This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json)
Hash identifier: e8zv+JoHf8BRDrjfbPkAYckkYMT0q6eazPJp7o8svns=
Subject key identifier: C0:5D:5B:21:00:BA:22:0B:08:C6:15:34:30:C3:28:31:AB:28:19:54
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial: 0CAE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
Manifest number: 0CA4
Signing time: Thu 04 Dec 2025 17:48:49 +0000
Manifest this update: Thu 04 Dec 2025 17:48:49 +0000
Manifest next update: Thu 11 Dec 2025 17:48:49 +0000
Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: Ji60tAXh0WjKWLMjDn5TzwaJrdtPDQq0/+GKgxjmpk0=)
2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3246 (0xcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Validity
Not Before: Dec 4 17:48:49 2025 GMT
Not After : Dec 11 17:48:49 2025 GMT
Subject: CN=6931c981-c4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:c7:09:52:cb:9b:83:06:96:19:58:d1:9d:
7e:04:38:62:e7:83:98:a8:d7:ff:12:3a:cc:eb:3e:
45:c5:5e:69:88:1b:32:63:12:0f:3b:77:60:f4:0e:
04:14:6a:5e:4c:1c:a4:e3:d8:78:c9:27:9b:9e:cb:
8d:d0:c4:6d:06:29:df:c8:3e:4d:2b:7a:b3:92:00:
87:d0:4b:0e:b5:e2:54:e3:f1:6d:15:a7:66:49:f0:
cc:65:75:4a:40:ff:90:02:57:36:9c:9d:3a:4f:ec:
86:b4:5e:c7:bd:4b:a1:41:f7:3b:95:de:32:98:41:
5c:46:84:99:9d:8e:45:1c:29:b9:2e:69:cc:11:94:
ba:d4:35:43:f2:2b:14:f1:52:ed:9b:a4:f3:fc:74:
6c:59:8c:2a:32:33:9f:6b:0c:66:5a:17:87:47:9c:
ec:11:57:43:b9:8d:ed:4e:d3:b0:cd:0a:6b:96:b7:
53:9a:c0:af:46:68:ad:ec:94:a3:65:76:94:c0:98:
e7:bf:17:d0:0f:98:38:e3:ab:4a:d2:42:07:c2:ed:
d9:41:0e:10:76:fe:ee:93:b3:f9:2d:3f:86:a6:43:
eb:5e:0a:06:14:d4:2d:de:a5:aa:fc:c1:d4:54:f4:
a4:60:ae:51:41:68:dc:2b:16:f6:4a:56:c2:76:f0:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5D:5B:21:00:BA:22:0B:08:C6:15:34:30:C3:28:31:AB:28:19:54
X509v3 Authority Key Identifier:
keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c1:39:2d:96:5c:62:ae:d5:df:09:a7:05:71:34:03:63:63:
7e:63:e5:eb:6b:e9:2b:f3:cd:83:2b:eb:d6:b4:7d:23:6e:11:
0c:c2:fd:d1:e7:2c:53:53:34:ee:47:e0:7f:72:1a:c3:3f:ff:
53:ed:22:a3:32:0f:2e:66:4e:c4:51:76:05:32:56:54:d6:db:
ec:37:0e:78:0d:b0:4e:b2:37:f4:76:5b:d3:bc:bc:e2:c2:a8:
e3:0c:e0:6e:a8:1b:05:58:fd:9e:69:bf:ab:20:e4:30:c0:af:
3e:bc:07:2e:e2:2e:e9:3c:24:a0:c0:a2:67:ca:54:e5:ff:15:
eb:79:2c:6b:fe:2b:8f:6e:b7:47:9e:02:b1:8a:bd:24:2b:ed:
ac:a8:fe:68:44:24:82:38:25:6c:e7:ce:b1:cf:eb:30:8e:5f:
86:68:9a:ff:1d:da:24:aa:be:dc:c4:81:f2:c3:b1:97:7f:95:
a4:15:f4:a1:e8:d2:0c:0e:74:9d:b6:58:44:e0:23:36:0c:8e:
f0:d6:44:c6:48:8d:de:ab:a6:e8:5c:c9:63:e4:c1:ea:a3:94:
92:a1:dc:ce:26:2f:48:37:ab:d9:11:52:8a:b2:36:c2:10:d6:
29:17:66:96:a2:2b:c4:d4:c0:f2:f8:3d:8d:b3:17:54:e8:fb:
45:86:68:86
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND
ODg2MUVGOTcwHhcNMjUxMjA0MTc0ODQ5WhcNMjUxMjExMTc0ODQ5WjAYMRYwFAYD
VQQDEw02OTMxYzk4MS1jNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVLHCVLLm4MGlhlY0Z1+BDhi54OYqNf/EjrM6z5FxV5piBsyYxIPO3dg9A4E
FGpeTByk49h4ySebnsuN0MRtBinfyD5NK3qzkgCH0EsOteJU4/FtFadmSfDMZXVK
QP+QAlc2nJ06T+yGtF7HvUuhQfc7ld4ymEFcRoSZnY5FHCm5LmnMEZS61DVD8isU
8VLtm6Tz/HRsWYwqMjOfawxmWheHR5zsEVdDuY3tTtOwzQprlrdTmsCvRmit7JSj
ZXaUwJjnvxfQD5g446tK0kIHwu3ZQQ4Qdv7uk7P5LT+GpkPrXgoGFNQt3qWq/MHU
VPSkYK5RQWjcKxb2SlbCdvDCVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBdWyEA
uiILCMYVNDDDKDGrKBlUMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1
RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF
YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2wTktllxirtXfCacFcTQDY2N+Y+Xra+kr882DK+vWtH0jbhEMwv3R
5yxTUzTuR+B/chrDP/9T7SKjMg8uZk7EUXYFMlZU1tvsNw54DbBOsjf0dlvTvLzi
wqjjDOBuqBsFWP2eab+rIOQwwK8+vAcu4i7pPCSgwKJnylTl/xXreSxr/iuPbrdH
ngKxir0kK+2sqP5oRCSCOCVs586xz+swjl+GaJr/Hdokqr7cxIHyw7GXf5WkFfSh
6NIMDnSdtlhE4CM2DI7w1kTGSI3eq6boXMlj5MHqo5SSodzOJi9IN6vZEVKKsjbC
ENYpF2aWoivE1MDy+D2NsxdU6PtFhmiG
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:35 2025 by rpki-client