This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
File: fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft (raw, json)
Hash identifier: vXcphZeJDk5TrsL5XPQAEcHXI3qwcfG2OdigS75L5Ic=
Subject key identifier: E1:0B:0C:C6:04:56:98:40:75:74:1A:45:78:8A:D1:01:C6:DB:77:FC
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 3559
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
Manifest number: 3516
Signing time: Sat 06 Dec 2025 14:42:40 +0000
Manifest this update: Sat 06 Dec 2025 14:42:39 +0000
Manifest next update: Sat 13 Dec 2025 14:42:39 +0000
Files and hashes: 1: fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl (hash: LGcdvtgP1d+yo1Z46MCxcYgVLoLaeQtFp4HPcLQKhcQ=)
2: B34FF580C40C11EB9C21CF7BC4F9AE02.roa (hash: y1aP2xpWM5Z9p4X69/I0EqD92yLEHPJ0HdxDyd7A8wI=)
3: C5859C724D7611EFBA188667C4F9AE02.roa (hash: aTe2/qHECp604MTOZNBT11/TWC/3VIpR1RLRNWUq1YA=)
4: E652AA52C40911EBA930053BC4F9AE02.roa (hash: 059V5evvVlwvqhYmAH8RCR6WncgUFs2g2N8S+IGfKUE=)
5: 0D47881A9EB311EC90138473C4F9AE02.roa (hash: jtNYB2wRKxdcsyRMOMGrPRMxmPYLg6mXDKTfhKPhrtw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:42:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13657 (0x3559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Validity
Not Before: Dec 6 14:42:39 2025 GMT
Not After : Dec 13 14:42:39 2025 GMT
Subject: CN=693440df-7a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:60:00:77:57:a5:7c:a3:10:d5:3b:ed:95:
49:bc:ab:a6:dd:4c:54:45:e5:81:8e:5d:c3:8c:ef:
ef:ee:b8:3d:40:85:9a:23:a7:76:bb:bb:d1:10:dc:
1e:84:64:80:0a:e8:1f:aa:7e:98:49:24:67:09:71:
d6:7c:c5:8a:e3:20:65:4d:1d:10:a4:e4:e8:74:e0:
9f:09:92:d0:f6:d2:6b:ff:1d:f8:47:be:7a:1d:d2:
1e:bc:51:43:b1:4a:49:9e:f4:03:14:35:ce:4e:83:
e4:cd:f6:71:95:3e:fd:83:9d:92:f5:a8:1c:b0:42:
05:c1:a5:d9:ce:cf:bd:92:43:31:50:f8:82:6a:82:
9a:ec:df:5a:83:85:10:e4:c0:6b:02:a1:08:24:f4:
47:fd:a9:67:33:9f:0a:89:37:63:b4:35:71:da:6f:
70:6f:eb:b4:5e:7b:aa:41:99:da:aa:f9:18:a2:48:
fc:a5:cb:93:66:10:0f:df:ab:37:5c:e6:7f:d4:24:
61:ce:3d:5a:b6:3e:68:0c:4f:c6:9a:e2:0d:06:6b:
a5:df:98:38:ec:0f:f9:1a:d4:24:09:26:12:ba:78:
f3:b5:b7:7f:09:dd:55:bd:ec:61:bd:d9:31:73:03:
e2:1f:e5:39:30:44:de:c0:2d:fa:33:97:d5:8e:c1:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:0C:C6:04:56:98:40:75:74:1A:45:78:8A:D1:01:C6:DB:77:FC
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4b:e4:1b:65:29:3f:3f:9a:70:7a:7f:59:34:70:af:2c:87:
67:85:85:9e:37:a0:37:00:9c:b1:11:1f:3b:05:c9:a4:3b:70:
30:fb:92:dd:36:e7:9d:33:55:b8:c5:1e:86:67:06:e3:34:7a:
0d:2d:e5:29:44:95:be:e9:6a:40:cf:d8:3f:a1:70:3b:7d:c8:
85:ef:a3:82:e0:64:ff:c6:00:02:b9:7f:f7:e2:1e:f4:ca:4a:
a8:a8:c7:db:fa:af:9a:e1:63:07:8a:cb:d5:97:41:e7:2a:71:
ef:50:c8:4f:5d:bb:3a:fc:3f:ea:7b:2c:73:a4:1b:4b:16:c8:
4b:11:ef:40:7f:4a:34:33:9f:02:93:62:8d:3f:8d:66:98:98:
fe:26:f4:22:6b:88:9b:ce:04:47:51:e2:3e:47:d0:dc:f2:fb:
99:c2:2c:d1:8d:0c:8c:03:9c:49:90:b6:90:4f:ac:f2:13:39:
3d:cc:05:24:33:37:e7:d8:13:26:55:49:f4:1a:c2:b5:b9:9a:
88:1e:b8:20:b2:87:1f:96:c3:50:f9:33:4b:0e:10:06:ec:f7:
9f:88:0c:00:15:a3:6e:01:0e:4a:cd:de:67:cc:95:09:90:c1:
eb:ad:c0:91:80:3e:13:03:fe:4c:65:8f:dd:1d:56:99:37:fd:
70:0b:36:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:42:54 2025 by rpki-client