This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
File: KrJDLDrVEo7XPpnEYNBhH69NIg4.mft (raw, json)
Hash identifier: Evw5mrb03CevX6s1cINj4UxcANOFimAiCj0fAV5wMbE=
Subject key identifier: 9E:1E:2A:D0:C5:37:96:F5:1C:68:DD:F1:03:29:11:FC:1B:D0:96:39
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Certificate issuer: /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial: 9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
Manifest number: 94
Signing time: Fri 05 Dec 2025 04:33:30 +0000
Manifest this update: Fri 05 Dec 2025 04:33:29 +0000
Manifest next update: Fri 12 Dec 2025 04:33:29 +0000
Files and hashes: 1: KrJDLDrVEo7XPpnEYNBhH69NIg4.crl (hash: E4Zi2kDmnn8j9cDW348O6xMRKk6fUnHqwtAc8enbv4k=)
2: FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (hash: ACjymaT82Ts20I3seIpJ3qFJasSA4FVf/+MM9Q+0Im8=)
3: D6246110AA6F11F0AD515C63C4F9AE02.roa (hash: RGGyK8DspBxTZffeC/YcsDxozPm/op0sIdvWa7dUrhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:33:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Validity
Not Before: Dec 5 04:33:29 2025 GMT
Not After : Dec 12 04:33:29 2025 GMT
Subject: CN=69326099-4512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:c2:7c:e1:a8:57:8b:dd:77:c7:56:86:ee:
97:05:a4:b9:0d:36:8f:bb:e9:cb:37:c0:ac:23:8f:
f0:bd:61:09:e2:e3:71:b8:87:80:bf:eb:a8:7e:f5:
aa:0e:61:ce:f5:78:9b:0e:8a:34:d6:1c:eb:50:1e:
c3:0c:4f:07:39:d7:49:c0:be:8d:7b:95:d6:a3:4a:
ed:5d:ee:f0:4e:df:71:57:6c:d3:7d:55:f2:74:69:
11:52:ac:cc:f8:71:0e:79:8a:0b:10:e1:6b:7f:fd:
fd:e3:be:f1:8d:e9:15:64:e9:91:fa:2d:bd:e4:cf:
ca:9c:7f:cf:bf:98:2c:43:87:72:fa:4c:9b:ed:72:
2b:3e:da:47:ec:68:e4:06:df:e1:ff:64:46:9f:5d:
61:a4:94:73:85:18:3d:97:23:d6:68:f3:6b:69:cc:
fc:b9:d3:06:4c:4e:ce:a9:12:fb:91:0f:78:11:a6:
2f:30:ee:a8:b3:34:a0:25:10:81:d1:e8:c9:6c:45:
e7:41:83:29:70:76:fb:5b:68:c0:3e:1b:97:6a:3d:
45:6c:b9:be:7f:fd:65:b9:9c:a0:c4:58:80:d3:d8:
03:64:5f:0d:2f:4e:4b:87:2d:fc:1a:5c:bd:38:df:
87:c4:80:c3:cb:fd:59:f4:70:41:7c:bd:d0:2d:35:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1E:2A:D0:C5:37:96:F5:1C:68:DD:F1:03:29:11:FC:1B:D0:96:39
X509v3 Authority Key Identifier:
keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:66:66:d7:e2:7d:0c:37:a5:19:55:36:7d:75:71:57:e5:21:
70:eb:23:66:e0:4c:c3:7c:67:d7:9e:70:fa:12:e6:27:11:6e:
da:c1:66:dd:00:e4:67:e9:34:43:cf:bc:2f:72:ae:aa:56:de:
cf:31:8b:ee:ff:31:4f:df:c9:73:a8:af:3a:16:78:45:de:7b:
e7:35:52:72:4f:39:bf:a3:eb:34:2d:d5:b7:0c:0d:d8:22:6b:
5e:b9:93:68:7f:b2:e4:a0:24:80:f3:8e:e1:41:db:9a:b5:1b:
1e:56:1e:9a:7c:ba:96:40:11:b6:a2:1a:90:ba:79:47:a7:a8:
fc:2e:9a:02:72:11:a4:51:3e:ff:a3:2d:66:8f:8e:b5:8f:09:
ae:b3:e6:0e:34:87:64:43:87:41:01:2e:7d:4a:3a:0f:df:a1:
c5:81:93:5e:66:d3:82:74:72:12:fb:09:cf:e7:bf:cc:5b:94:
d9:d9:31:9f:f3:0c:53:99:74:78:9a:90:c6:3a:a8:2d:e4:2e:
ad:b2:dc:1d:f9:5d:ba:bf:82:34:cb:84:f3:63:d1:01:47:4f:
7f:4f:d6:44:ed:13:74:ae:5e:e0:5e:6c:f1:46:b1:42:7e:00:
ff:7e:f2:07:a8:be:12:85:6c:9f:7b:a9:4b:c8:e4:2e:a9:ec:
10:81:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:32 2025 by rpki-client