This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json)
Hash identifier: putksWFEFV+W8UeTnJqRS8PSiwq8Fd0ds3jknjMBxX4=
Subject key identifier: A3:0E:0D:4B:95:4B:06:2F:FB:73:64:9C:4E:F0:F6:FC:C8:24:AE:31
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0DC0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
Manifest number: 0D84
Signing time: Sat 06 Dec 2025 17:25:22 +0000
Manifest this update: Sat 06 Dec 2025 17:25:22 +0000
Manifest next update: Sat 13 Dec 2025 17:25:22 +0000
Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: zh+UxTMzw02ooKI7Hjd90YrjAmNKjMHyvMw9mSfQL0I=)
2: 938E408897E011EB8870DB29C4F9AE02.roa (hash: AvnHda6N9uSW4caKdT/1qliaFxGzoCjsBnC7c0M2BTI=)
3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=)
4: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: F6pHZaK0p+hfG2R8U42UIH6mVTyAquKiquy2pjJGlpw=)
5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: 0CwL/9pIHvX1NQjOju2K8M/8kw+TsmpQ+hJ5ObtVylo=)
6: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: P6JTGz167Z9TdfCL7daabxEJTzpdJTGmRrb0uaHZZCk=)
7: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 78fn2memSm7vBnLFbyR7taN3PwAlhw+S3wateBPSFCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3520 (0xdc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Dec 6 17:25:22 2025 GMT
Not After : Dec 13 17:25:22 2025 GMT
Subject: CN=69346702-7197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b5:b5:55:06:fc:2f:22:ed:95:4c:64:97:6c:
06:15:85:9f:15:b0:80:42:4d:45:5a:8d:0d:82:e4:
bc:e8:de:8d:1a:ae:85:ac:34:c0:a6:c4:fe:02:b9:
27:93:5f:f9:80:77:6d:4b:c5:8a:f2:30:da:84:28:
1b:68:e8:d7:4a:a5:06:91:cb:1b:21:9d:a4:99:11:
f8:91:c0:ae:da:2d:b8:c7:47:22:4b:19:fd:13:4d:
f8:5d:3e:0c:8f:ee:c0:df:33:a7:eb:9d:b0:cc:eb:
c2:9c:d3:85:ff:0f:2c:41:9e:f9:3c:99:fd:f7:3a:
10:21:e5:b5:a8:7b:6c:1f:69:70:34:1e:1f:9b:44:
bc:59:a5:54:ec:a8:db:85:3e:a6:04:cf:7c:f6:3a:
2b:54:e3:09:7c:cd:9e:6d:ec:31:9c:77:b5:f5:31:
90:99:79:72:16:38:37:be:ab:7a:5b:4b:26:0e:1d:
02:01:d2:0d:5b:54:e3:78:82:7a:b1:16:66:88:44:
72:79:c8:5b:b8:fe:8a:3c:fc:36:fa:17:5b:c8:e3:
fa:3a:ee:1a:62:95:1e:8e:6a:d8:59:91:81:53:9d:
c6:05:99:f0:2c:6d:36:a6:01:ed:2b:65:c0:ed:a5:
09:33:0f:0e:c1:c0:31:cc:48:6d:07:db:9d:85:42:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:0D:4B:95:4B:06:2F:FB:73:64:9C:4E:F0:F6:FC:C8:24:AE:31
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:3e:71:ba:9e:30:b5:26:81:61:7b:78:dc:60:77:5b:a8:
cc:2b:87:64:9f:b2:3c:0e:26:3e:f7:2c:cd:c5:1e:da:dd:c7:
be:ae:1b:42:ed:b4:ac:66:4e:3c:33:4e:d8:bc:9a:28:c3:3b:
82:ca:bc:10:1e:78:ec:6e:4a:56:0b:e2:b0:d5:c6:7d:85:fa:
3b:1e:86:76:00:ee:86:47:33:54:ae:e2:8a:e3:b0:bb:2e:18:
b7:66:c6:3f:c2:2a:ce:1a:d0:c0:51:8a:7b:60:db:d2:25:76:
57:a6:e3:be:9d:d1:31:9a:cb:a4:c7:af:71:e3:75:6a:ac:d8:
2d:b3:2a:b1:b3:a5:25:38:60:20:c0:7a:65:57:64:70:e4:aa:
f2:17:37:0d:d7:b3:5d:0f:14:0e:26:88:7b:31:46:6f:5c:3a:
e6:41:2a:e7:c1:fa:0f:d3:ef:28:7b:14:10:9c:42:de:2f:a3:
8c:84:1e:b3:32:90:69:46:40:d3:c4:0b:d5:c4:a0:03:39:78:
f6:b3:a6:61:03:41:a1:c0:40:87:8c:39:bc:b0:62:e5:e5:91:
ea:5b:d5:03:e6:42:a4:1c:b4:6d:93:23:1e:f0:eb:47:24:d0:
1c:31:46:43:ca:9b:06:38:37:51:c1:e1:44:61:86:cd:60:e9:
90:bb:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:18:28 2025 by rpki-client