This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
File: tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft (raw, json)
Hash identifier: +LQyEYx1/ukH5uN4i1exabTC9/GW1FsvmU+b2BSujy4=
Subject key identifier: A5:AC:36:35:F8:9D:8E:9C:4E:AE:4D:39:14:FE:94:F0:8A:0F:0D:00
Authority key identifier: B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
Certificate issuer: /CN=A9131181/serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
Manifest number: 84
Signing time: Fri 05 Dec 2025 04:38:13 +0000
Manifest this update: Fri 05 Dec 2025 04:38:13 +0000
Manifest next update: Fri 12 Dec 2025 04:38:12 +0000
Files and hashes: 1: tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl (hash: k0Fqkr/gWo3Ld6JhlmrD/877WlI6Gr0/31asBWpAZd8=)
2: AD57493E0B7B11F09EB3322EC4F9AE02.roa (hash: 9xmGjx6/ygbzmZES5SPZTo7PpjmH7n67UZFSuthwcDE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131181, serialNumber=B4839F4FC3F8EDFCBD22DA1A799D865ACFE0325F
Validity
Not Before: Dec 5 04:38:13 2025 GMT
Not After : Dec 12 04:38:12 2025 GMT
Subject: CN=693261b5-207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:26:06:70:e4:f8:0f:ba:07:0f:42:2d:8e:
63:93:4e:3d:16:6c:69:ab:1c:2f:e3:b8:ef:03:8b:
3a:b8:9b:a8:0d:b6:34:9e:c4:05:7b:5b:fd:45:b6:
57:43:93:87:93:c3:14:98:1c:34:03:a5:94:31:03:
3b:37:12:b1:2e:42:12:3b:33:8d:52:af:a8:a5:9c:
15:57:ec:74:37:96:18:87:30:23:0e:16:1b:29:57:
4c:a4:a5:38:a5:e1:4c:3a:d7:77:81:6d:1b:6f:75:
5c:e1:cf:2d:3e:3c:7e:cc:ca:c4:6e:0e:cb:1d:74:
33:81:7f:0e:fe:00:07:a0:92:d7:3a:83:03:1d:0e:
c6:27:97:f9:80:6a:84:e0:dc:e4:c3:75:99:1c:a3:
54:54:10:f9:ec:32:59:34:3a:ce:1c:c9:cd:4b:15:
f7:7b:6b:16:38:f2:c8:b3:3b:60:18:7e:fd:83:1f:
18:c6:b0:26:23:7b:39:2e:37:45:6c:2f:ec:dc:50:
1c:c6:f7:6a:08:7a:a0:3f:33:22:a4:34:f7:8f:88:
31:ef:b9:1e:61:86:06:ba:f2:31:e8:68:9e:87:5e:
82:fb:4c:1c:b6:0a:1a:7e:ac:d5:bc:a8:08:68:5a:
a4:46:1b:45:35:94:71:6a:88:6f:8c:ea:c2:40:b0:
c3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:36:35:F8:9D:8E:9C:4E:AE:4D:39:14:FE:94:F0:8A:0F:0D:00
X509v3 Authority Key Identifier:
keyid:B4:83:9F:4F:C3:F8:ED:FC:BD:22:DA:1A:79:9D:86:5A:CF:E0:32:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIOfT8P47fy9ItoaeZ2GWs_gMl8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131181/AA087F7A0B7911F0BB99ED6AC4F9AE02/tIOfT8P47fy9ItoaeZ2GWs_gMl8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:34:08:81:b0:a8:2b:92:86:e6:02:d7:70:8c:36:a2:83:f5:
bf:60:3d:e9:31:2d:4d:6c:b2:bd:6f:00:37:10:b9:9f:43:52:
f5:62:4c:23:6e:9c:28:ed:eb:78:e8:8b:89:92:ee:7e:54:78:
80:66:89:86:10:37:83:ce:ab:6b:bc:ce:80:c7:9d:ff:fd:c5:
cb:0f:79:67:3e:19:a4:23:09:0f:e2:83:78:cc:13:54:6e:7b:
51:52:4c:2b:77:65:c6:55:1e:d5:4d:10:1e:08:60:a4:98:64:
e1:ae:9a:45:8c:34:63:7d:81:58:15:85:7a:e6:56:1b:a5:e7:
15:95:5e:d9:44:aa:68:f7:48:ef:9c:5e:e3:96:5f:8b:46:6b:
90:a2:a7:fa:a9:b0:2c:fe:90:a9:c0:fa:2c:59:7c:b4:7c:ec:
c9:97:0c:1e:e3:f2:5f:85:4f:8d:a6:ae:c4:fa:7f:e8:ca:09:
61:74:2e:05:b1:89:5a:d9:cf:d1:d0:87:61:aa:0d:b6:2c:91:
00:cc:d8:29:34:07:96:16:60:3a:55:54:72:56:17:d8:78:32:
e6:28:55:c7:28:3c:7c:67:89:ea:24:e7:a4:31:aa:30:2a:2f:
c3:1d:59:50:df:a6:94:b4:08:74:69:13:c0:d3:94:4c:15:de:
f9:54:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:44:47 2025 by rpki-client