This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
File: 1gA1BzfqQktAGySBBT0rwpFsutE.mft (raw, json)
Hash identifier: BQVP296YE2N76AslfzU0Uwg5JpoXkAFoExp+gzOt+yE=
Subject key identifier: 3B:A0:66:9A:4B:C7:C7:D0:33:2E:E2:F9:3B:47:E2:DB:12:BD:46:FD
Authority key identifier: D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
Certificate issuer: /CN=A9154973/serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
Manifest number: F7
Signing time: Fri 05 Dec 2025 03:20:16 +0000
Manifest this update: Fri 05 Dec 2025 03:20:15 +0000
Manifest next update: Fri 12 Dec 2025 03:20:15 +0000
Files and hashes: 1: 1gA1BzfqQktAGySBBT0rwpFsutE.crl (hash: TGN+p5CBxcIz5OghXxs7cwEcCucj7XL3twjrbDDbn+0=)
2: FD557922606A11EF8B9F6820C4F9AE02.roa (hash: ewsNS72wnAdnQiFMusstfvI/PZNeUDtev9nr2+xdPsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:20:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154973, serialNumber=D600350737EA424B401B2481053D2BC2916CBAD1
Validity
Not Before: Dec 5 03:20:15 2025 GMT
Not After : Dec 12 03:20:15 2025 GMT
Subject: CN=69324f70-0394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fe:86:cf:e7:e7:bb:34:d7:77:16:46:d6:88:
84:58:3c:c2:ef:93:b4:d5:c0:f7:f8:42:68:99:b6:
e3:36:38:db:54:04:0b:d4:17:d6:98:bb:04:a1:14:
2e:33:02:49:e9:f2:dd:39:3e:7d:20:4f:f0:f8:09:
16:f8:d3:e2:11:8c:aa:05:50:2d:e5:60:3f:ae:e5:
e1:44:71:0c:dc:1a:bd:02:e6:5a:de:bc:e2:94:a9:
ca:1b:73:45:a2:fd:ce:92:cb:66:7c:9c:ea:c1:b1:
04:2e:23:d5:93:40:c1:ea:86:b5:16:d1:29:3e:9a:
3f:ab:02:07:e5:08:e7:ca:a9:e7:eb:eb:c0:a9:a2:
fb:7f:9d:b3:20:e8:13:2f:82:a4:3c:cc:e9:80:78:
1f:61:53:6f:2c:dc:09:18:7e:44:22:34:1a:02:5d:
1c:94:3f:3d:6f:23:6f:9d:9e:5c:da:66:8e:33:68:
8d:3d:97:35:9e:04:5c:3d:c6:93:0a:f4:13:18:93:
91:11:32:a3:8c:fc:ff:a6:c5:b9:ab:0d:c1:6f:2e:
d9:ef:5e:e9:2e:21:5c:1d:74:cf:42:dd:28:08:66:
c9:40:b2:8d:36:ca:0b:bb:93:87:dd:86:14:e0:b5:
28:64:30:49:15:f6:01:15:f7:7a:6b:56:08:b9:c0:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A0:66:9A:4B:C7:C7:D0:33:2E:E2:F9:3B:47:E2:DB:12:BD:46:FD
X509v3 Authority Key Identifier:
keyid:D6:00:35:07:37:EA:42:4B:40:1B:24:81:05:3D:2B:C2:91:6C:BA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1gA1BzfqQktAGySBBT0rwpFsutE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154973/A65BC626606A11EF898EDB1FC4F9AE02/1gA1BzfqQktAGySBBT0rwpFsutE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:c4:fd:ce:8d:17:c7:d9:c6:68:1b:53:40:5e:39:7d:a7:31:
73:12:e9:15:bb:83:8a:fb:99:80:0f:7c:47:30:62:9d:a9:da:
14:49:fd:a3:25:ea:1b:cf:8b:5b:c0:4e:3d:63:4b:c5:62:59:
d9:33:cb:11:5f:af:63:0a:13:48:c0:88:34:47:2f:ab:80:e3:
73:75:ad:ec:91:9a:d9:e8:71:30:51:16:ff:9a:11:c1:f2:2f:
c5:d5:ca:7c:72:9c:b2:74:fe:c0:7e:df:80:20:35:f6:11:8a:
10:9d:5c:f1:50:00:54:11:be:b1:f5:43:bd:5a:26:52:44:19:
aa:34:5c:e0:4f:8c:10:ba:7a:d0:df:f1:9e:69:46:20:fa:48:
e8:0c:e5:7a:83:2b:61:fd:8b:03:aa:09:81:42:91:68:21:60:
8e:c1:b0:28:0e:39:02:f0:7c:87:80:a9:65:8d:84:44:d9:7a:
e3:93:65:a4:64:25:45:e0:82:0e:de:c4:98:29:f5:19:33:e4:
0e:24:96:c1:6b:49:5a:4a:15:df:16:77:bf:fa:a3:96:a0:06:
b7:37:1f:92:79:d9:80:a8:4e:62:d4:c8:3b:41:e7:fb:8b:7d:
c4:69:1c:1c:e4:7c:2f:c8:b9:02:77:df:9f:8f:79:01:a6:bc:
74:17:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:12 2025 by rpki-client