This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json)
Hash identifier: iyoo4TxrmMrngeAzu7sQLKhoDhOExxJyQ+S09rGnQVI=
Subject key identifier: 8B:E5:0E:74:5C:78:62:AA:F0:F6:9A:63:CD:1B:B9:B4:96:33:E0:E1
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial: 01F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
Manifest number: 01F0
Signing time: Fri 05 Dec 2025 00:52:30 +0000
Manifest this update: Fri 05 Dec 2025 00:52:30 +0000
Manifest next update: Fri 12 Dec 2025 00:52:30 +0000
Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: BC5et9ygA0s1YhNPU899jE2qs4R/95s1wvmYPY8UctI=)
2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 502 (0x1f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Validity
Not Before: Dec 5 00:52:30 2025 GMT
Not After : Dec 12 00:52:30 2025 GMT
Subject: CN=69322cce-1515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:c5:fb:69:21:eb:17:4e:99:cc:dd:d9:8a:
73:0d:dc:4c:d2:8d:20:e9:7d:8c:28:0e:c7:5c:44:
60:a6:c4:22:32:8a:5f:aa:14:79:ab:83:24:16:98:
a3:ce:d6:c3:00:5c:46:de:07:be:18:18:14:5d:cb:
60:25:1c:17:80:a9:36:f9:44:2d:df:66:90:99:dd:
78:f1:e8:fb:c1:69:b3:88:0a:e5:24:11:46:f3:9a:
9f:c5:c1:e2:98:33:46:d4:17:e7:cc:d3:7b:b5:2d:
c6:c3:c3:3b:56:0b:8f:49:18:4c:83:6d:fd:d1:18:
8b:ac:bf:08:9a:2e:1b:82:ef:c7:e9:71:50:5e:d1:
6a:9b:cf:dd:26:5c:70:46:cb:57:bf:10:fd:38:ce:
58:84:45:56:8d:31:d1:65:c0:ad:d1:f3:49:ec:bf:
9c:e3:dd:ed:60:cd:30:69:be:e2:ae:b8:0d:16:fd:
2a:6a:55:32:cf:cb:0d:ff:30:7a:f7:84:56:51:fc:
0e:43:72:42:ca:15:5a:0a:49:b9:a7:e6:35:a3:61:
7f:07:2a:10:7a:44:88:8a:9b:1f:e2:c1:96:ed:f4:
d2:2d:fc:3f:51:3f:ce:60:7b:27:73:65:cc:fb:0f:
a0:e4:c9:c4:84:a2:de:61:e8:fd:d1:3c:cd:52:f8:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:0E:74:5C:78:62:AA:F0:F6:9A:63:CD:1B:B9:B4:96:33:E0:E1
X509v3 Authority Key Identifier:
keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:00:d8:36:c8:75:21:f5:db:d8:fb:0c:9f:a7:c7:7d:e5:b0:
af:aa:cd:e3:74:42:64:70:43:36:e2:e0:a1:b8:7f:3a:0a:2f:
06:1f:5b:98:1c:02:84:cf:de:b3:0a:df:40:ba:e7:93:56:58:
fb:7a:b8:65:bb:fa:bb:d2:74:e7:11:a3:19:b5:3f:0d:f6:99:
07:44:20:12:62:1b:64:f9:64:bd:b5:40:34:43:9d:d9:e8:af:
00:5c:b0:58:d0:68:1e:a9:b4:1b:f6:23:c9:26:2e:cc:d9:d5:
1f:8a:99:55:a2:fc:79:67:ca:6b:eb:b0:8a:7c:be:2d:9a:f9:
38:89:49:84:0a:76:30:1e:29:cb:95:0b:bc:e8:f2:3b:79:23:
b2:a2:02:d4:2d:f2:64:53:ff:ea:19:87:95:3e:00:8c:0c:32:
ea:e4:d8:b0:df:5d:41:13:32:34:85:7d:5e:63:9f:ef:7c:2a:
49:2e:78:52:69:0d:5b:90:37:fd:ad:66:4a:14:60:e3:1b:b8:
99:eb:a2:4b:68:8d:fc:4f:3b:f7:1b:ed:bf:86:94:9d:93:23:
ed:1f:c3:3d:a5:40:d4:6b:ed:9a:40:cf:0a:0b:7a:5c:b9:0b:
06:28:bd:c7:d8:ab:27:ad:7a:c0:e9:60:9e:c9:ef:b2:20:30:
46:04:e4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:38 2025 by rpki-client