This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json)
Hash identifier: YvsIrnODLiylfjxmBIm5kYQSrLyWTJ6p7N48auAFa3c=
Subject key identifier: 91:44:94:48:82:4D:52:3F:93:CA:8F:62:C3:2B:3E:60:95:F3:64:83
Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Certificate serial: 0B68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
Manifest number: 0B5B
Signing time: Thu 04 Dec 2025 18:33:04 +0000
Manifest this update: Thu 04 Dec 2025 18:33:04 +0000
Manifest next update: Thu 11 Dec 2025 18:33:04 +0000
Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: 2GNre4CngLotcVJGQj/kFCKBV1NndcEXc6iueGdhRKs=)
2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: zKy/yyxo1KuNb1lr1bEjLMk/9ZIle0kY/A3BTe9o8dE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27
Validity
Not Before: Dec 4 18:33:04 2025 GMT
Not After : Dec 11 18:33:04 2025 GMT
Subject: CN=6931d3e0-5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:43:4a:ef:dc:e2:4f:3e:9a:bd:01:e6:c9:6b:
c4:c4:ab:4e:6a:36:db:04:61:8d:0d:8f:1f:cc:0d:
9a:63:71:21:6f:56:ce:4d:df:69:1d:75:78:85:e7:
5e:cc:b6:c4:fe:4d:83:5f:cd:93:25:66:f1:9c:06:
66:34:c6:36:01:df:13:12:b6:df:6c:45:f2:3d:e4:
dd:c6:ef:a0:2b:94:47:eb:96:a2:8a:6e:fb:ca:35:
24:a5:aa:b7:1c:b5:67:2a:02:aa:b0:60:8b:0e:11:
f4:8d:1d:5b:65:f6:f8:07:50:37:b5:59:80:98:5c:
1a:df:3a:e0:98:b9:fd:d2:84:7e:7e:a8:c9:7f:12:
c9:02:5b:1c:92:23:9f:db:12:a3:4c:b3:b7:96:45:
5e:8b:05:6a:8a:a7:ec:de:61:af:f2:7d:b3:ed:2a:
16:ed:68:0c:9e:16:4a:32:00:b5:9f:5d:a5:90:d7:
6a:80:a5:49:15:d9:0b:12:d7:8e:5b:69:e4:31:94:
a8:4f:65:34:6f:8a:4b:24:f8:ce:ad:62:5d:be:cb:
3c:0b:fd:ad:91:20:39:cb:43:77:e0:64:8d:72:32:
89:4c:50:99:22:3f:c1:23:da:c8:2a:93:7a:b0:a6:
83:8f:2b:84:e8:9c:5e:54:85:06:b3:e5:0f:ab:b3:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:44:94:48:82:4D:52:3F:93:CA:8F:62:C3:2B:3E:60:95:F3:64:83
X509v3 Authority Key Identifier:
keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:4a:b7:d1:9b:48:b7:ea:26:06:3c:90:66:ad:a3:3f:10:b5:
a7:e3:2d:46:0f:22:d9:55:a6:48:a0:3c:ee:85:b3:87:be:66:
cd:49:eb:85:c0:55:48:df:10:70:30:66:f4:ba:9e:f0:70:c2:
eb:d1:a8:be:ba:ae:6f:c8:2b:47:3e:b3:9e:f5:c2:4a:4e:b9:
b1:f3:f8:54:98:4a:9f:5c:68:32:d6:cc:b0:fc:af:07:13:2f:
84:41:3d:5e:24:45:36:4d:d9:0c:90:c6:a3:54:9f:64:f3:96:
ed:cd:2b:db:9c:b1:29:83:f3:14:4f:84:74:9b:13:52:12:54:
76:b8:ad:5d:02:8c:f7:87:f5:b0:db:16:20:57:e3:d1:ca:8b:
54:ca:27:d9:ff:8f:50:3b:0c:89:64:6e:48:68:d4:ac:42:1a:
13:3f:13:51:a8:d1:7b:94:03:c6:bb:54:fa:9b:92:d8:e8:8d:
91:f9:01:26:f1:54:8e:66:a1:17:19:25:d8:d4:c7:20:2e:bd:
37:d6:93:e2:77:67:ac:d5:06:f5:8f:e2:86:60:f7:08:84:c9:
26:61:d7:61:59:70:2e:e8:8a:f0:fd:9c:30:0c:93:2b:ff:7a:
64:af:62:25:4e:50:5a:6a:20:c9:b4:cf:81:cf:fd:ca:92:e9:
0e:d5:b7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:29:29 2025 by rpki-client