This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
File: XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft (raw, json)
Hash identifier: 5b8sc9Yzgpz3ZM5ExkAzH9nMx5voNX5ZOzeLKdvcpC8=
Subject key identifier: 68:9C:FE:5C:7F:54:7B:44:01:F4:E5:81:D1:1E:22:6C:49:E0:4D:95
Authority key identifier: 5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
Certificate issuer: /CN=A914F870/serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
Manifest number: A4
Signing time: Fri 05 Dec 2025 04:16:06 +0000
Manifest this update: Fri 05 Dec 2025 04:16:06 +0000
Manifest next update: Fri 12 Dec 2025 04:16:06 +0000
Files and hashes: 1: XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl (hash: pzwAw4pBHcBM8pPY0lpt+tpTnLMr1XDvDZLqpTPOo8U=)
2: 212A832AD7E311EF86266212C4F9AE02.roa (hash: Emvh4XBjBptzRrG38iyz0eQDBTxXK34fPTXWG8ay+kA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=5D55F1509B6F03424D2944F811F869938099BBBC
Validity
Not Before: Dec 5 04:16:06 2025 GMT
Not After : Dec 12 04:16:06 2025 GMT
Subject: CN=69325c86-9b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7f:69:91:23:a8:ff:6b:35:95:f9:72:97:78:
75:8b:1a:6f:a9:44:e0:b3:12:b6:45:07:aa:1a:c4:
14:11:a8:02:56:8f:e7:8e:8d:83:a3:e9:a0:e1:74:
fa:22:74:d7:28:c7:52:74:de:da:bf:9f:3c:72:3b:
3e:ea:85:4e:78:54:5d:cf:f3:37:fe:f8:93:29:09:
c7:d1:3d:ed:18:d5:dd:9b:eb:a9:dd:a9:f9:0a:60:
c0:ed:5a:83:f0:24:94:a1:af:e0:4f:66:fa:7e:eb:
e6:eb:e9:e6:ae:ab:39:9a:5a:66:0c:e3:a6:2d:30:
0f:d6:de:b7:1c:0d:bc:60:19:8f:c9:4e:a3:03:86:
1f:30:a9:a7:9f:c6:d0:3b:3d:10:f7:db:3e:80:89:
83:d0:cd:cf:f7:4a:c3:9b:a7:a9:9e:7b:32:83:54:
62:d2:98:b0:75:62:0a:9c:ac:9c:60:a3:65:31:89:
4b:8b:b9:be:0b:ba:94:9a:7e:50:a7:f5:7d:ae:cd:
13:08:60:34:dd:bb:6f:b9:04:8c:1a:ca:be:80:b7:
17:c3:28:73:db:a9:1c:a6:95:39:d7:3f:51:0b:d1:
87:de:2e:8a:a6:57:72:6d:ae:59:01:3c:07:b3:fd:
b8:87:00:bc:f0:4f:fc:d5:79:22:7f:fb:40:56:f2:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9C:FE:5C:7F:54:7B:44:01:F4:E5:81:D1:1E:22:6C:49:E0:4D:95
X509v3 Authority Key Identifier:
keyid:5D:55:F1:50:9B:6F:03:42:4D:29:44:F8:11:F8:69:93:80:99:BB:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XVXxUJtvA0JNKUT4Efhpk4CZu7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/C924246AD7E211EFAF0B3B7DC4F9AE02/XVXxUJtvA0JNKUT4Efhpk4CZu7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:37:67:63:0f:8f:ff:be:3c:88:39:ee:5d:a0:fb:ee:bf:1f:
a9:9d:d2:b4:50:4b:78:1f:a4:0d:1e:05:db:97:74:2b:b3:48:
25:f8:d2:0f:31:fb:85:d6:82:8a:74:70:9e:5d:16:40:5f:a8:
6e:a3:42:92:8a:96:c8:e6:42:0d:cd:8f:a6:fc:a5:21:d5:69:
9b:7d:1a:cd:34:dd:72:74:77:e7:db:39:40:c1:05:93:80:26:
84:94:41:93:57:68:cb:58:da:58:52:db:eb:8c:35:52:f9:21:
ed:48:5f:f1:ed:b0:13:24:42:fc:6e:d7:49:44:d2:2a:31:a5:
02:0d:97:64:1a:ba:34:58:f3:3e:fe:70:d6:f1:5b:fe:cf:80:
5d:5d:79:36:75:d8:d7:b0:d7:22:53:eb:6b:6a:dd:71:b7:41:
07:98:4a:3f:d5:7d:3b:e6:53:14:6a:97:c4:8b:c3:2a:42:2b:
5b:cc:4b:33:99:b5:e5:34:6a:07:05:26:2a:41:cb:9e:8e:33:
e9:a2:bc:8e:4f:94:18:48:ad:d3:06:5d:a7:4d:98:97:88:bf:
98:34:f6:d6:e7:3d:1c:e2:07:4b:ec:8c:b0:e0:b9:c0:31:f2:
ef:7e:f6:49:bd:0b:a0:8c:0c:e4:8c:ea:0a:89:64:ba:cf:92:
3e:6e:97:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:45 2025 by rpki-client