This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json)
Hash identifier: B8TbiJe/+ZdQ+q4X5xeIhLnEarJE7/FwuEkpP1NnEXI=
Subject key identifier: 07:0F:A5:D1:B9:89:9D:70:DA:BA:37:D9:57:76:08:1D:D2:76:0D:59
Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Certificate serial: 0BA9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
Manifest number: 0B9E
Signing time: Sat 06 Dec 2025 18:17:48 +0000
Manifest this update: Sat 06 Dec 2025 18:17:48 +0000
Manifest next update: Sat 13 Dec 2025 18:17:48 +0000
Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: fzG8ROU/82fPMjgA/Di7na75l8fY+kLY2dg0iHcl3F0=)
2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: QwMnRtpt+1eT07NMpTybXiiH3v3R91ylnqw2cVEHLL0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53
Validity
Not Before: Dec 6 18:17:48 2025 GMT
Not After : Dec 13 18:17:48 2025 GMT
Subject: CN=6934734c-9e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:5f:55:46:cb:27:5c:54:10:90:0f:ac:f5:
b6:94:6d:c5:e2:e2:d8:2b:58:1b:b7:6d:20:70:30:
20:6e:2e:2c:11:32:b8:e8:5e:f6:b7:fd:c9:41:53:
67:38:c9:ef:73:79:2d:1a:09:2f:8f:bf:16:de:be:
63:83:5c:fd:1f:83:3f:46:8b:9a:8d:78:43:99:00:
40:fa:e1:d4:d8:a2:b5:f8:5f:6d:d4:51:67:8d:03:
2f:ed:61:b8:67:23:0d:63:bf:57:ed:1b:fb:46:fb:
8c:ad:04:09:64:13:4f:ba:b4:8b:d9:42:15:fa:30:
3b:2e:1a:ce:88:ca:ab:e2:3d:ea:21:6f:5e:7e:0f:
17:d5:e8:03:07:b2:ee:c3:a2:51:97:76:b2:28:62:
62:ee:0f:98:45:d6:7f:b6:f4:c6:6f:87:0e:6d:12:
7d:7f:64:82:ac:85:57:84:d7:2f:e8:e0:87:eb:98:
c4:ad:3c:1b:3a:9d:69:8c:4d:6b:95:bd:27:5f:16:
a4:60:3a:e6:38:53:aa:4a:61:22:81:d0:22:54:32:
35:e3:35:81:2a:1d:91:9b:f6:f8:82:2a:9c:67:e1:
b2:96:29:ef:5d:c3:3f:ba:3b:e0:92:fc:03:c0:a2:
a4:75:a4:ed:bb:19:61:39:55:ac:3c:2d:10:38:e3:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0F:A5:D1:B9:89:9D:70:DA:BA:37:D9:57:76:08:1D:D2:76:0D:59
X509v3 Authority Key Identifier:
keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:a7:5b:e5:77:b1:6e:a3:ef:02:de:dc:62:c3:e8:bc:04:
c3:bc:2f:aa:58:8e:d5:89:0a:4a:67:7a:5a:a2:18:3f:70:53:
19:0c:8d:13:91:06:e4:7e:07:58:a5:39:be:b4:c6:85:ec:e6:
a7:8d:51:df:5a:65:ce:df:1a:fd:a9:fc:a6:05:0b:e1:6e:73:
21:8d:02:55:45:28:1a:eb:9c:8c:5c:80:9e:c4:e4:25:17:bb:
61:59:ed:fc:79:83:36:c1:12:07:ea:bf:43:43:18:63:18:45:
9d:eb:fd:43:12:d0:5b:b6:c9:b6:27:6e:52:05:26:9b:4d:05:
b7:c4:28:f7:95:a7:38:32:b9:c4:04:e6:59:00:27:11:65:c7:
c7:73:29:0e:5f:de:ed:3f:50:a4:46:5d:32:7c:d3:9a:2e:cd:
58:66:0e:ee:ea:fa:38:95:d7:77:5d:3d:32:af:cb:ce:e6:b2:
37:f6:b8:0e:3b:74:57:41:0a:e0:44:90:67:dd:ba:29:26:79:
13:0d:fa:80:bf:b8:12:6a:e9:68:42:12:18:9c:4c:a7:36:7a:
60:9b:80:74:b9:a5:ea:f5:97:34:e7:4f:aa:6f:b9:6c:30:8c:
1f:d8:de:8e:a7:68:91:41:3f:c0:72:da:a6:1b:93:a4:99:a3:
28:2c:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:30 2025 by rpki-client