This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
File: ed8QJTU18NZ_oR22ikx2NKpqRHw.mft (raw, json)
Hash identifier: oXOQ5qoxLxjFOFlmaA4fDVP8pKpXdPd2xb4qnJOPu+o=
Subject key identifier: B9:B1:19:F6:98:5B:25:F3:04:CD:92:41:67:94:0B:9C:55:7B:79:11
Authority key identifier: 79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C
Certificate issuer: /CN=A913C437/serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
Certificate serial: 0693
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
Manifest number: 068B
Signing time: Sat 20 Dec 2025 21:48:14 +0000
Manifest this update: Sat 20 Dec 2025 21:48:13 +0000
Manifest next update: Sat 27 Dec 2025 21:48:13 +0000
Files and hashes: 1: ed8QJTU18NZ_oR22ikx2NKpqRHw.crl (hash: XZ1cwJfchJbffQ0SAAbC/4dPll9ozcaEkhYS4DqprU8=)
2: BF195C829CD211EBA0E3CB58C4F9AE02.roa (hash: vieZUpQmzzJOorTO/HBg3bT9si532rk94383Z2tZWNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl
rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1683 (0x693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C437, serialNumber=79DF10253535F0D67FA11DB68A4C7634AA6A447C
Validity
Not Before: Dec 20 21:48:13 2025 GMT
Not After : Dec 27 21:48:13 2025 GMT
Subject: CN=6947199e-f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:4e:e7:1c:c9:92:a8:01:4f:a0:0b:ea:13:
5f:8e:b4:f7:68:11:e9:17:54:ec:c4:75:d7:27:53:
d0:f9:fe:1a:cf:97:0b:25:55:68:b9:09:c0:75:80:
ce:6e:0d:fa:dd:49:15:2a:c6:0a:29:6e:62:94:d5:
ae:be:02:ad:ce:b9:62:61:3c:fd:0c:a5:a1:69:ef:
73:78:c4:76:4a:b5:14:49:f0:0c:2d:93:cc:97:b3:
c5:2c:f0:ab:40:ad:3f:38:fe:a9:c1:0f:c1:e8:97:
cd:7e:ab:5f:23:fa:1f:d1:d5:6e:69:f4:86:74:b8:
96:ec:57:7d:7d:ab:d6:84:57:b1:c0:ab:b6:e0:90:
82:03:66:74:ac:14:31:bf:1a:62:c1:17:51:58:a4:
06:da:78:38:c9:85:42:67:d2:e3:87:7c:3b:82:fa:
cc:0e:fd:75:fa:51:90:a3:c9:b8:21:6c:30:1c:ce:
99:be:4d:a5:13:77:d5:33:fd:90:91:e0:29:67:f6:
e4:8d:6e:78:89:13:be:6a:80:d5:13:61:e1:32:37:
11:83:eb:95:4c:05:88:af:f1:9a:f5:76:47:d4:18:
09:c6:f8:f1:e6:dd:d8:e6:12:db:b4:a3:e5:c8:82:
73:ac:d6:3d:0d:8a:80:e5:86:9d:0a:b4:73:72:25:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B1:19:F6:98:5B:25:F3:04:CD:92:41:67:94:0B:9C:55:7B:79:11
X509v3 Authority Key Identifier:
keyid:79:DF:10:25:35:35:F0:D6:7F:A1:1D:B6:8A:4C:76:34:AA:6A:44:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed8QJTU18NZ_oR22ikx2NKpqRHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C437/663D183E9CD111EBA8D0BB57C4F9AE02/ed8QJTU18NZ_oR22ikx2NKpqRHw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:20:2b:22:6f:ff:a8:25:75:5a:20:b1:96:72:d3:0b:02:
ac:4a:66:e5:06:17:41:2b:37:d1:1b:2f:91:a6:32:9b:06:10:
da:21:a9:be:d4:58:52:bb:ee:ac:85:fd:64:81:8c:9b:28:8f:
f1:f5:fe:f3:5f:5f:20:2c:70:72:45:1a:f6:cc:a5:7f:db:28:
72:bc:61:3d:36:86:6a:3a:f6:2b:28:fd:7b:ef:a5:e3:9c:3a:
05:ba:bd:42:ee:e2:3b:91:9b:81:a9:a3:5c:ae:7e:a3:c8:3b:
d5:6b:dd:5e:5b:3e:b5:dc:86:4b:12:1b:94:fc:f8:aa:09:63:
27:e6:2d:7e:21:a5:48:35:6b:9f:3e:f4:b3:da:bf:0b:35:34:
36:14:ba:5f:b0:49:5e:43:97:0c:07:aa:f0:7c:61:b8:3d:01:
e8:e5:d5:58:16:f5:ff:1e:a5:ab:08:a6:28:72:4a:8f:df:91:
38:59:fc:f9:13:6b:62:ac:ca:f7:15:15:01:88:47:1f:d5:45:
5c:4a:55:2c:46:b7:6d:7b:bf:a8:de:79:1f:cc:e5:f7:b0:73:
96:57:b1:4c:50:cb:54:4d:96:6b:39:eb:e3:c3:e7:e0:99:3c:
03:de:24:b6:40:af:83:28:42:86:81:c7:59:13:9d:ee:be:75:
f4:d5:35:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:55:01 2025 by rpki-client