This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
File: iKLLRiSAG8nHraIjg5_DxTbH-yY.mft (raw, json)
Hash identifier: dc1asHEY3HyftKLJsCxBwlaQ8LmqnyWQp18VfJI4QJU=
Subject key identifier: 27:DA:81:0A:20:8B:99:DC:09:C0:C5:95:00:90:CB:9D:F6:50:F8:42
Authority key identifier: 88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
Certificate issuer: /CN=A914F937/serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
Manifest number: 019C
Signing time: Fri 05 Dec 2025 01:35:34 +0000
Manifest this update: Fri 05 Dec 2025 01:35:34 +0000
Manifest next update: Fri 12 Dec 2025 01:35:34 +0000
Files and hashes: 1: iKLLRiSAG8nHraIjg5_DxTbH-yY.crl (hash: GQpiEWaDwQWlDr9eXESwHjXpFyCH/uB9c8lH5ws41NM=)
2: 8D88B9125B2311EE86CC6A71C4F9AE02.roa (hash: 8QOgqDdN+ptFq5t2Do1YrPeFHrdcCMOhvnCtIt6h2xM=)
3: 4BFEFFA0F62411EEAF3BFD14C4F9AE02.roa (hash: wS/1XbTV0fUfoxUiBL8wib+ZANzACMiLYvLQVQtAvJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F937, serialNumber=88A2CB4624801BC9C7ADA223839FC3C536C7FB26
Validity
Not Before: Dec 5 01:35:34 2025 GMT
Not After : Dec 12 01:35:34 2025 GMT
Subject: CN=693236e6-2b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2f:41:4e:51:b4:21:33:14:0b:1c:4f:e7:3c:
4d:db:36:49:3e:b3:b2:9f:d2:16:b0:63:3d:6f:d5:
3d:5a:31:02:55:2f:95:f1:19:b3:71:2a:1e:ab:c3:
5c:20:3b:37:21:7e:93:23:86:31:8c:fb:8f:40:42:
0b:0c:d0:01:18:2f:a5:65:6b:c0:a9:b8:8f:81:72:
b0:70:40:7e:57:70:7e:b1:42:65:a6:cc:71:b8:16:
78:88:48:95:9c:55:0a:c3:77:70:07:ae:c6:77:0a:
36:35:c2:78:5c:45:dc:2e:d5:2c:45:7e:e2:cd:19:
34:eb:3b:23:2a:4b:b1:5b:de:8f:04:72:a5:12:3e:
9e:47:72:a9:9b:9d:f9:55:46:b0:b1:fc:e8:03:e1:
b7:51:d3:d5:cb:04:0f:7e:2c:c3:cf:2a:04:40:b0:
52:40:97:e2:57:92:cc:b1:45:2b:91:a2:5b:92:f5:
fc:53:05:df:b7:31:ca:e8:cc:df:12:dd:fd:3e:4f:
76:19:62:d1:df:f1:1e:76:57:f0:f8:f4:d3:a9:5b:
db:53:a2:c4:52:71:8c:73:ba:32:f7:b6:c7:c7:4d:
26:94:b3:b9:c0:6c:5d:ef:3b:25:53:77:53:93:7e:
ff:c8:78:9c:20:9f:31:62:0f:c8:fd:4a:43:85:d7:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:81:0A:20:8B:99:DC:09:C0:C5:95:00:90:CB:9D:F6:50:F8:42
X509v3 Authority Key Identifier:
keyid:88:A2:CB:46:24:80:1B:C9:C7:AD:A2:23:83:9F:C3:C5:36:C7:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iKLLRiSAG8nHraIjg5_DxTbH-yY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F937/26B4981E5B2311EEB8773F70C4F9AE02/iKLLRiSAG8nHraIjg5_DxTbH-yY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1f:6c:d9:f3:61:4b:bd:ff:a6:bd:d8:46:49:b2:d9:3d:37:
69:49:29:16:a9:65:29:a3:b3:57:c3:4f:0e:76:d2:18:8c:85:
53:a3:b2:cd:b9:68:b5:aa:e5:84:9a:80:66:40:f2:cf:54:7e:
81:b5:3f:5d:ab:4d:b3:d8:8a:76:f7:7b:da:43:62:24:64:35:
df:dc:50:d4:66:d8:0a:8c:d2:18:cd:c2:c0:78:18:73:9a:2e:
db:02:ab:01:e7:68:3a:5e:99:ea:7e:de:15:97:db:5f:fa:35:
1a:2b:26:4a:1a:a2:0c:39:66:1a:b7:7c:5e:5d:9a:23:e7:bd:
e0:8c:56:b6:36:be:f6:a0:a4:c1:d6:93:4c:d5:cc:01:79:ec:
97:d5:b1:b2:27:ba:a1:13:a3:01:a5:33:71:64:da:0d:e4:cb:
bc:8d:24:ca:32:31:05:de:29:72:72:bc:d1:44:bb:6b:48:9d:
31:67:b1:83:98:f8:03:88:b9:84:56:dc:f4:96:4a:c6:a8:c3:
a6:5f:bb:c2:8d:8e:c7:35:ad:e5:36:4d:e8:04:00:13:3d:c7:
c3:0c:40:1c:48:da:a7:13:35:8a:ce:71:a2:7d:cb:13:60:60:
93:a4:29:7b:df:b1:21:e4:65:11:29:09:43:d3:d3:5e:36:32:
5b:c3:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:18 2025 by rpki-client