This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json)
Hash identifier: BNepKJWePzD/tqXS+3bGK42eERQnXUkv4d7FCX20PQw=
Subject key identifier: 1C:3A:F2:D0:66:F0:BA:3C:E0:B3:23:C0:56:03:9C:2A:3E:C5:44:D0
Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Certificate serial: 011A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
Manifest number: 0118
Signing time: Fri 19 Dec 2025 03:56:05 +0000
Manifest this update: Fri 19 Dec 2025 03:56:04 +0000
Manifest next update: Fri 26 Dec 2025 03:56:04 +0000
Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: kP4rMJmA6xeZjvzV0g3UPD5AGk6R3BrO2jRrUMAb5UI=)
2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: /1PjZ5NNRMUhyhR9YlRWIkmEIJE+BmHYk2vv+gNzyk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 282 (0x11a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80
Validity
Not Before: Dec 19 03:56:04 2025 GMT
Not After : Dec 26 03:56:04 2025 GMT
Subject: CN=6944ccd5-cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e8:83:67:aa:76:f8:79:44:9f:76:58:02:e0:
38:32:92:50:cb:6f:6e:c7:2c:d5:3e:69:f6:e0:8c:
6b:43:9d:ab:91:b4:ac:f5:a1:b3:de:7c:85:9b:df:
36:21:fa:f9:0b:40:5e:e5:80:31:a8:f4:62:af:dc:
23:bf:ed:0d:c2:e6:51:a8:26:1b:21:3f:b1:74:12:
df:ac:83:26:3a:fb:47:cf:9b:74:1e:29:da:92:32:
8c:c9:6f:3a:2e:87:88:24:ee:9b:04:7f:41:3b:11:
12:d0:43:1b:ad:90:f7:ac:9d:18:01:fc:58:ef:13:
a9:3f:40:f2:7c:fb:93:5c:7d:c6:60:d7:b0:e2:9c:
cf:03:4c:b8:30:38:3b:ae:b1:47:3a:68:8b:af:da:
0e:d0:02:67:83:75:98:67:12:c8:aa:ea:aa:6e:0c:
81:db:59:c7:c8:fe:71:dc:7a:6e:1e:85:67:dd:23:
62:ef:53:83:9d:f2:55:47:f0:e7:0c:c5:63:83:a8:
0f:be:40:14:35:56:e0:e4:16:0c:27:94:34:81:c1:
2c:9f:67:82:44:b4:9d:30:ec:40:ce:4d:6e:d0:d6:
09:57:61:44:de:c0:89:6c:b0:e8:64:92:e9:b2:40:
03:2d:58:55:d8:ac:ef:56:ce:36:33:e8:be:ec:b8:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:F2:D0:66:F0:BA:3C:E0:B3:23:C0:56:03:9C:2A:3E:C5:44:D0
X509v3 Authority Key Identifier:
keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:11:43:9d:b5:cc:21:8b:12:0c:91:6d:52:b8:e2:cd:62:a9:
77:0a:6c:af:f5:f4:d4:3e:01:fb:9d:7c:61:c5:5a:e3:92:48:
ea:9b:fa:bb:54:de:d4:5b:6a:a1:e0:69:4c:ad:f1:12:a2:c5:
99:c9:8f:1b:14:9b:ff:70:07:4d:c7:8f:44:fa:7f:c5:97:30:
b2:cb:1b:a4:ec:6f:ea:68:c9:63:50:d1:5e:57:46:58:8b:47:
a0:61:15:22:da:31:7d:4e:cc:28:41:c4:2e:c1:1b:1d:64:77:
cc:1b:c1:de:f9:98:5e:c8:45:83:99:77:d6:13:cf:57:b9:ec:
25:c6:2d:da:b0:5c:d3:e6:01:a4:0f:f5:99:45:b6:74:0b:c0:
de:b9:71:34:49:17:d5:2c:5f:16:de:a5:3e:75:0a:46:96:b5:
82:bb:7f:c9:bc:b4:35:7f:61:ab:f7:4d:6a:56:f9:b8:bc:72:
09:74:50:29:49:a8:60:3e:cb:5f:f8:f9:6f:61:27:b1:c7:16:
6c:15:68:e4:44:50:95:0f:b2:29:b2:03:d6:99:f7:27:22:5a:
2f:f1:75:8f:d0:80:6d:82:7c:79:e6:70:4c:6f:c5:bd:b9:d2:
32:98:6c:ea:e0:d5:a4:14:0d:22:b0:13:af:10:f2:5f:78:29:
d7:db:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:50:55 2025 by rpki-client