This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json)
Hash identifier: 4Q7t/ZqVQQyH87IWLWJCWkWdHpk3j7TvoUZC6xP/iyE=
Subject key identifier: DC:0D:07:2C:BA:7A:66:1B:89:06:30:68:35:C3:7B:73:F7:86:34:AF
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
Manifest number: 0183
Signing time: Fri 05 Dec 2025 01:54:52 +0000
Manifest this update: Fri 05 Dec 2025 01:54:51 +0000
Manifest next update: Fri 12 Dec 2025 01:54:51 +0000
Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: pCrKIGwUDyVsm/5vDQhYNqjOsXjMlckMoaaB7XH7/tA=)
2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=)
3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Validity
Not Before: Dec 5 01:54:51 2025 GMT
Not After : Dec 12 01:54:51 2025 GMT
Subject: CN=69323b6c-a1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:65:1f:f3:3b:31:f6:de:05:96:77:06:b6:
74:3e:56:04:47:92:55:b1:b4:bd:de:55:20:d5:7e:
a1:75:53:bd:25:ef:ce:80:26:4f:d2:97:1e:e5:62:
2c:1b:85:98:10:ed:6c:57:d8:ad:1f:c5:64:3b:bd:
63:64:19:59:05:9e:d7:09:7f:27:49:48:a6:bd:16:
6f:c0:b8:64:8d:01:7e:b7:fa:9b:a2:be:4a:98:9a:
6a:1d:7f:6d:38:2f:9c:6d:ce:ba:d1:52:b7:23:51:
ec:f6:2f:10:ea:6c:c2:2c:be:d5:65:e1:a4:31:4c:
44:6d:8d:3f:89:13:d4:06:bf:d8:9b:b8:16:1f:ac:
b5:05:09:1a:52:2a:a9:a7:5c:ee:5c:41:e8:45:3a:
4e:1c:5a:64:73:e8:5a:44:51:e9:60:05:b5:fc:2a:
c2:c5:f0:a8:35:6a:ee:f8:63:f8:33:3b:07:e2:6b:
4d:ae:bb:c6:6b:81:64:af:6e:ad:8c:cf:fb:67:0a:
5b:23:74:2b:2c:e7:78:c4:82:64:ec:87:2e:63:64:
3e:1b:1e:8e:53:49:11:9a:ef:5b:d5:42:eb:48:f4:
cb:c0:06:f3:1d:e3:61:04:08:e9:b3:79:e2:07:b8:
5d:af:c1:8e:58:17:27:c2:92:32:52:42:96:90:13:
d3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:07:2C:BA:7A:66:1B:89:06:30:68:35:C3:7B:73:F7:86:34:AF
X509v3 Authority Key Identifier:
keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:26:49:ff:7f:3a:b2:b5:cf:54:cf:6c:61:59:0b:49:ca:9d:
7c:d1:bf:68:80:23:68:6a:4e:ed:91:75:5a:65:64:7f:64:5a:
e2:01:c9:3f:d0:05:52:dc:8f:91:34:bc:3b:83:4a:b6:4c:09:
2c:ec:fb:54:8b:03:65:96:73:d4:8e:13:c1:66:ba:d4:ae:d6:
97:1f:4a:61:4c:26:63:95:9e:76:3d:f2:d5:9e:d9:63:a0:33:
6b:e1:8f:03:c1:67:a9:12:81:c9:1e:b9:9d:31:f3:53:43:51:
8f:ae:0c:24:c9:d2:7e:07:f6:fa:cb:32:45:dd:0f:9d:43:bd:
9a:75:92:46:09:98:cd:0e:cb:38:f8:1c:b3:34:d9:a3:42:e4:
73:f8:87:82:c9:f0:c0:da:36:8d:98:37:76:d9:1d:cf:aa:c8:
12:ee:dc:cb:fc:6f:7c:8f:42:7f:e3:a1:2f:6a:04:07:c6:0d:
04:34:43:e2:ff:0a:e6:b4:62:9d:cb:9e:22:0f:2d:2f:34:cb:
82:33:4e:52:02:5e:80:36:29:07:0a:fe:ca:54:11:b3:a0:8c:
55:54:85:88:51:4d:1a:b3:f3:52:51:1e:84:bc:c3:fd:2d:b1:
2a:b7:3e:09:12:bf:0a:06:2e:11:f8:cb:f8:62:d8:98:c9:61:
84:2a:af:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:28:34 2025 by rpki-client