This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
File: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft (raw, json)
Hash identifier: lNx/XiyC1u2WmsLwFdHB3dkgXevl92NlocKABMIeGxM=
Subject key identifier: 52:67:A0:89:4C:56:AC:D2:B0:BF:B4:9B:6F:F6:93:3A:73:11:50:BC
Authority key identifier: 4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
Certificate issuer: /CN=A9144F34/serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
Manifest number: B4
Signing time: Fri 05 Dec 2025 04:04:15 +0000
Manifest this update: Fri 05 Dec 2025 04:04:14 +0000
Manifest next update: Fri 12 Dec 2025 04:04:14 +0000
Files and hashes: 1: SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl (hash: vbia+CVq8W3rPB3thMnyF/KlItSU1hIY9UNEPmsNNNc=)
2: 4965C7C02E4411F0B187B122C4F9AE02.roa (hash: vT0qzVdoUmxJ/TJ/AidkSPg3ugEyyFgQIDSZRoXd/0g=)
3: AA14EED2BDE911EFB07EE682C4F9AE02.roa (hash: 8Lz3SihiRlFf9NOxeybLJutdQF61khJ8l8jmKMF421Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144F34, serialNumber=4B3108BC5758843D63DFF6FC64097F2B1644CB8A
Validity
Not Before: Dec 5 04:04:14 2025 GMT
Not After : Dec 12 04:04:14 2025 GMT
Subject: CN=693259be-65d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:19:3e:9e:33:b6:04:dd:fe:ae:49:9d:a0:
28:02:fd:d3:36:3b:24:09:bc:0e:da:c0:75:1d:61:
c8:33:19:49:35:5f:51:87:93:c7:63:f0:c0:c9:de:
ce:93:4a:7a:53:c1:f9:8c:7c:52:4a:76:24:81:c0:
56:df:bc:4a:7a:e0:62:9e:58:db:83:12:24:b3:8c:
04:50:7c:12:4d:00:6f:53:3f:fa:34:74:35:b3:76:
8a:6d:97:4e:f2:48:bb:9d:06:62:6e:4a:70:a5:79:
00:72:16:06:81:ca:5e:51:4a:b4:62:1c:56:6c:d4:
14:ce:17:ca:7b:ad:95:72:bb:bc:32:35:eb:2f:dc:
38:66:88:73:a7:a6:21:f0:14:ff:f3:20:2d:57:7c:
3a:67:29:f3:20:a8:c3:65:b3:d6:f9:94:c4:ab:55:
d7:22:c2:2a:28:04:7f:ec:bc:1b:80:4a:ed:5a:74:
8d:13:ff:e3:1c:e1:93:85:b9:5a:82:36:f7:5b:e0:
71:89:2a:ff:ca:43:3b:7d:c4:fb:67:da:88:86:50:
e7:18:92:85:91:db:cc:83:f9:cb:8d:06:77:61:81:
98:ee:06:e4:9c:f3:21:d2:97:38:32:9f:81:87:d3:
05:4b:30:57:8c:fc:f0:1d:22:16:75:d9:04:a3:01:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:A0:89:4C:56:AC:D2:B0:BF:B4:9B:6F:F6:93:3A:73:11:50:BC
X509v3 Authority Key Identifier:
keyid:4B:31:08:BC:57:58:84:3D:63:DF:F6:FC:64:09:7F:2B:16:44:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/4D22EEE0BDE911EFBFD53882C4F9AE02/SzEIvFdYhD1j3_b8ZAl_KxZEy4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:56:44:84:6f:4b:0a:7d:2f:e9:c2:b1:8f:47:e7:d1:20:12:
7d:f5:c4:82:87:14:b1:87:ee:20:1f:83:6e:a6:3b:fc:40:48:
9a:93:c5:49:5e:ca:33:5a:22:93:3f:ee:0f:6a:8b:b9:83:a1:
42:69:75:64:fb:36:b2:c3:b3:ed:b0:f9:bd:85:98:d2:2d:31:
79:c9:5f:f4:f7:e2:d5:80:42:bd:66:42:34:9b:09:b4:42:c5:
ad:4f:22:bd:56:a6:14:a4:95:d4:72:e8:26:ab:1b:35:90:52:
fa:57:59:7c:c2:ac:9e:2b:fb:5c:47:b1:be:09:d8:1d:72:01:
84:f5:47:0f:a6:a0:6a:5a:3d:98:18:1f:dc:70:b1:43:a7:91:
30:7c:49:61:85:73:cf:22:4a:1b:72:18:ee:51:09:90:58:dd:
65:72:5d:44:b2:75:4c:ae:12:93:80:5f:40:e9:63:3f:f9:00:
5b:7c:6a:38:e9:34:87:3a:ca:a1:ca:d8:30:41:0c:2c:66:31:
68:46:cd:1d:54:11:f1:03:d9:7c:31:7a:7c:c7:ca:fc:60:10:
69:e5:23:8a:5c:27:8b:90:60:29:2e:ac:5e:eb:09:c2:dd:a4:
24:d0:4d:87:a8:4d:ea:13:c2:be:f6:43:68:a2:ee:14:8e:52:
f5:e5:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:49 2025 by rpki-client