This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
File: trtjZLzkhc7AbTOZSRWHpIJZHLw.mft (raw, json)
Hash identifier: 6lYhVVSGnx0OIoOyyMIoUznor2o2WUaZ8d/bZ0fnmog=
Subject key identifier: A4:3F:FB:90:C4:F8:7B:84:51:AE:12:DC:19:57:6E:A8:64:02:6A:F6
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial: 09B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
Manifest number: 09AB
Signing time: Sat 06 Dec 2025 19:13:42 +0000
Manifest this update: Sat 06 Dec 2025 19:13:42 +0000
Manifest next update: Sat 13 Dec 2025 19:13:42 +0000
Files and hashes: 1: trtjZLzkhc7AbTOZSRWHpIJZHLw.crl (hash: vNyf140CZ7C1Lp3gf7/XrFX9P0EDwebkt4yixPSA3Xw=)
2: 25295764036811ED9D8E5F3EC4F9AE02.roa (hash: tZaPoTXH9PYuZmi5WQPi/UkCOHiXWsrwkIuE69EcCaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2485 (0x9b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Validity
Not Before: Dec 6 19:13:42 2025 GMT
Not After : Dec 13 19:13:42 2025 GMT
Subject: CN=69348066-9daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:63:d7:7a:1d:5d:d4:c2:b5:94:f3:92:9f:93:
69:88:7d:d5:01:88:d9:ec:ac:ba:ed:fa:69:7d:69:
2a:e9:c8:4d:ce:10:fb:a3:85:63:6f:71:2d:4b:d4:
72:53:25:bb:57:d8:37:30:46:27:e8:93:7c:e3:c0:
ba:a7:4a:ee:9b:36:91:da:1d:83:fe:ae:21:aa:e2:
57:bf:37:c7:30:79:d0:86:17:de:aa:a6:7d:58:77:
9d:fd:6f:75:a8:30:9c:c7:4c:03:c5:65:37:06:d9:
ce:e3:1c:74:20:8d:90:35:fd:f6:45:8e:fb:1c:07:
8c:5b:80:ad:91:c0:a7:22:4e:e9:0b:6a:38:e7:92:
97:71:5a:9b:51:2d:d4:e5:cf:38:26:26:98:72:c6:
91:f8:ce:a3:bf:1e:7d:8e:b8:85:f2:69:b1:75:3d:
9e:36:c2:2a:03:fc:93:2c:b2:e6:8c:6c:54:cb:f4:
1e:d2:cb:63:9e:94:eb:9f:b5:fb:42:02:bd:c2:e2:
23:21:97:de:01:e9:b2:c1:e9:73:e9:a9:f4:10:f1:
f3:05:0f:e6:c3:3a:1b:4b:dc:e1:a9:bc:30:cb:9c:
03:a4:04:83:5a:38:35:df:b9:5b:38:7c:ab:47:ec:
a7:26:57:6c:ff:b6:a8:1b:56:4a:27:5b:26:44:70:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3F:FB:90:C4:F8:7B:84:51:AE:12:DC:19:57:6E:A8:64:02:6A:F6
X509v3 Authority Key Identifier:
keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:6a:0b:b3:de:d5:28:aa:1a:b3:f2:63:d9:e4:b8:39:66:8a:
02:18:24:6f:24:b3:11:b9:6b:5e:1d:b7:8a:c3:7d:d9:e3:5d:
9a:92:fc:bc:18:8f:6a:5c:38:e5:14:aa:48:bd:19:97:2f:ef:
0c:11:2a:e4:0a:df:7e:53:68:49:e7:52:ab:ca:72:d7:66:b7:
47:b4:be:ad:ec:6b:2b:25:90:dd:a2:d3:fe:ce:1d:72:3b:eb:
93:30:eb:1a:7b:ff:6e:70:01:fb:42:92:28:e9:2d:7f:d3:30:
1f:1d:49:28:47:67:54:30:42:2a:d8:c1:56:75:34:a3:f1:5a:
0b:2f:b3:51:e2:e2:98:b1:85:e2:33:41:bc:18:32:37:d4:ca:
41:0b:f9:5d:7e:7e:6a:86:af:cb:2b:24:c8:25:1f:c4:b7:da:
62:c2:b2:3b:a3:56:fa:4f:72:de:70:ab:e4:dc:2d:b2:e1:76:
37:b4:58:13:a2:e2:1c:88:af:8b:bb:fb:7a:d1:cd:e9:96:ac:
80:ad:30:fe:b3:63:41:c6:64:f3:e4:41:02:97:8a:a7:65:86:
10:5c:d1:50:34:71:08:7c:8e:1e:fc:84:1f:74:15:24:82:51:
e3:da:ba:b2:cf:50:bb:0e:d5:77:22:e9:82:37:26:ee:8a:f1:
5a:80:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:24:39 2025 by rpki-client