This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
File: RhQllCdGSHS-fet79CEnLLI9oYg.mft (raw, json)
Hash identifier: f67NZHt1i2p0xdxCSb3imlJMFWw7END0jPNJghujzSk=
Subject key identifier: 4A:BD:6C:44:7B:A7:5E:E4:A7:AB:9D:C1:FD:48:CE:5D:BA:DE:22:04
Authority key identifier: 46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
Certificate issuer: /CN=A9146304/serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Certificate serial: 1127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
Manifest number: 1120
Signing time: Sat 06 Dec 2025 16:46:26 +0000
Manifest this update: Sat 06 Dec 2025 16:46:25 +0000
Manifest next update: Sat 13 Dec 2025 16:46:25 +0000
Files and hashes: 1: RhQllCdGSHS-fet79CEnLLI9oYg.crl (hash: Wje4OAQzb7x/ksUcZyrPgn/bW91YCHfzk+rr26nCSOk=)
2: 65B35A86577011EC8F00A65AC4F9AE02.roa (hash: 4ddMyzUmIiWucVfUmzZbGoeIuz/De3rIfnynVpK/dAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4391 (0x1127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146304, serialNumber=4614259427464874BE7DEB7BF421272CB23DA188
Validity
Not Before: Dec 6 16:46:25 2025 GMT
Not After : Dec 13 16:46:25 2025 GMT
Subject: CN=69345de2-000e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:07:41:02:ba:6b:3e:96:54:d5:1a:f7:b7:
23:29:ca:86:33:84:51:2f:4a:d2:35:ca:8b:1b:94:
c0:87:22:80:a2:50:be:86:0e:51:2e:48:33:d8:54:
08:0f:41:7b:aa:80:e4:19:16:88:f8:e8:bc:b1:4b:
24:aa:95:6e:48:fb:07:92:20:2d:e9:92:8e:2f:57:
b4:2e:3d:da:7c:0a:a4:d3:84:3d:73:f5:24:51:eb:
b5:95:f8:ea:2c:26:35:e3:89:c8:16:85:82:80:42:
e2:35:16:3c:0d:b7:84:29:da:3c:b8:6c:fa:d3:e4:
15:35:d1:ad:9f:35:cc:77:c4:32:a6:1e:79:da:14:
d9:f6:1f:dd:1f:d0:20:22:2b:70:e5:ec:90:3e:05:
9d:7e:b2:a0:6e:01:d2:88:04:48:ab:d3:10:b2:af:
f3:cb:ad:95:ba:35:98:80:94:41:28:09:a3:30:b6:
4c:80:94:74:b3:d8:4e:fa:9d:e0:ad:10:c9:4d:98:
25:0f:8a:5f:2d:9c:7c:90:a2:95:01:2c:7c:70:0c:
d0:8a:a1:04:c2:18:ba:3c:6e:ab:08:8e:bb:76:cc:
00:c9:47:88:25:c1:d2:c9:01:e1:cc:d8:01:5d:d1:
b4:8f:39:c9:22:12:92:09:89:02:8c:71:5e:75:b5:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:6C:44:7B:A7:5E:E4:A7:AB:9D:C1:FD:48:CE:5D:BA:DE:22:04
X509v3 Authority Key Identifier:
keyid:46:14:25:94:27:46:48:74:BE:7D:EB:7B:F4:21:27:2C:B2:3D:A1:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RhQllCdGSHS-fet79CEnLLI9oYg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146304/E788C8A2258211E990B3783AC4F9AE02/RhQllCdGSHS-fet79CEnLLI9oYg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e6:d2:bc:c8:35:b8:a5:38:ea:79:a7:46:2b:17:a6:86:16:
f6:61:d8:13:04:7f:21:d6:07:1e:0f:ad:32:b4:56:66:47:88:
fa:7c:af:60:9a:c0:3a:23:1b:df:3e:f5:ee:00:d3:e4:22:0d:
c3:4c:11:2e:0c:14:75:49:6a:0a:c8:df:c2:d8:3d:08:a3:34:
d1:35:6d:08:cf:51:6e:d2:0c:af:7c:07:99:ca:75:b8:fa:d4:
e8:de:ab:6f:6c:12:49:3a:78:1e:db:e0:be:07:e0:62:dc:82:
a2:90:6d:60:f6:a9:43:5e:a0:e9:b6:b6:7a:8c:1e:64:ba:1b:
02:5e:f5:04:61:44:f1:d8:42:0c:91:12:17:c6:1b:64:cc:24:
55:31:6c:84:ce:27:a5:66:93:ea:6e:7f:6f:51:e8:e0:2e:01:
4d:97:34:67:4b:ee:90:57:18:a0:54:c5:20:7d:8c:58:1d:c3:
b2:0e:ff:60:4c:f6:83:07:62:63:5c:0b:e8:0d:f0:e3:bd:02:
cd:74:7e:c7:0d:fc:88:54:80:75:f2:56:ec:4e:f5:23:f9:4c:
a4:ed:e8:16:23:68:f5:41:43:b7:35:39:cd:81:69:f5:aa:1f:
7b:23:d1:cb:c3:4d:60:93:a8:2c:c1:1d:d4:2c:a7:2d:03:08:
d8:72:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:58:54 2025 by rpki-client