This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
File: An8FUlFPJEqU7j8GVypK9zNWVzc.mft (raw, json)
Hash identifier: j1I2iPG56uUAbKCaP1JNHORz27qNQ+T0MPaHiMyBY3E=
Subject key identifier: 07:85:B5:51:19:99:34:B9:63:EF:FA:28:B3:0F:A3:C5:2E:84:04:5E
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 0273
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
Manifest number: 0266
Signing time: Sun 07 Dec 2025 00:11:25 +0000
Manifest this update: Sun 07 Dec 2025 00:11:25 +0000
Manifest next update: Sun 14 Dec 2025 00:11:25 +0000
Files and hashes: 1: An8FUlFPJEqU7j8GVypK9zNWVzc.crl (hash: bIWGF1Jf5zeI7VbAWegOLR1tv0QuEGdVxEtEtXGZWR0=)
2: ED55D842ADB111F08582AD1BC4F9AE02.roa (hash: X5emtbwXDf4X/Pc0/iC1xxRCaFhoeR4CVG5IQrobByQ=)
3: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (hash: 4YDRwgWfjN1vzby5e89LZ7NBG042AaPIPiBWwyrl3v0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 627 (0x273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Dec 7 00:11:25 2025 GMT
Not After : Dec 14 00:11:25 2025 GMT
Subject: CN=6934c62d-dc21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:71:fd:b0:ca:55:57:98:8a:29:1d:25:e9:
9b:19:c3:ca:33:23:95:6f:21:f2:3d:7e:5c:d1:03:
30:10:fa:1c:d9:9d:c8:eb:90:56:50:b2:ae:07:24:
df:6e:04:f8:7f:c8:88:89:06:6c:7b:fa:bc:51:a0:
06:e0:a9:b0:61:9c:fc:f7:80:ea:d8:a3:53:9d:24:
54:f9:6b:be:68:1e:71:d3:be:48:d1:91:d1:36:a2:
b1:eb:4e:64:14:4f:96:e1:80:98:b5:c1:37:b9:db:
ce:25:53:96:71:dc:33:9c:3f:22:ae:2a:a8:a3:41:
b1:ad:c3:91:56:0e:9e:54:43:dc:e4:50:3d:59:27:
4c:6f:cb:46:95:f3:01:34:4a:33:1e:46:c8:d9:14:
ab:e7:05:2a:38:20:b5:18:cc:13:a5:46:35:53:5b:
65:3e:1e:01:50:57:a4:38:7a:91:b4:47:44:11:6b:
1e:10:4b:22:a1:22:db:05:0e:e1:2e:89:0f:c9:74:
45:aa:63:c1:d6:04:5a:db:62:89:7b:cf:b9:be:88:
86:99:a0:74:2c:26:f3:e3:d1:00:65:04:16:4d:05:
b7:54:01:1c:97:d6:c6:91:85:c0:d2:b0:06:8f:11:
da:bd:26:65:cb:4d:4f:38:40:ec:37:c7:5d:19:2e:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:B5:51:19:99:34:B9:63:EF:FA:28:B3:0F:A3:C5:2E:84:04:5E
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:36:d1:f8:8c:91:30:5d:11:5c:39:b8:75:a0:33:83:3d:30:
84:bb:4e:63:6d:7b:50:3b:36:26:bb:85:a8:30:91:67:11:24:
8e:77:5d:0d:ef:47:db:a3:bf:3e:32:01:99:b7:90:e6:04:f0:
d5:95:58:32:aa:f6:46:67:94:33:af:6d:79:16:45:d0:70:30:
98:39:e3:a5:a0:8a:2c:2d:99:59:dd:e6:fb:4c:e9:06:49:2f:
a1:36:37:87:3e:8b:62:bf:05:55:18:b5:cc:ed:e6:bd:80:4a:
68:de:88:38:58:13:09:1b:34:e0:c2:c7:e4:0a:ee:e4:fd:9e:
04:0a:7d:1d:f0:f4:30:40:1a:ea:f8:57:91:93:96:af:03:a7:
12:0f:6e:ce:0c:fc:0e:3d:9c:7f:8c:65:4c:da:19:c2:70:c0:
0d:02:ce:a5:27:da:02:87:ae:d1:c1:85:4c:df:c0:c4:82:0d:
1f:0b:64:a9:ba:d5:3c:45:d4:c1:fb:b5:0d:8f:4c:7f:43:24:
2e:ad:08:6a:32:a3:d5:73:a8:c1:25:bc:5d:58:7f:fe:c0:7c:
15:aa:14:e7:46:e1:3b:4f:f8:0c:d4:a2:b0:bc:54:44:81:31:
32:3e:9f:84:6a:3f:5e:d7:63:d7:de:c9:dd:84:77:2a:8d:d3:
11:4f:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:36:00 2025 by rpki-client