This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
File: 9MBkE3SXWli1TsAsEElzLsinCss.mft (raw, json)
Hash identifier: 7sn733ZXhx+ttCfrsBZh7+rGeUcerfVGXZZt+FmDAGs=
Subject key identifier: 95:3C:E0:18:CF:49:D3:5D:E6:24:AF:1B:3A:11:99:73:3A:82:AD:BF
Authority key identifier: F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
Certificate issuer: /CN=A914EF21/serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
Manifest number: 0704
Signing time: Thu 04 Dec 2025 21:55:53 +0000
Manifest this update: Thu 04 Dec 2025 21:55:53 +0000
Manifest next update: Thu 11 Dec 2025 21:55:53 +0000
Files and hashes: 1: 9MBkE3SXWli1TsAsEElzLsinCss.crl (hash: qPo+o7c1pfFgkK+KcZHMyKyFJyd4Y9NbHQ0PD30FgIc=)
2: 7740AE687F8A11EE89807F7CC4F9AE02.roa (hash: ioHyUTgCHnCGMUHWoGRwcexhSo8qMCJK1mxXffaCMDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EF21, serialNumber=F4C0641374975A58B54EC02C1049732EC8A70ACB
Validity
Not Before: Dec 4 21:55:53 2025 GMT
Not After : Dec 11 21:55:53 2025 GMT
Subject: CN=69320369-5604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:ab:ef:60:24:b3:fc:5b:25:84:7c:17:12:
18:a0:98:55:7c:48:6b:cf:14:71:f8:51:1a:fd:85:
ba:e0:91:f7:84:16:b9:c3:58:fc:2e:0a:d3:fe:c5:
0e:8f:5b:b4:4b:11:bd:88:b2:6d:a1:f6:8c:7d:e2:
db:df:01:e5:4d:ad:48:3c:89:98:31:46:7b:59:cb:
4c:f5:4a:c1:99:3a:64:37:1e:19:0c:24:b7:a0:9e:
51:46:31:7d:73:ec:c0:93:ee:80:d4:1e:c4:ee:e2:
a2:75:1a:e3:89:d3:e1:61:42:4c:9c:b6:ec:54:d7:
de:c7:9d:e0:98:83:4a:45:e0:e9:6f:18:3c:9a:97:
08:00:60:f8:ce:65:55:e6:c1:4e:53:b1:21:c7:78:
ed:09:d8:63:15:72:2f:08:45:9f:95:ba:55:89:89:
6a:9c:41:33:a9:2d:a8:8f:bd:0c:9d:eb:ea:df:d1:
02:0f:f1:0d:10:34:5d:1d:ce:2e:1a:e7:e8:c1:81:
41:7f:21:bb:63:80:35:fb:56:e4:cf:13:02:9e:a0:
eb:61:45:69:dd:1d:df:8b:6a:13:1b:a7:8d:22:33:
6c:4a:fd:6a:c9:22:ae:bf:94:73:5b:d1:11:7b:da:
9a:a3:4a:8e:51:33:c5:bd:68:3a:3a:d9:19:33:f9:
69:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:E0:18:CF:49:D3:5D:E6:24:AF:1B:3A:11:99:73:3A:82:AD:BF
X509v3 Authority Key Identifier:
keyid:F4:C0:64:13:74:97:5A:58:B5:4E:C0:2C:10:49:73:2E:C8:A7:0A:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MBkE3SXWli1TsAsEElzLsinCss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EF21/EADBB412018311ECB5641629C4F9AE02/9MBkE3SXWli1TsAsEElzLsinCss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1f:b9:1e:b2:aa:7a:de:35:54:44:bf:8d:6b:48:7d:32:89:
9e:81:c2:3e:bc:2a:d1:f6:d5:aa:46:a2:23:7c:51:ed:31:ea:
50:d0:4f:fa:57:af:0a:d7:36:c1:80:c9:4c:c3:6a:c2:bd:21:
07:1d:e7:a4:f1:94:0d:b4:23:73:39:95:c1:be:42:18:16:50:
95:ad:6d:4a:81:33:5f:13:04:fa:c4:0b:e6:41:dc:ef:22:59:
4d:e5:32:11:f6:91:ae:ed:dd:48:44:cc:26:ba:b5:b2:9d:bf:
12:b3:31:9c:ee:d7:c7:06:3d:ce:46:23:4e:c3:d9:16:b9:a7:
82:09:a4:e2:12:a4:1a:1e:96:65:3e:62:62:bd:0e:96:0a:e9:
26:1e:e5:9d:16:2e:86:0e:0c:7a:86:08:ce:77:08:5a:a0:46:
c6:3e:39:9e:ac:35:f3:47:d6:a0:66:ea:88:fb:b0:4f:e8:11:
26:5b:d2:1d:13:37:9c:a9:45:25:25:95:6a:14:4b:71:09:a1:
8f:33:c0:d2:98:f8:2f:85:50:04:73:0c:f0:55:32:c9:0d:7f:
00:eb:51:f7:bf:bd:cd:b2:23:ff:82:93:25:2c:70:a3:fb:9f:
70:39:1a:f7:13:aa:9e:95:a0:14:4f:7e:f4:58:6f:0b:01:cc:
4e:25:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:03 2025 by rpki-client