This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
File: 67mxD9JPdAljNjwtk1eAidsN5_U.mft (raw, json)
Hash identifier: Ogu7MbNwJX7XRTMo/e6jxYsUDxdVrXCUKKNR+YGU5R8=
Subject key identifier: B6:C2:F7:5B:66:A0:F6:CB:1E:61:09:7B:4E:58:27:BF:FF:89:5F:09
Authority key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Certificate issuer: /CN=A915393C/serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
Manifest number: EE
Signing time: Fri 05 Dec 2025 03:21:04 +0000
Manifest this update: Fri 05 Dec 2025 03:21:03 +0000
Manifest next update: Fri 12 Dec 2025 03:21:03 +0000
Files and hashes: 1: 67mxD9JPdAljNjwtk1eAidsN5_U.crl (hash: ohPigSLKgFECGxHCnWy3Pt90t8RVO0dlrbcB+/CO7kE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl
rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915393C, serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Validity
Not Before: Dec 5 03:21:03 2025 GMT
Not After : Dec 12 03:21:03 2025 GMT
Subject: CN=69324f9f-f56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:9c:87:98:85:51:0b:d5:01:3c:e3:a0:ea:
de:2e:2b:e8:ca:4f:4b:a1:b6:fc:0f:a6:e9:02:1f:
6a:58:3a:48:4c:e0:74:5f:0d:47:37:c0:eb:87:fa:
2a:c8:86:cf:1c:be:89:3e:33:cc:f8:68:54:c3:44:
eb:fa:55:4b:b4:5d:13:e8:96:06:b2:5d:bf:69:52:
a3:47:bd:37:89:74:ba:f6:1a:de:af:2f:f4:44:8e:
d9:46:7e:eb:0c:b7:88:a6:fd:12:72:2d:4c:7f:8e:
6c:77:98:7c:94:08:ed:e5:d7:35:7e:80:1a:bb:f1:
e2:f8:92:d3:e3:0e:42:26:53:ba:d0:2f:18:52:b2:
a7:11:17:04:81:83:b4:79:93:82:7b:9f:83:72:7f:
10:4a:12:60:40:5f:e6:94:b8:19:d7:90:c9:a6:87:
06:44:7e:9c:e7:a0:99:2d:78:98:e8:6b:de:bd:cb:
38:6c:2f:3e:27:34:0b:ec:86:33:69:8b:46:14:98:
f7:27:39:69:19:12:73:9f:a0:7a:f1:70:af:08:57:
4a:fc:a4:08:53:7d:45:e5:b4:40:45:d5:30:05:13:
31:a0:34:86:c0:81:1a:e0:28:3a:82:48:70:c5:0b:
df:f8:1f:5f:b1:48:b8:62:9c:73:6a:8e:60:07:c5:
84:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:F7:5B:66:A0:F6:CB:1E:61:09:7B:4E:58:27:BF:FF:89:5F:09
X509v3 Authority Key Identifier:
keyid:EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:8f:a2:5a:e8:e8:ee:a0:82:88:b4:02:c1:3a:00:72:c6:82:
7b:f2:a7:03:5b:e2:58:f9:f8:b8:d7:9d:6f:8b:5f:49:d1:eb:
bd:33:bd:c2:4c:cf:b3:f5:5c:7d:e2:99:67:20:a1:0e:c9:a1:
3a:1d:ab:5e:c6:9c:e2:e9:61:a8:a2:85:14:11:a3:cb:c2:b5:
a5:3e:07:6c:f2:b8:c1:09:0a:56:40:8d:15:97:9d:6d:a9:67:
fa:a1:30:42:e7:30:92:5a:5b:95:80:19:46:e7:2d:37:80:ef:
4c:18:17:26:80:93:93:bb:42:b9:49:74:7f:0a:ce:4c:6c:02:
d8:34:e6:2c:41:0f:9f:73:34:3f:e5:79:12:57:26:fd:f0:d6:
a8:3c:f9:3f:58:c3:b9:49:c4:07:76:d0:2b:ec:d4:d7:40:16:
31:fc:eb:cf:22:92:76:2e:a1:98:c7:38:11:20:60:d1:69:9a:
19:0a:02:ef:0f:75:ca:ed:69:f4:a7:3d:15:6a:bc:62:42:c6:
ab:d4:51:92:15:14:49:ae:b2:4e:67:98:62:d4:79:e9:c4:d5:
2a:fa:0e:3f:37:e9:9c:c3:67:97:81:df:8c:48:78:bc:72:7c:
5d:b2:58:09:97:9a:1d:47:0f:03:ce:df:89:bd:7b:df:9d:ed:
17:30:ae:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:29:41 2025 by rpki-client