This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
File: XnPt2W_yeohfYTVup3sfVDXIT8w.mft (raw, json)
Hash identifier: n0nQYMm64k+4EE7QDqrh5ns31ovYMjcKAXNGTGgGE5s=
Subject key identifier: 7A:57:2B:FB:B9:6D:03:DB:6B:F6:85:8C:0D:7B:23:27:D2:31:91:E7
Authority key identifier: 5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
Certificate issuer: /CN=A912759E/serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Certificate serial: 02E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
Manifest number: 02DB
Signing time: Thu 04 Dec 2025 23:42:40 +0000
Manifest this update: Thu 04 Dec 2025 23:42:39 +0000
Manifest next update: Thu 11 Dec 2025 23:42:39 +0000
Files and hashes: 1: XnPt2W_yeohfYTVup3sfVDXIT8w.crl (hash: EFArUfd7KEYLafkRsA5SjycCBX4Luov9f9+h2rjf7Kk=)
2: 7F0509300CCE11ED97C94316C4F9AE02.roa (hash: yP2d46I6eQAvhpe/ALVhIcW2d8YQgRGFzGAw4LWLaPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912759E, serialNumber=5E73EDD96FF27A885F61356EA77B1F5435C84FCC
Validity
Not Before: Dec 4 23:42:39 2025 GMT
Not After : Dec 11 23:42:39 2025 GMT
Subject: CN=69321c6f-72fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:aa:93:a4:18:0a:8a:f5:45:18:d9:25:1d:
94:c9:04:2a:52:cc:0e:19:bb:fb:7b:e7:a9:3a:5d:
50:12:16:a3:d9:f1:8c:6f:0c:8f:8c:71:a6:98:27:
76:cc:ef:8e:0b:7f:45:b8:f5:61:ae:1c:09:2e:12:
20:ca:e8:5c:0c:f6:7c:cb:4c:e5:a0:ae:8f:34:d3:
66:a1:76:8b:49:8d:c2:ed:81:7c:2b:0d:00:26:68:
7d:85:86:2e:f2:8f:18:28:fe:69:10:00:ca:09:71:
b2:7d:e7:9c:34:88:75:1c:c9:fa:e5:01:c1:97:f0:
47:1b:fa:09:95:f9:5e:2b:b4:4f:83:fa:44:f7:b7:
de:b7:da:2b:79:85:ed:23:c0:b2:27:96:57:5b:94:
50:1f:e3:10:c8:d4:b0:d1:84:82:b4:b1:bf:40:42:
7c:87:61:ff:42:99:b9:96:5c:42:06:7d:ac:bb:33:
43:f7:91:03:f3:ce:6b:b6:da:bb:6c:6b:5b:b2:e3:
48:57:25:73:14:54:24:9e:48:09:c9:14:a1:b2:72:
fa:de:39:10:73:a1:cc:e3:d1:14:a0:7a:95:87:84:
6c:b0:13:89:a4:55:af:83:98:ba:c6:7b:53:df:76:
ec:09:49:84:a8:4b:6b:6a:a2:48:27:3e:8b:4e:49:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:57:2B:FB:B9:6D:03:DB:6B:F6:85:8C:0D:7B:23:27:D2:31:91:E7
X509v3 Authority Key Identifier:
keyid:5E:73:ED:D9:6F:F2:7A:88:5F:61:35:6E:A7:7B:1F:54:35:C8:4F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnPt2W_yeohfYTVup3sfVDXIT8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912759E/CB0EA7760CCB11ED9E722369C4F9AE02/XnPt2W_yeohfYTVup3sfVDXIT8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:76:b6:0e:31:b4:75:2a:89:a4:1d:e8:af:ee:f4:4c:61:
ed:df:b7:3a:93:a4:59:c1:8e:4f:ce:6c:d8:47:d0:3a:87:40:
24:d8:99:a8:3e:7f:2d:36:35:3d:7e:59:82:d0:cc:cd:45:42:
e1:67:33:2f:fb:11:c5:2d:8d:f6:cf:88:c6:ad:af:b7:05:35:
42:20:d1:c7:cd:e2:a1:52:21:13:d3:e2:ec:11:4e:a0:d0:1d:
d3:3d:b3:a1:ec:7a:55:d8:27:ac:d4:e7:c7:d0:2d:70:da:5a:
9b:ed:b9:0f:b6:d5:72:76:45:e8:4b:27:12:a3:e3:31:f1:f3:
8b:b0:58:cd:bf:9a:9d:12:9a:6b:64:b3:07:48:9f:93:44:6a:
d6:90:c8:1d:26:4e:35:6e:25:c1:ad:e0:a0:f6:e0:35:17:1f:
23:79:3d:53:24:92:48:66:9a:8e:64:b2:44:ba:ee:31:ac:26:
bd:27:72:b7:a3:9d:94:75:89:f4:b2:72:99:8d:57:2c:75:0d:
92:9b:ac:e0:a4:c3:14:ea:dd:c9:1f:6d:44:d5:c9:ff:f8:de:
32:1e:5e:41:c1:24:16:4d:da:e5:f7:61:7c:ee:76:c5:88:36:
4d:ce:e3:63:8f:59:ee:8c:d7:25:93:b7:91:c9:0c:6c:b3:87:
21:88:c1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:12:43 2025 by rpki-client