This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
File: SoXPE4hy0-RPkNe28wKPC1BnNMw.mft (raw, json)
Hash identifier: T1hGbhUuk7FaBZf2eDieGcGnaso24LKY3/fSyqJoc5Y=
Subject key identifier: 26:E5:23:5E:7C:89:1E:68:08:B5:96:56:75:28:86:70:4F:82:AC:CF
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Certificate issuer: /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial: 0442
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
Manifest number: 049A
Signing time: Sat 06 Dec 2025 22:59:49 +0000
Manifest this update: Sat 06 Dec 2025 22:59:49 +0000
Manifest next update: Sat 13 Dec 2025 22:59:49 +0000
Files and hashes: 1: SoXPE4hy0-RPkNe28wKPC1BnNMw.crl (hash: 1FOFm/M85JihtlEin5eLS27JwqbtzN4x7jcwqVWVKIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Validity
Not Before: Dec 6 22:59:49 2025 GMT
Not After : Dec 13 22:59:49 2025 GMT
Subject: CN=6934b565-016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:cc:8a:3e:64:1d:83:4a:77:49:2b:85:9b:
82:6b:27:ba:71:2c:e1:92:b1:41:81:fd:bf:f8:47:
41:0c:73:d9:fd:3b:00:df:b4:b9:7d:e3:e8:a2:e2:
bf:e9:fe:80:45:0a:ea:d3:f2:fd:1e:9d:00:e2:4f:
7b:0e:80:d2:2d:c1:dd:32:8e:63:67:40:8c:47:32:
7d:e7:ee:8d:ae:be:ce:a5:31:47:30:fc:3b:44:05:
18:a5:89:f3:c2:40:ee:07:f5:7b:24:af:23:2f:c0:
13:0c:95:c4:f9:93:4f:00:4c:4c:7c:8a:6f:b1:ef:
00:80:fe:3a:2a:0e:8a:fb:b6:1e:b3:3a:6d:2a:14:
02:46:3e:f7:d5:11:a0:31:d5:86:a6:90:dd:5a:26:
e5:c5:9c:48:7d:84:a0:84:03:18:6d:68:53:78:5e:
67:54:4e:02:e0:b8:f5:df:1b:79:91:5b:b1:12:b9:
3c:13:04:be:9a:8f:c7:3a:f6:e6:b4:51:e8:53:a5:
5b:d7:5f:68:9a:ff:d8:a6:1b:55:2d:8a:79:0d:9f:
9c:46:ae:7a:42:71:18:38:7f:39:33:0b:20:a6:9e:
7d:a9:93:11:0b:60:03:8a:80:ba:eb:32:64:96:15:
43:2a:08:cb:97:5a:f6:c2:39:d5:f5:b9:67:be:2c:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:23:5E:7C:89:1E:68:08:B5:96:56:75:28:86:70:4F:82:AC:CF
X509v3 Authority Key Identifier:
keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:20:87:53:09:ae:d8:8d:fc:b2:93:87:f0:fc:9d:7b:5f:fb:
7d:c8:41:3e:34:7e:8d:bf:85:1d:4d:d6:b9:64:a3:af:17:e6:
34:e6:23:9c:2f:e6:1c:98:dc:a8:b1:1a:0d:40:f5:35:fe:4d:
42:88:9f:23:b4:fc:7a:83:4e:6f:bf:08:f3:c9:93:73:c7:6a:
28:29:e8:16:74:78:f7:65:fd:e8:0d:e0:42:3f:09:6e:6a:96:
c9:f2:54:af:9d:47:5f:53:18:12:fb:3f:d0:7a:ce:34:bc:e7:
08:dd:b9:f4:86:1a:bb:7a:f6:ce:2e:96:0a:a7:82:7d:be:04:
84:37:6a:05:dc:bf:1d:7b:9d:22:ba:3c:f6:f6:e0:e2:b3:17:
ad:a2:e6:6d:b5:35:d1:da:d7:9e:9e:e6:b0:92:15:cb:0a:e5:
f1:00:4f:4a:82:2d:e9:cb:60:29:d3:df:2a:73:dc:67:07:9c:
0a:61:fd:49:1a:2b:0d:1c:80:a8:61:22:3f:4e:07:be:df:41:
0c:52:c7:30:06:d1:80:11:f2:1c:da:44:5e:7b:d1:ad:4c:84:
43:0b:c5:7c:1b:63:b5:6c:aa:e7:18:17:d3:33:d2:c8:af:bf:
93:1b:2f:f1:b6:5b:2f:6f:67:f9:ff:cd:f0:4a:b5:ef:12:d3:
c3:88:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:42:35 2025 by rpki-client