This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File: MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier: J/b3wa9QVGtFs2bNRidzRpTauL/1oNcr+xRPzAyCXsw=
Subject key identifier: CE:5C:80:A5:96:2C:DD:56:C1:7F:87:8B:CB:9E:19:50:33:F8:5D:CD
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer: /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial: 34E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number: 34E6
Signing time: Thu 04 Dec 2025 14:30:52 +0000
Manifest this update: Thu 04 Dec 2025 14:30:52 +0000
Manifest next update: Thu 11 Dec 2025 14:30:52 +0000
Files and hashes: 1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: NYka1ymVcciSxlT3DvLx2dOHILyPsrMYAeu9TxYeA2c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 14:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13542 (0x34e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Validity
Not Before: Dec 4 14:30:52 2025 GMT
Not After : Dec 11 14:30:52 2025 GMT
Subject: CN=69319b1c-0f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:64:ef:ba:69:fa:6d:0e:e0:7b:d7:5f:df:
f4:17:68:08:64:95:e3:20:a5:ca:5d:10:87:f0:6e:
ba:2f:9b:83:87:bf:79:02:bc:5c:7f:6b:2d:55:9c:
46:3d:cd:90:b2:d0:cf:8d:eb:e5:07:cd:4b:6d:ea:
d4:8d:64:e0:ed:c1:5e:a0:e1:32:92:4e:3c:90:a5:
73:11:1c:1c:f5:fd:2c:4b:ca:b8:f4:ec:19:3a:1a:
df:77:c8:4a:57:75:58:2b:b0:51:45:0b:19:f9:e1:
6b:98:9f:3a:ff:ad:24:c5:d2:38:48:6f:6e:34:23:
be:e5:1c:7d:6b:e6:29:bb:f4:47:d6:b6:24:dd:cc:
6f:e4:c9:00:9a:3e:af:95:d3:ac:20:76:da:1b:07:
33:f9:79:92:7b:d8:d0:36:c5:f1:80:8c:f0:de:ac:
f7:5e:0a:ff:53:68:63:a9:cc:8c:55:85:47:1e:53:
24:80:d2:46:4f:87:0a:1a:3d:e3:b4:53:c8:a6:fc:
92:c5:5d:cb:85:9a:19:35:85:0d:77:df:3b:60:ca:
98:1f:4f:99:7e:1f:10:22:dd:93:b9:58:4d:5c:d9:
2b:65:c8:db:c6:80:b1:3a:13:73:5c:a4:82:57:b4:
5b:45:a9:c6:65:10:63:23:ec:70:be:7b:28:4d:29:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5C:80:A5:96:2C:DD:56:C1:7F:87:8B:CB:9E:19:50:33:F8:5D:CD
X509v3 Authority Key Identifier:
keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a6:9f:27:d7:25:62:63:b5:2c:67:e5:05:0d:9d:fd:48:c8:
49:e2:1f:62:0c:b9:61:15:0d:df:05:9c:5c:d2:7e:26:7d:35:
11:6d:89:7c:3e:a6:d3:1e:79:05:1d:67:df:eb:e5:f3:bd:47:
0a:95:c9:04:fc:7a:39:70:dd:65:20:fe:36:c1:fe:49:4c:7f:
53:9a:d6:38:48:19:33:9f:8a:fd:0b:e5:88:27:49:e9:47:94:
22:05:c8:6f:ad:c4:c5:d3:95:7d:72:75:f2:e0:1b:5a:d5:10:
ad:65:5f:59:0d:cb:06:fe:ce:50:09:ae:c6:d4:be:20:1a:19:
ba:06:c1:5f:d1:74:06:0f:3f:0a:bd:55:43:56:32:6a:79:91:
06:27:38:f9:4a:4e:57:aa:c3:bd:0a:d2:1a:60:6b:35:04:9d:
9d:61:6e:fb:d5:19:31:23:b3:87:d7:4a:93:db:b8:76:93:d1:
f9:1f:98:8d:96:fb:dc:ca:f9:20:dd:94:ad:4a:4d:50:c9:39:
8e:02:29:bc:40:06:9b:ae:86:ec:1a:a1:2c:83:6b:ca:78:15:
bc:40:81:e4:1b:c5:2b:a1:2c:61:9d:30:6a:34:3e:94:36:f6:
89:7e:47:e7:a7:67:d6:09:50:45:52:d1:30:f1:af:0f:0a:1a:
b1:b8:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:10 2025 by rpki-client