This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
File: bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft (raw, json)
Hash identifier: KK0ud0s7ujCOcykLwcmCB/zyloR6S2aZ5scJ5UEh7W4=
Subject key identifier: AD:CE:62:EF:FE:6E:4B:5F:FB:42:E1:A9:D7:F4:15:C5:8C:8D:56:E1
Authority key identifier: 6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
Certificate issuer: /CN=A9148F80/serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Certificate serial: 06E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
Manifest number: 06DF
Signing time: Sat 06 Dec 2025 21:01:28 +0000
Manifest this update: Sat 06 Dec 2025 21:01:27 +0000
Manifest next update: Sat 13 Dec 2025 21:01:27 +0000
Files and hashes: 1: bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl (hash: IXiYi7NiRny/5w08KmmSHq1QPEfLAgpDtAhNS8Q5cH4=)
2: 1C93BF747CD011EB9F876E78C4F9AE02.roa (hash: vUduh0w3eSZesFepaO929FwqL1Ap+OkfqL7IQgJ/yu0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1766 (0x6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F80, serialNumber=6CA2CFA688BDF9E2D6561608677A30C915243D0C
Validity
Not Before: Dec 6 21:01:27 2025 GMT
Not After : Dec 13 21:01:27 2025 GMT
Subject: CN=693499a8-e558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:7a:b9:8b:1e:2d:6d:c6:e3:25:c9:1b:2b:
e3:c1:8a:d3:31:ff:0f:8c:62:40:c7:e4:f4:04:36:
d2:68:6c:40:91:33:49:bd:df:fb:a6:dd:c5:c0:c2:
89:ba:08:d9:07:3f:fa:41:d1:de:70:5e:2c:64:fe:
d6:cc:cb:af:e3:0b:dc:10:de:69:b4:bf:0e:3c:27:
b0:98:f2:89:f2:41:f2:6e:9c:8a:d7:88:15:78:69:
9d:f9:51:b5:93:f3:cb:2c:92:9c:1f:b3:a8:29:cd:
b1:43:90:ca:d3:2c:ba:0a:d6:65:8e:fe:03:10:88:
9d:7c:4e:e0:35:f4:87:75:9d:cf:ad:0e:39:91:0a:
58:71:53:5e:42:1e:f2:6b:76:84:f7:66:8b:48:36:
27:d0:1c:db:18:4a:89:f8:15:f5:ef:05:19:6d:83:
e8:1b:4e:3c:5f:16:6f:f6:37:ac:f3:7b:f0:35:ef:
3a:4f:26:49:3b:c5:5c:5b:4b:e0:9b:df:28:70:92:
ed:76:6a:29:14:4c:5d:2b:e4:b5:18:1d:96:f1:c5:
50:cc:2e:f0:94:c8:b0:f3:fd:3e:2a:c6:ae:80:dc:
78:cb:1b:da:10:07:2a:5c:ce:4a:45:ac:c1:af:3f:
32:e6:98:31:dd:d8:a5:63:fc:6b:70:06:2e:83:54:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CE:62:EF:FE:6E:4B:5F:FB:42:E1:A9:D7:F4:15:C5:8C:8D:56:E1
X509v3 Authority Key Identifier:
keyid:6C:A2:CF:A6:88:BD:F9:E2:D6:56:16:08:67:7A:30:C9:15:24:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKLPpoi9-eLWVhYIZ3owyRUkPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F80/071DEA407CCE11EBBB882976C4F9AE02/bKLPpoi9-eLWVhYIZ3owyRUkPQw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:71:3d:a4:82:da:3b:bf:26:6b:30:db:55:fd:d5:0c:5f:2c:
d1:4d:32:2d:a4:1d:a6:e9:d8:9d:7f:e1:b6:9e:c6:df:78:a1:
99:37:5b:dd:64:c7:09:5b:cb:aa:6a:38:5b:08:d4:5e:c6:1b:
a3:c4:1c:e9:ba:62:43:f5:9a:96:ef:5a:0c:e1:34:57:6d:d9:
8d:84:0b:ce:bc:3d:28:8d:1a:ea:44:7d:83:b6:f4:4e:73:41:
24:5d:50:2e:31:2d:e5:9e:58:f0:5e:ee:45:3d:5c:d2:4d:fe:
83:d7:5b:37:0d:78:85:cd:57:27:07:ad:7b:ab:50:76:ab:87:
03:8e:78:89:6b:0c:73:f4:a8:5a:70:3c:c6:57:77:0b:44:a2:
eb:31:80:43:55:85:b4:ae:64:48:52:87:4a:dd:6a:1e:66:87:
1e:df:e2:36:f2:75:e0:2c:50:8a:78:2d:91:4f:4d:bd:5b:80:
66:13:58:49:52:75:79:bb:48:0c:7e:00:65:16:7b:b1:e0:44:
44:8d:fd:25:ac:80:56:e1:73:bd:51:03:61:ca:e2:d9:4b:c8:
a3:1d:82:80:9a:4c:d3:08:e6:91:e3:c0:eb:fb:0e:4a:f5:78:
79:8f:5e:99:b7:0e:6d:e0:c2:8b:45:8f:d3:5d:0d:2a:3f:d2:
47:f6:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:39:13 2025 by rpki-client