This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json)
Hash identifier: VlsJSrg0vVQMatzoiilwzM170ioSGtz8dViuGcbdMhc=
Subject key identifier: 76:18:69:CE:9B:A4:FB:00:AF:20:E7:B8:C5:E2:D6:5C:C2:3A:05:39
Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Certificate serial: 0284
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
Manifest number: 0280
Signing time: Sun 21 Dec 2025 00:47:19 +0000
Manifest this update: Sun 21 Dec 2025 00:47:19 +0000
Manifest next update: Sun 28 Dec 2025 00:47:19 +0000
Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: qh4lcHXSpGPW7VaM9sJxxEjRCZ6mV/vDCSeNnDMFRr8=)
2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: 8x2SsfQuIT881cDaqWjgKUso9bJl3sYc8ulFMGO/wmw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 644 (0x284)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324
Validity
Not Before: Dec 21 00:47:19 2025 GMT
Not After : Dec 28 00:47:19 2025 GMT
Subject: CN=69474397-7753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:e7:dd:62:dd:53:25:06:04:c4:70:6a:a4:
95:71:bd:77:ff:0c:9f:40:f2:39:46:43:65:d4:74:
1a:5b:da:f0:6c:f1:17:54:a1:90:f6:be:77:1b:34:
8b:ba:77:71:86:a6:f2:86:48:0e:56:f7:52:f3:45:
25:7c:da:c4:91:19:41:a4:07:df:23:e9:47:e3:b8:
57:7b:3a:b1:82:8e:ba:ee:92:42:5a:19:6f:9f:90:
b0:f7:72:a6:f6:a6:3e:1b:0b:e6:fc:7d:5f:44:de:
ca:16:96:01:20:75:ec:49:5b:20:df:e8:34:fa:a1:
07:c0:6d:fb:82:64:be:82:97:9e:cc:3d:9b:6e:ee:
ad:02:d7:b6:82:82:ca:0d:bb:3c:1a:81:31:fb:2d:
93:90:6c:2e:8b:5c:ba:fd:62:d4:49:1b:cd:3d:1f:
4b:95:26:cf:2f:d7:38:79:a2:e6:d8:66:3c:67:de:
8b:ba:c4:0f:2c:9d:68:de:81:b7:9c:8b:3e:0f:13:
62:94:64:c6:bc:b9:ff:d7:ac:d4:a4:16:34:c6:ea:
3c:63:b5:6b:16:69:a9:57:62:67:db:57:1e:a5:a7:
16:47:1b:98:ac:82:d6:3b:09:66:87:cd:aa:64:21:
ce:d2:6e:0c:fd:dd:96:06:3c:7d:d7:4d:06:00:c3:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:69:CE:9B:A4:FB:00:AF:20:E7:B8:C5:E2:D6:5C:C2:3A:05:39
X509v3 Authority Key Identifier:
keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7c:ed:e4:5a:1d:ec:47:f2:4b:eb:db:d0:79:eb:55:c0:3b:
78:1b:f8:5e:3e:8a:f2:2d:50:bf:ee:1d:ac:33:94:ee:f5:b6:
97:fe:d6:d7:ac:80:bc:78:6e:a3:c6:bf:e4:5d:f6:4f:92:a9:
49:91:45:36:31:de:b9:67:70:0b:a6:6f:ef:8e:98:15:37:dd:
18:06:4b:87:da:89:a8:03:54:6a:1d:46:d3:63:8a:0b:b7:0c:
52:d2:82:58:e5:46:e6:65:66:af:6e:d5:c1:bc:6b:cc:ae:8c:
e0:8c:44:cb:9c:4e:eb:ee:d4:1a:f0:d3:2d:01:ef:1c:df:78:
7f:30:17:c0:75:93:e3:3b:f7:57:ca:22:2a:6d:fa:2d:92:b3:
d6:ef:8b:40:2b:5a:a5:7e:ee:55:7e:2a:9d:89:5e:02:03:d5:
33:3d:33:2a:d2:e4:f4:b4:90:db:f6:b9:63:63:00:0d:b0:1e:
ff:1e:c8:50:f4:1f:46:75:2a:c7:c0:0d:b2:fb:96:c9:77:f5:
69:65:24:fe:18:bc:8e:1d:ee:93:14:71:86:ec:b6:9c:ad:1f:
17:ba:04:6e:36:e4:4e:5c:90:1a:b6:ae:e9:fb:a1:8a:44:a6:
17:a0:80:ae:81:56:2e:5c:4a:dc:36:38:ec:2d:25:ac:8b:5d:
16:80:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:32:33 2025 by rpki-client