This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
File: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft (raw, json)
Hash identifier: WnDVGNBBrUryy/HRq1qHF8o5Hh/UN4HmOEVZGLR2euA=
Subject key identifier: C2:90:CC:0C:61:B5:3C:4B:12:F9:6A:D8:2F:CE:E6:48:C2:2F:7E:86
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Certificate issuer: /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial: 67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
Manifest number: 66
Signing time: Fri 05 Dec 2025 04:52:46 +0000
Manifest this update: Fri 05 Dec 2025 04:52:45 +0000
Manifest next update: Fri 12 Dec 2025 04:52:45 +0000
Files and hashes: 1: 9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl (hash: wte1YesTK4FOEkGU6qVuOlp0EAr490PmkXSmF/g0mR0=)
2: 8F93DAA0332311F0BF038621C4F9AE02.roa (hash: P1i8JlTHvQeelXBaQFnkoslfsZeeYGvP6Iqsm2zpN2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103 (0x67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Validity
Not Before: Dec 5 04:52:45 2025 GMT
Not After : Dec 12 04:52:45 2025 GMT
Subject: CN=6932651d-acf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:02:48:d2:68:ce:10:13:48:ac:c9:a0:73:
b6:06:13:94:bc:06:62:9d:cc:68:c6:c6:aa:c9:be:
80:50:a3:62:b4:59:d5:c1:ae:f0:0c:57:29:d9:d4:
10:11:79:73:be:ff:15:0a:c7:13:8b:db:39:04:b3:
72:4a:c6:89:2b:1f:8e:71:ae:16:62:6c:97:03:89:
fc:d8:21:a7:bb:85:4d:b9:e9:07:11:da:9e:4d:69:
a7:29:df:73:33:90:06:b2:c9:73:11:cd:13:3c:dc:
36:15:f9:92:ac:88:e6:97:80:e3:a5:25:d2:73:14:
08:a0:dc:45:69:17:d3:e5:10:4f:46:5f:e5:9d:53:
80:0f:33:4a:1f:cc:f0:39:c4:39:c0:c0:74:59:db:
01:c7:76:d3:49:f3:b8:26:f8:23:1f:0e:ae:b3:c6:
0b:e0:9a:40:c3:82:c4:9f:78:bc:f9:b2:68:10:41:
8d:5f:9e:cd:06:ce:7e:bd:15:d8:4a:85:eb:1d:3c:
c3:d3:75:48:47:3d:ca:1f:c2:30:1c:1d:64:6e:f9:
45:53:4f:66:66:34:83:03:5c:e8:24:73:77:91:f8:
6e:53:35:88:4e:95:34:49:c6:56:55:14:d4:76:ee:
a2:c1:7e:b8:a6:70:51:b2:78:2c:ad:e4:73:d7:a2:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:CC:0C:61:B5:3C:4B:12:F9:6A:D8:2F:CE:E6:48:C2:2F:7E:86
X509v3 Authority Key Identifier:
keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:b5:9c:15:f4:93:7a:ed:8f:6c:d1:e6:8f:75:cd:39:ef:ff:
e8:69:99:30:44:dc:28:1d:db:99:03:03:0c:1e:c3:65:82:b6:
23:73:e4:ee:35:26:f5:1c:76:d2:e2:5b:71:b3:d1:18:a3:99:
6a:d2:04:b7:25:2e:af:7e:10:d3:66:10:7b:c0:24:0d:f2:02:
10:9e:07:a9:f2:a9:e8:6e:5c:7f:bf:37:0c:9e:39:24:75:96:
08:c4:59:80:50:17:b7:4f:78:48:74:ea:e4:a1:ca:b0:b0:f7:
43:5d:f7:91:41:1b:b5:60:57:eb:08:e5:63:e1:01:d0:4f:0d:
b1:fe:e9:87:17:81:36:66:62:76:1c:e6:01:3b:db:45:9f:a1:
f3:87:da:e4:4b:46:81:08:5a:78:4d:b6:3c:54:56:d2:c5:e7:
04:37:e3:cd:2b:97:86:a3:6b:04:1a:20:b2:6f:10:63:11:10:
47:be:62:35:3e:41:69:da:a6:cf:5f:b8:e2:2c:23:ec:8c:21:
6e:48:54:fe:7c:c2:f7:df:0e:2e:28:9b:57:c1:64:f6:95:41:
97:85:bf:6e:ae:b1:ba:27:58:f7:e3:6c:f4:80:ce:b2:99:f4:
d2:3f:51:8f:88:89:8a:ec:a3:e4:a9:d8:ab:b0:c7:6e:d1:93:
50:47:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:26 2025 by rpki-client