This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json)
Hash identifier: CFp+HhmRhW3uWB2jJwMR7Kxj15kK0o8yU2MeAQWHkfg=
Subject key identifier: 7D:C8:98:BD:81:F2:06:96:0E:79:EA:1D:34:62:EF:05:5C:D2:9D:13
Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
Manifest number: 064D
Signing time: Sat 06 Dec 2025 21:32:33 +0000
Manifest this update: Sat 06 Dec 2025 21:32:32 +0000
Manifest next update: Sat 13 Dec 2025 21:32:32 +0000
Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: QthfJdn5esl/zKSP0YfNPVewvuzG1bLQwKtGZmIb49c=)
2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: HwUjEpVEx/M+axjjRSXHAAv6+7lu4B2c6Jg1jCD9mbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B
Validity
Not Before: Dec 6 21:32:32 2025 GMT
Not After : Dec 13 21:32:32 2025 GMT
Subject: CN=6934a0f0-7ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:6b:d8:cd:f7:24:7f:39:ea:fd:b4:59:98:
c6:cf:a6:5d:0a:2d:6f:87:ce:4f:82:00:2d:ab:69:
04:ec:f3:80:61:75:69:c6:0e:53:97:c2:66:ac:b8:
9f:c9:04:3e:51:5a:4f:60:1d:7d:61:4c:37:13:59:
92:7a:da:43:89:f4:68:9b:bb:f8:9e:fd:e5:b7:74:
73:d8:08:fc:21:66:9d:1a:cc:68:2e:ea:38:f3:30:
eb:c4:f9:7f:19:12:bb:b0:a8:30:9e:7c:f3:36:a2:
4c:48:b8:48:0a:e5:9c:a8:22:6d:43:3f:3c:99:aa:
b1:22:d4:9c:79:1e:df:c0:4a:54:ef:60:fe:67:fe:
c3:52:e5:ad:bb:32:a0:e9:73:58:09:c0:33:66:c4:
a5:d2:48:ba:e4:a6:f6:46:40:f4:af:0a:da:cb:af:
a5:fe:15:5a:49:16:07:bb:1c:9f:40:74:9e:2c:a2:
2c:c7:21:9c:aa:1d:ae:24:f7:98:97:4e:05:86:31:
47:75:be:5b:b0:7b:81:cf:57:75:0a:29:a5:46:2a:
26:9d:e1:63:77:a2:54:ba:00:fb:e2:70:44:67:b9:
ce:1d:17:3a:07:89:3c:40:6e:3e:99:6d:93:bc:6c:
0e:34:81:e0:01:47:ed:18:57:1f:8b:5f:81:dc:3b:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:98:BD:81:F2:06:96:0E:79:EA:1D:34:62:EF:05:5C:D2:9D:13
X509v3 Authority Key Identifier:
keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:b6:59:6c:5d:8b:dd:e1:9d:1c:7b:05:43:18:02:b3:8d:
c0:2f:46:1b:40:77:8d:02:2c:4f:0b:bf:7b:3b:94:04:3c:54:
be:71:50:f0:a9:f5:8c:9a:58:7e:d9:7d:59:7f:07:a0:7d:3d:
65:33:06:14:9f:64:0d:5b:f5:81:17:5f:e2:84:8f:e1:7b:ed:
11:d0:55:0d:6d:46:8d:ca:c3:43:d3:c1:26:39:b3:59:47:32:
90:01:f2:99:32:3e:5e:57:bb:42:a4:ec:73:4e:76:b8:27:d9:
2c:dd:d0:42:24:c2:c3:53:ea:80:ea:25:38:00:36:59:57:2b:
ab:16:f3:b3:c6:bc:72:73:7b:d3:45:f7:64:1d:f3:8a:fb:91:
d8:07:f0:1b:a8:8a:40:5e:9a:9f:78:63:91:81:cb:7c:e6:78:
cb:30:56:25:79:35:69:a6:56:35:d3:3d:f5:9c:2e:20:38:7a:
16:2f:c9:6a:25:a7:84:a1:47:72:df:2b:12:e6:31:c5:f6:5b:
36:cc:c5:bb:de:f8:fc:e8:49:df:3a:33:18:24:bf:4b:c9:be:
3c:ac:7a:8f:34:d6:59:52:7f:4e:85:80:a9:2c:a4:31:99:c9:
a7:c9:31:6d:ff:27:34:5b:8e:1b:b5:91:e7:2d:2f:51:53:14:
11:c9:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:00 2025 by rpki-client