14:
b3:03:75:4a:66:ee:8a:76:69:25:7f:c7:5a:34:15:
80:16:08:64:a8:7e:5e:cf:08:d2:a9:f5:40:ed:88:
58:81:2c:18:00:08:c1:d4:8b:34:b4:b7:8c:43:17:
0c:47:bb:40:64:ab:50:1f:a0:fb:ce:d1:56:57:65:
ca:43:29:26:84:ce:8d:c7:b7:8e:1d:2e:3a:1a:8f:
3c:4c:02:ef:27:e3:3c:15:c6:b0:8b:7b:c2:1e:06:
15:62:af:53:8c:2d:c1:10:b6:bd:a0:a6:87:76:fb:
ce:76:72:26:c3:15:bf:69:67:7f:11:c7:9b:ec:a8:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:07:5D:47:BD:6C:C2:0F:7D:7B:53:40:04:ED:6B:BC:3E:B5:0C:EA
X509v3 Authority Key Identifier:
keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:6c:20:fe:66:8e:7c:de:e7:dc:f5:b1:85:44:50:bc:6a:51:
ef:87:d3:30:0a:ec:1a:75:d9:d6:f0:e6:36:c4:96:cb:b2:93:
ff:8a:ce:f4:94:8a:11:8a:d0:50:ca:5a:c7:d9:d1:34:95:8d:
d4:2c:50:23:b7:3f:cf:c8:dd:05:8c:26:33:39:44:71:93:1f:
c6:ef:9a:40:5c:cd:f9:95:71:f6:92:bf:1e:68:c5:1e:28:07:
22:46:d9:ff:24:ae:c0:c5:e2:ce:35:dc:c8:ee:ac:4b:4c:45:
42:c8:7a:5b:e6:7e:6f:10:f9:2a:c4:67:ad:25:93:f7:40:50:
a4:35:39:c9:f9:9a:d4:e9:d5:41:ab:1a:39:04:4c:4c:fb:79:
ff:aa:10:1d:8d:0d:80:6c:57:db:2d:cd:2e:1c:23:2f:8b:2e:
27:62:34:4a:7b:22:88:3f:6c:68:80:f3:6a:f9:4e:b7:cd:5e:
ed:a6:5c:eb:9c:d9:f3:36:8d:6a:19:c4:de:6f:ac:8a:f0:96:
91:ab:ad:4a:d1:9c:99:1d:25:50:cf:63:a5:63:ce:f6:19:b1:
5f:1e:b9:34:78:a2:28:c6:1a:ad:08:1f:e0:4a:9d:04:23:32:
5e:40:c1:bd:77:c0:ed:fa:7e:06:3e:7b:9d:a4:ff:ee:33:22:
c4:5c:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:49 2025 by rpki-client