This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
File: 52j8yLln1vHIgeDUmgxCCN8H-zc.mft (raw, json)
Hash identifier: OBpMkc2y5QUAAS7Tguzd0fHuOX+lbjWk0pDXwIk/JZg=
Subject key identifier: D6:9F:55:78:C6:E4:C2:75:62:5D:9C:AD:0E:12:7C:F7:60:6E:CA:61
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 03C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
Manifest number: 03BD
Signing time: Sat 20 Dec 2025 23:53:36 +0000
Manifest this update: Sat 20 Dec 2025 23:53:35 +0000
Manifest next update: Sat 27 Dec 2025 23:53:35 +0000
Files and hashes: 1: 52j8yLln1vHIgeDUmgxCCN8H-zc.crl (hash: UEuQxa9t4bd3m9Gx4ejcW1RyheiWMLFpOmOVjzH/VpU=)
2: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (hash: 3vF76S8iWJW8vHG1MAht+7FYZNQsdje1uuqCEx57cyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962 (0x3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: Dec 20 23:53:35 2025 GMT
Not After : Dec 27 23:53:35 2025 GMT
Subject: CN=69473700-61ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:68:93:e0:ab:ce:eb:06:d3:d1:1a:42:72:
02:d1:70:1d:c5:2d:ff:bf:e3:f8:ce:67:50:2c:25:
7d:25:ca:ab:12:51:bb:ac:d3:31:ef:3e:f9:17:85:
a7:3e:40:c5:23:3e:2e:0a:ee:b2:42:66:b8:05:a8:
e8:27:3d:55:e0:b4:3d:1b:49:ab:dc:ce:27:52:9d:
6d:17:ca:58:33:34:84:46:96:d4:02:18:b3:a5:bd:
f6:df:1a:48:6f:39:88:16:d2:41:f2:fa:f6:17:5c:
8f:ce:a7:45:f0:d8:67:d8:cb:25:7c:dc:10:46:ef:
15:31:5d:c4:d0:9a:87:c7:e6:51:b8:59:af:1b:0f:
f3:fe:48:9b:36:8d:90:e1:a6:d3:d3:26:1c:31:d6:
5b:f4:74:28:db:52:8d:e7:fc:de:96:dc:89:68:5d:
53:cb:39:4d:b7:54:19:84:12:33:b8:e0:9c:06:ba:
34:d1:86:bb:c3:91:45:75:f3:21:19:ef:87:db:1e:
a3:db:6b:cc:9b:c8:44:ec:c4:d3:70:e9:e2:95:27:
40:ba:0c:70:78:fa:86:07:0b:49:1a:47:dd:34:e1:
fa:80:dc:a5:38:5e:4f:8e:53:2b:d5:8e:46:c7:93:
82:98:90:e6:16:07:3b:86:96:b5:17:5a:d6:66:80:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9F:55:78:C6:E4:C2:75:62:5D:9C:AD:0E:12:7C:F7:60:6E:CA:61
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:90:f8:3c:58:59:c8:7c:ee:d5:71:cd:fb:e5:cb:f3:50:12:
04:ca:e9:60:d7:d2:dc:df:96:b9:09:f8:fc:b0:57:0a:0c:b5:
71:da:f9:ce:90:52:17:73:3e:df:2c:9f:6e:57:c4:bb:5f:f5:
51:49:91:58:28:93:30:4e:d1:92:68:7c:c9:b3:65:44:bc:cf:
b8:f3:f6:be:6e:b4:81:c2:11:43:b9:f7:af:54:76:47:07:b2:
6f:5a:43:68:ea:7d:57:78:87:8b:0a:af:5c:05:97:61:19:de:
ca:23:d9:61:38:45:bf:20:97:8b:60:46:ea:4e:9f:74:b5:34:
c6:67:9a:bc:5b:0e:79:f6:c6:ad:8e:18:5d:7b:e6:67:0f:84:
66:9c:8c:50:43:4b:a4:a5:bd:b1:76:d8:93:f8:54:6c:54:91:
78:51:9f:f2:3b:53:99:89:40:26:d0:26:a6:ef:42:5e:a3:60:
c7:20:a5:56:10:57:85:6e:a1:6c:ff:5a:58:a3:ca:a0:73:72:
07:16:cd:e5:4a:f0:0d:14:84:1c:5d:d0:7b:e2:36:5f:d3:e9:
03:1f:ca:68:37:a1:b0:90:50:c8:0c:b8:4f:58:ac:a6:ab:ba:
f7:0c:00:a6:c7:05:e7:30:5c:88:d2:6a:76:3a:35:b9:75:cd:
41:9b:e6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:18:30 2025 by rpki-client