This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
File: M50SzjfjomH20PRT5ZlQqEvI_qI.mft (raw, json)
Hash identifier: RCd4PKQwEbmNUMEkgL8A0lmKYZI6RW5/GHYH7BOXJsU=
Subject key identifier: E6:63:36:44:AA:37:77:AE:56:F5:45:EB:91:D0:66:4E:55:38:FC:58
Authority key identifier: 33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
Certificate issuer: /CN=A912D20C/serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
Manifest number: 020D
Signing time: Fri 05 Dec 2025 00:34:29 +0000
Manifest this update: Fri 05 Dec 2025 00:34:29 +0000
Manifest next update: Fri 12 Dec 2025 00:34:29 +0000
Files and hashes: 1: M50SzjfjomH20PRT5ZlQqEvI_qI.crl (hash: ow82sXxZNxsaGC0iS+rWoM1vIylF0L+hQsjHZ3OgjzU=)
2: AC623530A86211ED9ED67945C4F9AE02.roa (hash: MyxZujcbakOxBmEwfvS0Za/TiquqSe0s4Vw8//EffqM=)
3: ABCAF01CA86211ED9ED67945C4F9AE02.roa (hash: pCFkiRXMRg9FOPKtz2Gf1bOU3S2ZHbxwwV0mMwR4Ado=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D20C, serialNumber=339D12CE37E3A261F6D0F453E59950A84BC8FEA2
Validity
Not Before: Dec 5 00:34:29 2025 GMT
Not After : Dec 12 00:34:29 2025 GMT
Subject: CN=69322895-ebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:4e:4b:d8:bc:34:45:73:d3:88:ae:dc:a0:
a3:8c:d1:df:da:f3:07:25:66:00:4c:aa:b3:b5:a5:
ed:06:a9:46:87:34:19:62:10:91:92:55:9e:ba:79:
79:af:33:9f:ee:8a:8f:92:fe:61:cc:89:57:fe:38:
9e:4d:f3:c4:fa:47:91:a0:ae:83:b9:f9:0b:97:ec:
5f:40:b6:b3:d6:da:21:dd:d3:d3:50:87:d9:be:0a:
e6:81:43:29:da:07:a6:d1:a9:e3:cc:ec:57:35:a7:
b3:25:3b:7f:71:ec:d5:7d:39:19:61:2e:cb:d5:96:
d7:9d:4f:27:6f:0b:c0:fc:ee:55:a0:2a:92:6b:49:
a6:dd:1b:f3:f3:6f:4e:80:ac:39:87:1c:f4:11:85:
34:58:8c:1e:8f:11:50:9f:f0:a4:0f:a5:5b:f5:02:
6c:d7:c6:bd:f7:e7:3c:9d:54:54:53:2e:63:14:d8:
3e:75:ac:49:33:28:88:ff:65:d9:e0:41:90:aa:19:
ce:cf:8d:56:2b:c1:d0:16:de:0a:87:42:4e:72:84:
94:91:1a:ba:6f:85:29:eb:80:a9:86:e8:1d:88:b2:
5a:5b:2d:7a:f2:97:bd:fd:25:81:06:c4:0e:f9:9d:
1a:36:74:75:30:4c:cc:36:46:ee:c0:31:f0:53:0d:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:63:36:44:AA:37:77:AE:56:F5:45:EB:91:D0:66:4E:55:38:FC:58
X509v3 Authority Key Identifier:
keyid:33:9D:12:CE:37:E3:A2:61:F6:D0:F4:53:E5:99:50:A8:4B:C8:FE:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M50SzjfjomH20PRT5ZlQqEvI_qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D20C/D40EFF8EA85111EDBB32E749C4F9AE02/M50SzjfjomH20PRT5ZlQqEvI_qI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:8b:12:76:81:a3:d4:f3:78:19:61:02:a4:19:62:f5:7c:31:
60:bb:98:c2:b3:db:07:fd:ff:a4:30:42:39:b8:eb:b9:f1:a9:
ed:1d:18:fb:db:fd:71:61:a2:e0:91:d4:e8:85:30:76:7f:28:
1d:81:6f:ff:00:19:c2:9c:e1:50:39:60:d2:ba:62:a7:c5:bf:
48:07:88:40:99:f4:3e:79:af:1a:5b:13:16:fa:e9:5c:4b:6a:
a7:5e:94:dd:49:ce:94:20:f1:82:76:59:01:de:8c:9f:48:de:
0f:a5:86:3b:43:f1:d3:77:8d:36:a0:1d:1b:4c:6c:c6:90:93:
97:c8:ee:23:b9:1b:7e:96:16:a1:28:49:90:8d:f1:80:94:c9:
9b:be:83:ba:e0:cb:0e:5e:c6:a4:e4:e5:b9:dd:b8:d7:a8:7a:
f9:ee:41:cc:da:ee:03:7b:56:f7:1a:c2:04:1d:84:6b:41:e1:
b6:d0:7d:89:e8:d1:99:04:a7:49:3b:53:92:9a:e6:98:d5:82:
5a:e5:79:a3:bd:c8:c3:10:64:55:4f:b2:b0:02:59:c8:88:ec:
dc:6a:95:c7:6a:1c:b1:78:80:10:09:b1:6c:f8:c6:81:61:50:
19:39:49:8c:6b:f0:05:9c:05:4a:4e:b4:e6:e9:80:16:87:0f:
9a:b9:4d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:27 2025 by rpki-client