This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
File: RoxqeSq7PkX-7iIo0o54AxNytFU.mft (raw, json)
Hash identifier: SDqsvOr9SK5wWxXx0q/4zTjQ83Wr1rlWWJ2ibVDLW+w=
Subject key identifier: 8A:31:5F:DD:4B:54:55:4A:F1:4A:3A:44:6D:F4:74:F0:6D:89:77:D1
Authority key identifier: 46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
Certificate issuer: /CN=A912DD15/serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
Manifest number: 0201
Signing time: Sun 07 Dec 2025 01:10:25 +0000
Manifest this update: Sun 07 Dec 2025 01:10:25 +0000
Manifest next update: Sun 14 Dec 2025 01:10:24 +0000
Files and hashes: 1: RoxqeSq7PkX-7iIo0o54AxNytFU.crl (hash: R0i8xqxR2/E8YC1TdTgv7dDKMzQRPs0lOJDDe4L/lW4=)
2: 43CE5D5A236911EEAC33285DC4F9AE02.roa (hash: Xj60cy/+MCefwRh5zgDSO/B9QlgMD6CuyCY3oxVXaNA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=468C6A792ABB3E45FEEE2228D28E78031372B455
Validity
Not Before: Dec 7 01:10:25 2025 GMT
Not After : Dec 14 01:10:24 2025 GMT
Subject: CN=6934d401-8e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:de:0d:87:9d:77:fc:b5:7b:3b:f4:81:b6:
b8:9d:06:2b:58:d4:d3:e9:07:90:d9:b5:d4:29:25:
61:4d:e9:b9:e0:3f:42:90:8e:00:c3:30:3d:ce:26:
3d:eb:96:1b:aa:f4:b0:68:0f:1f:7d:8d:70:ec:e8:
13:8d:50:c9:89:ff:04:8c:5a:f4:91:54:d7:8f:86:
28:33:d0:7d:22:d3:44:dc:ed:ad:89:2d:e2:af:c3:
59:15:3b:d8:06:27:1e:de:4f:fb:c4:d4:ae:08:ea:
d2:49:6c:92:96:c8:c5:e4:b1:f5:9e:87:3c:3d:bd:
f3:b8:9f:39:59:5b:ca:17:ca:f1:7d:a4:cf:c3:da:
d8:05:f7:9c:be:b2:c8:29:df:e5:a5:f1:b3:28:45:
81:be:01:db:aa:a1:31:d8:4d:eb:47:02:1c:6e:74:
88:5b:6b:c2:0b:ef:03:90:28:41:01:2e:f7:10:4a:
7d:b9:61:58:b4:49:58:d6:f7:65:cf:a0:25:7e:68:
ec:8e:2b:31:a7:61:5b:c5:ae:12:04:7c:ea:56:e5:
0a:b0:87:1d:34:7b:87:42:87:1d:d0:45:5a:6e:be:
ee:43:94:7a:47:ff:93:d4:d7:b2:4f:23:48:f4:61:
b3:4a:bc:ea:7c:f7:22:d2:ba:26:a2:44:5f:8e:69:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:31:5F:DD:4B:54:55:4A:F1:4A:3A:44:6D:F4:74:F0:6D:89:77:D1
X509v3 Authority Key Identifier:
keyid:46:8C:6A:79:2A:BB:3E:45:FE:EE:22:28:D2:8E:78:03:13:72:B4:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RoxqeSq7PkX-7iIo0o54AxNytFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/BDADA860CC5211EDA8291D10C4F9AE02/RoxqeSq7PkX-7iIo0o54AxNytFU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:59:6a:2b:23:3c:d1:f2:1d:53:c6:b1:f1:7a:69:68:52:f6:
db:39:9d:e7:f7:55:88:1b:79:34:de:e1:7f:8f:61:56:48:29:
e0:44:83:ca:7e:71:35:10:c1:cb:86:fe:16:ae:61:38:d5:9d:
e4:5d:84:89:62:42:01:0d:03:bf:43:2c:6f:64:20:fa:af:dd:
be:0b:df:f2:33:b4:00:26:2d:13:5f:6e:31:f6:36:a0:de:75:
b0:ed:98:08:fc:08:fd:6c:16:1d:dc:f0:96:81:50:96:96:3e:
16:a3:af:5f:d4:a3:ab:7a:37:22:02:67:f8:23:44:c1:1d:28:
9e:4c:8d:26:03:5d:5e:f0:5a:96:78:82:af:ce:93:ca:3d:61:
a2:4e:bd:bb:52:3a:2f:93:1c:03:86:42:5f:3d:87:e8:d1:42:
8c:e8:74:a3:90:ff:ae:03:6c:e5:8f:31:fa:af:de:99:4c:91:
81:1b:21:91:3a:32:28:64:b4:b7:f4:8b:94:d4:30:e1:9f:b3:
1f:28:a0:69:50:0d:f2:58:fe:9c:a3:ef:ff:e7:5d:63:87:24:
38:6a:e0:f0:b6:f8:f6:e1:a0:60:3e:2d:5a:84:00:38:53:28:
8d:92:41:37:9e:bc:b5:84:a2:4b:aa:1e:c1:0b:e9:dd:1b:9f:
88:30:17:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:09:20 2025 by rpki-client