This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json)
Hash identifier: fDyq2dn7SGETQs7k5gAUGTT+1L+KE/b4bzF/eHDQJRE=
Subject key identifier: A4:0E:2C:E0:35:88:8A:F2:6F:35:A2:1E:79:7C:A7:F6:BB:B2:FA:F4
Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Certificate serial: 0145
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
Manifest number: 0142
Signing time: Sun 07 Dec 2025 02:44:23 +0000
Manifest this update: Sun 07 Dec 2025 02:44:23 +0000
Manifest next update: Sun 14 Dec 2025 02:44:23 +0000
Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: NEgFFamY72Zi8HMUocGpRrAn53CU/6yzilLuzslOKHY=)
2: 306EFA64A87611F089A2B881C4F9AE02.roa (hash: PG1Zg9YWfOZJBdRe/N5qDFjYHzUKz1vx7yczTSRfIp8=)
3: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D
Validity
Not Before: Dec 7 02:44:23 2025 GMT
Not After : Dec 14 02:44:23 2025 GMT
Subject: CN=6934ea07-6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:38:d0:aa:c2:3d:ea:97:86:3f:06:47:20:
ef:33:62:4e:06:50:86:42:18:ef:31:a1:3a:a9:33:
3a:a9:6f:8b:87:75:aa:3c:47:9e:69:b9:b4:09:c1:
ad:af:2c:c2:d9:c0:87:4a:da:85:73:96:08:13:aa:
75:a7:f9:63:9d:14:18:ef:76:57:42:c2:60:e5:e6:
b5:c6:bd:43:d8:dd:fb:f9:0f:d6:14:03:49:dc:31:
f4:5c:b5:f5:a3:df:3b:a7:11:23:17:27:b1:4d:fb:
a9:57:ad:04:80:25:d7:98:61:6c:76:5b:9a:3f:06:
d6:33:c9:0c:f1:10:60:53:69:a8:47:0a:86:80:e3:
c5:08:08:af:a0:94:3c:ba:a1:ab:ca:69:2d:e1:05:
10:a5:cd:78:67:a3:10:f1:76:af:bf:7a:70:fe:2c:
7d:0c:1a:75:a1:db:f9:6a:fd:6a:ea:a2:c8:38:8e:
08:a2:1c:e0:f8:cf:ea:e6:89:96:d8:19:29:49:51:
e3:10:02:fc:d9:41:36:6c:19:45:89:d1:55:9f:ea:
11:f2:e8:fc:7c:c9:88:e3:82:7d:1a:3e:a1:10:64:
0f:e6:04:07:45:6b:f8:56:cd:21:f8:e4:55:02:f6:
92:29:07:46:64:86:f8:93:33:67:57:94:ac:4d:18:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:2C:E0:35:88:8A:F2:6F:35:A2:1E:79:7C:A7:F6:BB:B2:FA:F4
X509v3 Authority Key Identifier:
keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:84:50:bb:a2:2b:b2:91:d1:5d:2c:00:eb:47:af:d8:d4:a5:
d3:9d:f6:6e:d4:b8:cc:89:4b:28:a9:96:83:70:4e:d4:b7:41:
90:2f:10:2a:72:59:36:17:89:f5:0e:6e:db:ed:18:d6:22:41:
d9:e7:53:f3:21:49:65:c9:ea:fc:52:dc:dc:9c:c4:1a:07:b1:
13:ed:ba:33:fd:4c:1c:bb:35:17:dd:22:14:9f:00:06:f0:2a:
de:24:45:1b:a2:d3:0d:f4:cf:5e:f8:4a:7d:7a:04:66:1a:6c:
57:1a:4c:89:38:cf:f2:84:d5:b7:61:24:f1:7e:32:7f:c1:79:
e8:3c:c2:80:8b:a6:46:e4:12:d3:e9:61:44:53:f1:68:22:a4:
ff:8f:20:e4:ac:2e:73:f8:90:52:a3:5f:35:a7:dc:56:90:06:
55:bc:b8:aa:82:05:ed:77:6e:65:f5:91:74:56:c5:3e:27:0a:
13:36:54:ee:36:13:88:4f:62:39:23:d9:9e:e8:02:6c:ca:60:
50:1d:db:47:cc:52:20:19:2f:f0:77:2b:09:9c:3a:51:cb:91:
e3:63:ad:92:51:c7:b3:73:8f:65:5c:38:1c:87:e6:84:a7:dd:
57:13:52:ff:c6:21:4e:ba:7e:4a:5f:b9:82:f1:54:e6:7e:29:
c8:7e:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:32:38 2025 by rpki-client