This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
File: xt42pOReepkfxET4yxtFXxdGLI0.mft (raw, json)
Hash identifier: CIg8/rpXwx5CdDAaGG8D9wd/1ecuwvFBMGWEp3etCO0=
Subject key identifier: 98:A1:F1:20:FA:91:6B:80:5F:DA:94:50:7B:3A:64:46:1A:6C:DC:22
Authority key identifier: C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
Certificate issuer: /CN=A913C311/serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
Manifest number: 69
Signing time: Fri 05 Dec 2025 04:50:31 +0000
Manifest this update: Fri 05 Dec 2025 04:50:30 +0000
Manifest next update: Fri 12 Dec 2025 04:50:30 +0000
Files and hashes: 1: xt42pOReepkfxET4yxtFXxdGLI0.crl (hash: YHX4+yx1it+PjJwCuEHrywwPUGAWjFupSrT2yX+0+Qg=)
2: AEE8CD702FCC11F09626645EC4F9AE02.roa (hash: C2K9dK4do/Lq7H5EaXQP1EBA+uUbAkgLMeJKgVTTBgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C311, serialNumber=C6DE36A4E45E7A991FC444F8CB1B455F17462C8D
Validity
Not Before: Dec 5 04:50:30 2025 GMT
Not After : Dec 12 04:50:30 2025 GMT
Subject: CN=69326497-50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:21:c1:4a:83:40:d6:8d:64:a7:f3:c9:f6:
4b:80:f0:d3:39:cd:6a:30:0d:56:30:52:20:72:3c:
04:ca:ee:47:55:d2:7c:b8:cf:e7:e3:7c:e6:4c:d6:
07:4f:36:1e:75:b7:3b:59:a3:dd:87:dc:97:cb:0e:
28:f7:34:63:04:2d:0a:de:8e:6f:7b:73:28:41:54:
70:8b:18:82:82:e2:40:9c:96:ca:24:7e:f1:78:dc:
83:5a:89:67:6d:03:dd:d3:b7:a1:e9:42:f0:7f:93:
ee:3a:d8:93:c1:78:bb:24:cc:e1:ce:41:aa:5b:13:
98:9a:3c:08:35:3c:42:95:56:a3:21:b1:d5:64:7c:
4c:8b:98:74:c2:d9:a2:69:c9:be:d5:07:cc:df:b5:
07:6b:f0:b3:4e:1f:0e:9c:16:c5:fa:5f:64:56:c5:
1c:9a:25:df:f7:51:af:e5:89:c1:49:f7:77:1d:90:
92:bd:2e:0d:c5:1d:21:8c:c8:1a:c9:12:a2:94:92:
c0:52:78:5b:f1:55:ec:9f:ba:27:25:aa:36:d5:41:
df:66:c7:75:df:1a:3e:c6:38:65:3c:6d:89:df:0b:
67:b9:de:1c:ec:4b:ad:9c:1d:00:ab:0b:34:de:29:
55:e8:4c:e4:f8:c9:fb:28:18:52:0a:9e:6d:04:c7:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:F1:20:FA:91:6B:80:5F:DA:94:50:7B:3A:64:46:1A:6C:DC:22
X509v3 Authority Key Identifier:
keyid:C6:DE:36:A4:E4:5E:7A:99:1F:C4:44:F8:CB:1B:45:5F:17:46:2C:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xt42pOReepkfxET4yxtFXxdGLI0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C311/F1F7AF262FBF11F09A936057C4F9AE02/xt42pOReepkfxET4yxtFXxdGLI0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:07:44:fd:2b:53:0c:95:8b:fd:97:f1:37:a0:37:04:4f:1e:
16:7c:44:77:06:db:95:9b:b3:d7:4b:8c:2b:f3:ea:44:6e:ff:
3e:91:39:96:de:0e:5b:7c:80:e4:d0:97:35:b6:cf:7a:f8:39:
ef:6f:de:d5:b4:92:bf:ca:68:8f:c1:e2:d6:2b:fc:67:0d:3f:
1f:c6:18:fc:90:27:04:7f:dd:ee:e9:83:e7:00:20:9d:72:82:
3d:c3:3c:c0:7a:8e:54:98:1b:df:59:56:e2:ee:44:5d:f2:25:
d5:26:7c:b4:da:17:51:d3:bc:32:8e:fb:3e:0c:d6:8c:d8:c3:
80:9c:db:fd:d1:c8:b4:23:9e:52:8f:21:91:f9:53:27:e1:b3:
64:c4:13:f0:f2:59:91:b4:5b:39:74:e9:aa:3e:67:64:63:94:
34:d8:33:0f:29:c8:85:64:a5:f6:eb:18:1b:ea:81:72:3b:aa:
39:2c:01:4e:f7:81:e3:04:f7:ea:96:74:4c:4f:e5:08:c1:87:
ab:f4:87:6a:9d:d3:61:5a:7f:83:2b:d5:a3:d3:a2:19:69:67:
56:78:92:c1:4d:b4:5e:7c:9d:b4:b4:d5:f1:bd:c9:38:33:cb:
45:70:72:2d:84:83:42:76:b0:82:76:e8:58:bd:c7:74:c0:1c:
32:08:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:28:13 2025 by rpki-client