This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json)
Hash identifier: bON45rcRx5lMCzahcACfDGqDiH4pNn6q0wzhdk5hgIM=
Subject key identifier: EA:A7:31:C4:CE:D8:58:B1:7C:C7:9F:C8:26:9F:22:13:5A:7C:48:48
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial: 1352
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
Manifest number: 134A
Signing time: Sat 06 Dec 2025 16:33:05 +0000
Manifest this update: Sat 06 Dec 2025 16:33:04 +0000
Manifest next update: Sat 13 Dec 2025 16:33:04 +0000
Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: h474CUOQ63DyADbnKlriYOH+sHBOBRDGGEmlJY2M7yw=)
2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: RbGdGirRSx8vE2XqFSZoMmFoNMFa3vRAZrBLRz09P8M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4946 (0x1352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Validity
Not Before: Dec 6 16:33:04 2025 GMT
Not After : Dec 13 16:33:04 2025 GMT
Subject: CN=69345ac0-f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:60:09:6e:63:40:6f:6f:55:22:bb:60:04:
e0:d6:f1:31:2f:75:fd:2c:56:b3:bd:c2:59:ce:4a:
40:8f:34:68:64:20:d8:37:99:4d:6c:f5:4a:c5:69:
a7:17:a9:db:55:be:db:5c:de:19:69:9b:e1:5a:84:
35:30:5c:9f:07:91:bf:15:02:2a:12:2f:01:bb:d5:
08:db:b0:fd:24:ea:e2:2a:43:3b:b9:fc:74:17:5b:
72:fc:9d:21:53:68:62:b7:c8:46:4d:c7:4e:f4:49:
10:e0:d6:d7:0a:75:8e:68:48:f8:4b:ce:a4:31:c5:
bf:4e:b1:fb:a7:9e:c2:0f:e2:d4:5e:a3:ec:26:d4:
1c:d7:8f:01:5d:26:f5:8d:13:b6:db:b7:0e:e0:45:
62:d5:da:d7:aa:cf:bd:78:34:d5:87:9f:5a:2d:3d:
41:c2:b3:94:b6:66:24:15:b1:20:98:9f:1f:15:70:
24:c0:1f:94:a9:93:ad:43:ef:bd:42:e3:5f:a9:01:
78:6d:d1:8d:a4:e8:73:e5:fc:40:6d:fe:77:f8:e2:
79:7b:d9:07:94:8f:05:d7:d6:a7:78:e3:c0:04:0a:
d2:75:40:bf:c9:cf:21:fb:54:3f:00:7a:9f:8a:57:
ad:52:a2:73:69:ba:00:54:cf:53:6c:02:b1:6e:f8:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A7:31:C4:CE:D8:58:B1:7C:C7:9F:C8:26:9F:22:13:5A:7C:48:48
X509v3 Authority Key Identifier:
keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:4f:8f:5b:9f:c6:e0:64:07:12:4a:ec:e4:2d:88:9a:34:ef:
d1:4d:16:bc:4b:e0:37:9d:54:87:0d:1d:79:b3:cc:97:39:8c:
2a:75:65:3a:f9:eb:c1:98:dc:c2:22:1e:24:76:ad:0d:bf:33:
ed:8d:25:1c:6a:2e:6d:7d:e3:13:85:54:8e:8e:52:12:73:e2:
99:be:0f:91:a1:89:aa:58:f0:85:81:79:ed:0c:b8:43:fd:30:
f6:2b:ae:f5:6b:c3:97:50:a4:70:4f:df:c2:ce:08:85:eb:45:
35:3e:93:84:5e:2a:a5:b2:a8:6b:c2:c5:af:85:95:14:c4:3d:
f3:35:ed:91:47:73:fb:88:84:b2:0a:aa:62:c0:fc:df:84:04:
0e:3e:f3:40:6c:98:a6:98:0a:42:74:f4:42:bc:ad:6c:0f:c2:
50:73:ff:e8:d7:a5:bb:ad:89:ae:91:a4:ef:91:55:ff:2e:dd:
e6:ea:42:a9:2b:67:5f:21:04:f3:7d:e7:b0:83:93:95:49:34:
07:9b:8d:80:4b:df:29:57:03:59:d7:f7:a4:05:23:09:a2:e5:
41:08:b3:5e:18:0c:87:f0:4d:2b:fb:c0:1b:d6:c8:04:fb:8f:
69:45:71:20:b2:4e:99:d7:a6:8f:15:e8:f5:1b:6b:27:17:01:
cf:08:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:10:37 2025 by rpki-client