This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json)
Hash identifier: liJmk07qhQ6LMaf6Qfa4t3MfYA9viAymW8WIkXiJ9hA=
Subject key identifier: C1:F6:42:70:EA:0B:61:D0:D7:DE:48:9A:86:DB:B2:1E:D7:52:F4:20
Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Certificate serial: 0E6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
Manifest number: 0E63
Signing time: Sat 20 Dec 2025 17:28:06 +0000
Manifest this update: Sat 20 Dec 2025 17:28:06 +0000
Manifest next update: Sat 27 Dec 2025 17:28:06 +0000
Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: Coa6evY8z+JQh72B5OKU6hHzhgNEzT+W/n8kMk1QplA=)
2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3692 (0xe6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441
Validity
Not Before: Dec 20 17:28:06 2025 GMT
Not After : Dec 27 17:28:06 2025 GMT
Subject: CN=6946dca6-d76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:8c:ef:c7:3a:db:3b:fa:f1:d3:df:28:2e:
ee:6c:f5:d6:13:ec:83:bd:13:ce:58:10:ca:0a:57:
e5:e0:ad:5b:b6:e0:d3:34:0a:1a:e0:59:7e:4e:ec:
de:7b:bc:19:19:41:77:48:24:fc:2c:9c:1c:36:96:
bf:c7:84:3c:8e:2a:a3:7d:b0:49:9a:ff:99:ff:44:
5d:34:f2:ef:d4:e6:86:73:39:33:74:15:8f:3d:ab:
3e:e5:f4:2e:bc:be:42:13:8e:6b:b0:d2:be:54:47:
9c:1c:05:8f:f8:62:9d:1d:fd:33:31:cc:d5:b5:28:
0d:9d:ac:bb:ac:e5:86:0f:12:a5:67:fc:6b:a7:41:
07:a6:4a:a8:26:79:de:84:da:02:a4:b9:84:bf:94:
5d:48:e6:af:90:56:ae:c7:55:db:46:77:5c:50:b5:
88:3d:41:a6:c4:e3:0f:a6:83:40:92:0e:60:30:bf:
fe:8c:27:6c:e1:24:52:c0:77:d9:95:02:7e:60:db:
b4:4e:9f:0f:58:c4:17:69:29:4a:85:48:33:3a:08:
7a:29:e4:65:18:f2:d1:1d:db:36:5e:c4:7f:2f:07:
15:71:aa:b1:17:26:0a:9b:1c:c0:ef:16:c5:1c:5e:
47:39:9f:59:d3:30:4f:a5:f8:62:b3:ea:db:aa:b7:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:42:70:EA:0B:61:D0:D7:DE:48:9A:86:DB:B2:1E:D7:52:F4:20
X509v3 Authority Key Identifier:
keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:7d:21:de:86:94:03:73:ec:56:16:57:8e:a0:0e:d8:46:
06:ea:4f:07:b7:03:e4:d3:11:50:93:ef:ca:d7:2b:73:45:66:
7b:50:9f:4d:39:af:27:fc:59:fe:43:79:e4:af:0e:d5:fc:81:
3b:51:d9:c7:b8:8b:ef:4b:a7:03:fa:5c:9f:1a:99:b9:b3:1d:
8e:36:62:a2:97:b3:78:60:29:24:8f:5f:f1:a2:c6:7b:a4:c0:
b7:12:e5:0c:be:58:dd:42:6b:a8:b0:a4:b6:21:c1:9d:6a:b5:
b2:57:ec:08:ed:e9:5b:d1:6c:53:33:06:12:32:69:ee:2c:69:
bb:03:e3:78:25:35:9f:ad:80:20:b9:1d:76:ec:d2:31:2e:84:
40:cc:3e:d0:df:23:ce:36:8f:65:d2:21:99:19:79:ab:a9:16:
5b:53:00:13:c4:6b:9d:f8:7d:d6:12:e4:ef:79:65:31:b8:49:
d8:d8:de:90:49:e7:e1:40:d6:78:2a:ee:c6:42:d8:c3:b3:a2:
d0:47:47:79:ce:ef:02:a6:f1:eb:cf:12:e0:99:56:5c:ba:06:
63:c8:3e:31:26:32:5f:28:0b:f7:4f:e7:11:87:03:66:c1:b7:
a1:9b:78:cd:ed:14:67:54:b2:27:73:fe:96:ef:1b:e1:d7:20:
8b:c6:dc:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC
MTYyNTc0NDEwHhcNMjUxMjIwMTcyODA2WhcNMjUxMjI3MTcyODA2WjAYMRYwFAYD
VQQDDA02OTQ2ZGNhNi1kNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ECM78c62zv68dPfKC7ubPXWE+yDvRPOWBDKClfl4K1btuDTNAoa4Fl+Tuze
e7wZGUF3SCT8LJwcNpa/x4Q8jiqjfbBJmv+Z/0RdNPLv1OaGczkzdBWPPas+5fQu
vL5CE45rsNK+VEecHAWP+GKdHf0zMczVtSgNnay7rOWGDxKlZ/xrp0EHpkqoJnne
hNoCpLmEv5RdSOavkFaux1XbRndcULWIPUGmxOMPpoNAkg5gML/+jCds4SRSwHfZ
lQJ+YNu0Tp8PWMQXaSlKhUgzOgh6KeRlGPLRHds2XsR/LwcVcaqxFyYKmxzA7xbF
HF5HOZ9Z0zBPpfhis+rbqrc2RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMH2QnDq
C2HQ195Imobbsh7XUvQgMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG
NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv
eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2VX0h3oaUA3PsVhZXjqAO2EYG6k8HtwPk0xFQk+/K1ytzRWZ7UJ9N
Oa8n/Fn+Q3nkrw7V/IE7UdnHuIvvS6cD+lyfGpm5sx2ONmKil7N4YCkkj1/xosZ7
pMC3EuUMvljdQmuosKS2IcGdarWyV+wI7elb0WxTMwYSMmnuLGm7A+N4JTWfrYAg
uR127NIxLoRAzD7Q3yPONo9l0iGZGXmrqRZbUwATxGud+H3WEuTveWUxuEnY2N6Q
SefhQNZ4Ku7GQtjDs6LQR0d5zu8CpvHrzxLgmVZcugZjyD4xJjJfKAv3T+cRhwNm
wbehm3jN7RRnVLInc/6W7xvh1yCLxtwO
-----END CERTIFICATE-----
Generated at Sun Dec 21 11:15:31 2025 by rpki-client