This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json)
Hash identifier: gCFoo6V1bxXQyalmkGxjTrcTpq5LugQd2t0GELgtl8U=
Subject key identifier: 6C:08:17:35:1B:AE:64:4D:D6:9A:F9:52:78:08:1F:E3:A3:55:C8:50
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
Manifest number: 04DB
Signing time: Thu 04 Dec 2025 22:21:03 +0000
Manifest this update: Thu 04 Dec 2025 22:21:02 +0000
Manifest next update: Thu 11 Dec 2025 22:21:02 +0000
Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: gW4K5dwRbSUDUMjn8Wf1ZB9U39m+9Y3XrHnORA7O2Vs=)
2: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: 7VHkgX/mbThqgLkAc7wHG3m+rvoalBNxxWk0mMeVuao=)
3: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: NIvct8fJn9M1iEY9RRPmR0E04PRAFDynGMtQ70vSFyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Validity
Not Before: Dec 4 22:21:02 2025 GMT
Not After : Dec 11 22:21:02 2025 GMT
Subject: CN=6932094e-8688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f2:31:97:84:55:bb:e7:79:66:a5:f2:c8:d7:
40:f4:c2:7c:4b:36:05:c5:7d:81:43:f3:67:6e:52:
20:71:35:90:0c:76:b2:04:aa:f4:f1:29:56:2a:e9:
bf:fd:9f:4e:e3:29:e3:2d:90:c7:16:d4:57:07:c9:
fc:19:7b:f2:e7:2a:75:d6:db:94:8e:e3:66:d5:aa:
e3:c7:cc:45:32:21:e2:26:1a:8b:0d:5e:4a:8a:27:
94:6e:34:be:1a:c9:2a:a8:22:37:5f:0a:16:09:3b:
9a:cf:fc:c7:55:50:47:1c:9d:4a:d5:fc:3f:23:f7:
2a:c7:6d:23:15:66:2e:90:ae:c4:60:4e:32:72:a0:
a6:1a:a2:73:67:bb:fa:c8:bf:e4:fd:8d:3e:46:a6:
99:9e:3b:15:2d:61:e7:5c:89:64:be:59:8c:51:54:
f6:e8:9a:d5:51:01:a9:61:b4:16:0e:52:1e:66:94:
82:40:89:97:f6:74:c5:25:e0:c2:63:50:78:95:1d:
e7:86:9d:5f:ae:b1:e0:d5:fe:73:9e:f3:db:5a:e8:
c4:e0:3b:6d:a6:3f:5a:be:30:63:99:9c:7a:8a:2e:
b7:67:81:22:1d:03:d4:0b:de:7d:48:0e:79:16:f8:
4b:6a:9c:90:36:80:17:6b:3f:f6:2b:18:d0:1f:23:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:17:35:1B:AE:64:4D:D6:9A:F9:52:78:08:1F:E3:A3:55:C8:50
X509v3 Authority Key Identifier:
keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:76:46:0a:99:a3:16:42:de:31:35:6d:32:92:d5:e6:10:5d:
c4:52:c9:7f:82:24:ae:74:97:b2:96:09:0d:ea:22:93:0c:0c:
5f:74:f4:0e:02:42:44:1f:cd:cf:96:32:94:c4:91:08:41:2b:
ec:72:c9:c2:c7:a8:cb:aa:ec:71:22:cf:94:8f:44:54:23:d3:
fe:fd:ca:0d:3e:ca:3f:76:8d:c9:1d:7c:65:05:ee:21:ff:60:
2d:67:85:0a:92:2b:38:d2:c7:16:a5:2e:6c:32:ef:6c:86:92:
47:cd:f8:0c:f9:55:e8:07:6e:e7:5a:08:a7:f6:89:34:02:84:
d7:b8:d9:fe:c9:e7:c0:f4:1d:a0:63:17:2b:81:71:17:e4:97:
75:74:34:29:d5:b4:4e:39:8d:74:21:99:43:a7:64:84:19:b0:
b1:f8:5d:46:29:d5:08:c7:7f:13:4e:1e:47:94:df:23:8d:ec:
03:6e:76:ca:cd:42:6c:69:b6:b7:a5:74:12:7e:fa:54:d6:96:
de:5e:e2:8c:8b:3d:a0:e0:11:0b:78:d9:5f:3c:80:1e:d6:1b:
ad:68:ad:35:a6:d3:19:73:1b:f7:c2:6b:b6:8a:22:03:18:81:
cc:1c:cc:7d:73:c3:06:80:d4:86:03:c6:00:ee:3d:32:b2:28:
93:51:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:59 2025 by rpki-client