This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json)
Hash identifier: tmhUtDJt8bWvRjx/NTTtGmh0I95XqLI/0crbjbJNAws=
Subject key identifier: 0F:89:A4:2F:2B:06:71:9D:07:B3:EC:24:BB:21:37:2C:BF:9A:EB:D8
Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
Manifest number: 01CC
Signing time: Fri 05 Dec 2025 01:09:46 +0000
Manifest this update: Fri 05 Dec 2025 01:09:45 +0000
Manifest next update: Fri 12 Dec 2025 01:09:45 +0000
Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: 8ii8eg4uGX2o+oPDD42Prv2nT+Q+u5SrN/fLNsm4j5E=)
2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: mX0oS42d4Afnuz1c6BL0lN1MWESAc87z/AqUedcAt4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:09:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3
Validity
Not Before: Dec 5 01:09:45 2025 GMT
Not After : Dec 12 01:09:45 2025 GMT
Subject: CN=693230d9-9db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:70:2f:0d:2b:8c:ef:af:ad:79:04:7b:c7:
8c:72:16:45:f9:d5:8e:54:55:70:94:32:5f:db:f2:
21:b3:be:6f:96:3e:df:66:d3:bd:2b:aa:b6:c9:b2:
fd:91:d4:6d:0a:ae:cf:b0:bd:a1:f8:99:24:c6:10:
9f:06:33:83:4e:ac:6a:7d:01:c5:0e:0e:ab:8e:7e:
a3:5c:3a:7e:b4:31:8c:41:5b:f8:96:b9:b2:63:f6:
9b:c3:24:64:92:26:ef:af:0a:ca:8d:15:21:94:68:
89:34:32:35:e2:c4:40:6f:a8:fa:52:e9:91:8a:56:
22:20:95:0d:44:10:ca:6c:f8:78:bd:8b:6d:99:07:
42:0d:c6:2b:c3:d3:d8:57:ba:bf:03:52:18:f5:e5:
9b:fe:7c:a7:cc:d5:dd:43:d8:25:7a:18:22:12:cd:
a7:91:0e:28:ef:8f:d5:33:9b:f0:47:61:5d:1f:0d:
8b:a4:3a:5f:fa:d1:60:6a:5e:b9:ab:d4:2f:77:ad:
d7:93:66:cb:6f:78:46:1c:e1:b5:60:12:09:94:3e:
62:f0:0b:8b:a1:3b:5b:65:61:5a:06:08:57:63:fe:
c4:50:85:02:64:23:23:39:fe:29:c5:b6:80:78:e4:
0a:24:d3:f0:ad:f2:68:f5:4e:96:54:a6:c4:a2:d5:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:A4:2F:2B:06:71:9D:07:B3:EC:24:BB:21:37:2C:BF:9A:EB:D8
X509v3 Authority Key Identifier:
keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:fb:2b:93:3f:66:9c:0f:89:ec:e7:dc:10:17:b4:78:83:f7:
fb:b5:7a:6b:df:d8:e0:12:36:c9:a9:03:1d:bc:f1:1c:40:6c:
82:b2:43:43:de:0b:39:72:5f:51:48:8f:12:5a:ff:99:c1:81:
98:03:87:97:17:3d:b8:2a:c7:25:72:84:88:54:3c:ff:12:6e:
6f:68:4d:65:79:6a:11:d4:32:14:6d:cd:58:f9:c8:8b:48:b9:
3e:fb:24:08:d8:3b:ed:71:36:e6:5b:df:c5:61:1c:92:48:1b:
e2:b9:e0:67:30:28:3a:f5:a0:3a:9a:44:44:6d:e9:b7:9f:34:
44:65:a4:a4:1b:49:1b:1b:ef:46:5d:ef:95:67:74:de:7c:8f:
6d:32:3f:da:96:4e:d3:82:5b:5c:a9:8e:f9:5e:5a:d1:be:40:
59:1d:8e:7f:95:d1:c5:a9:b0:07:2d:cc:c5:02:ee:93:f2:58:
2b:55:f3:f8:dd:d8:2e:bf:c3:f5:5e:bc:f4:82:d5:55:b9:f5:
ac:73:ea:2e:4d:f7:71:7d:f3:7d:62:20:5d:d5:94:26:7e:0c:
b1:9b:50:a6:a0:d7:44:2f:04:94:1c:8d:4d:be:b5:5c:89:91:
e2:75:93:8c:a4:ba:4f:6e:62:ed:59:16:d7:78:1e:81:1f:e1:
b1:31:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:34:02 2025 by rpki-client