This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
File: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft (raw, json)
Hash identifier: l2HYxmDt0xoXe9x0uRGgjQZx/EQScgRwpg6cDzM9OB8=
Subject key identifier: BF:40:4C:7E:8C:B4:79:BD:3A:0A:6A:6F:4D:C3:3E:85:D9:77:AF:7E
Authority key identifier: F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
Certificate issuer: /CN=A913CE18/serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Certificate serial: 08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
Manifest number: 08
Signing time: Fri 05 Dec 2025 05:51:28 +0000
Manifest this update: Fri 05 Dec 2025 05:51:27 +0000
Manifest next update: Fri 12 Dec 2025 05:51:27 +0000
Files and hashes: 1: 9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl (hash: j2SWVrkiBtdiv7+wXQAnLYK0Y6LRvCDkgis+A+dfIT0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:51:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CE18, serialNumber=F4B0385A5DCDEFE6D4EC6C6CBCEA2155FD605717
Validity
Not Before: Dec 5 05:51:27 2025 GMT
Not After : Dec 12 05:51:27 2025 GMT
Subject: CN=693272e0-b72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d8:e0:1d:e1:80:15:7b:e8:c9:93:44:e8:b4:
23:68:16:07:0b:41:d8:27:09:1e:49:5b:1c:65:4e:
91:a0:53:e4:f3:42:d5:89:9f:f8:87:a9:0b:ce:95:
e4:f3:9b:3c:b5:0c:a1:a3:9f:83:73:82:8d:8d:1f:
8e:8e:6e:b4:81:45:09:e1:c3:55:59:ac:67:dd:27:
03:2f:30:20:dd:05:db:38:62:8b:f3:83:88:95:99:
ff:a9:ad:68:3f:7c:e8:13:dd:a5:a3:67:32:41:2c:
dc:c3:04:fa:76:e1:9a:6e:71:e8:a2:6b:0d:d3:ad:
fc:2b:f4:4e:c7:c1:e4:6c:e3:76:d7:c4:4e:1c:2b:
87:dd:6f:7f:2e:f3:c3:10:e1:93:46:6b:e4:01:50:
b2:ad:1e:72:1b:13:c7:56:34:0c:72:14:af:4e:ba:
94:da:6a:dd:28:a1:70:0e:f8:f4:5f:09:67:48:c9:
ef:b7:37:38:75:6e:19:ed:32:3d:5a:a7:b6:35:78:
7d:cb:7f:f3:f0:cf:e7:61:11:c1:a6:26:c8:7b:3c:
e7:b6:5c:5e:d6:79:d7:50:a4:49:87:02:26:11:1f:
4d:d6:ad:5d:a9:e3:b5:eb:70:34:34:2e:03:a2:d7:
ed:c6:40:a2:23:57:cf:61:00:a5:47:6e:24:91:51:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:4C:7E:8C:B4:79:BD:3A:0A:6A:6F:4D:C3:3E:85:D9:77:AF:7E
X509v3 Authority Key Identifier:
keyid:F4:B0:38:5A:5D:CD:EF:E6:D4:EC:6C:6C:BC:EA:21:55:FD:60:57:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LA4Wl3N7-bU7GxsvOohVf1gVxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/BDDC4DB4C68211F0BA5E1746C4F9AE02/9LA4Wl3N7-bU7GxsvOohVf1gVxc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:59:c0:03:47:a5:28:43:10:c0:cf:95:ad:13:a3:94:a1:
31:9d:34:32:0a:ee:a8:ac:0e:16:dc:5c:c8:b4:db:4a:d4:f5:
34:b7:16:68:f2:56:32:bf:7c:f8:5e:d3:cc:e7:9d:89:da:13:
d3:b3:b7:78:a1:4b:56:1c:03:03:34:6a:5f:9c:97:9d:cb:50:
95:c0:d5:ab:3d:eb:ad:39:5b:08:2c:a9:e1:91:cb:29:19:1e:
3c:14:0b:ed:73:e3:1a:96:7b:74:65:58:3b:9d:b2:fe:da:3e:
0a:f2:9b:ca:4d:cf:8c:50:aa:77:e6:4f:4a:6f:16:ad:84:b7:
31:a0:49:04:f2:2c:fd:b0:1b:79:7f:81:d5:e1:83:f9:be:88:
db:a0:c0:3e:ce:b9:c5:0a:10:e6:de:6e:65:4d:e3:77:4b:72:
13:fa:40:fd:44:f1:34:6d:6d:1a:8f:95:1d:4f:cd:96:17:8e:
b8:eb:20:34:6a:29:b7:ce:5e:19:25:e5:be:0f:06:9d:79:95:
b1:45:37:17:2a:f9:01:15:d8:69:ef:7f:6c:86:8a:c6:b3:a4:
79:48:b0:20:93:93:68:66:d8:c2:f8:e3:85:b6:ff:16:c1:ba:
a5:b7:37:a5:6a:04:a8:a8:c3:2a:b3:d5:ac:02:29:f0:65:1a:
8d:9a:e8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:23:12 2025 by rpki-client