This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
File: TSkgNoEWBfjziJgBUhslcnoc12U.mft (raw, json)
Hash identifier: QTZuYE6OQUHr+teAEtFSyZKsBVxPpRd07eN0aU14fQs=
Subject key identifier: 75:9E:EE:9F:C1:43:3A:CB:AB:A3:42:F5:03:0B:01:C9:F1:E2:9C:D3
Authority key identifier: 4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
Certificate issuer: /CN=A9154DE2/serialNumber=4D292036811605F8F3889801521B25727A1CD765
Certificate serial: 0369
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
Manifest number: 0365
Signing time: Sat 06 Dec 2025 23:31:05 +0000
Manifest this update: Sat 06 Dec 2025 23:31:05 +0000
Manifest next update: Sat 13 Dec 2025 23:31:05 +0000
Files and hashes: 1: TSkgNoEWBfjziJgBUhslcnoc12U.crl (hash: rffRuhaS1fKxRYbPVjytsP6k9bN/d3LKU95lzHMOZp4=)
2: EB4F77B8D5E411ECB31AC843C4F9AE02.roa (hash: T+/E3ylnKO/PWrVwuEVYj1NKgrY3/SChhT5eNdM1fbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154DE2, serialNumber=4D292036811605F8F3889801521B25727A1CD765
Validity
Not Before: Dec 6 23:31:05 2025 GMT
Not After : Dec 13 23:31:05 2025 GMT
Subject: CN=6934bcb9-8077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:24:25:5c:a1:0a:97:57:6c:24:69:1a:7c:59:
5d:9d:bc:65:02:3d:30:5e:7a:2d:e9:12:48:6b:e9:
18:e5:ad:05:e2:59:7b:50:79:b9:db:d4:e7:36:41:
0d:f2:d3:cf:58:d9:99:61:66:a6:d7:49:64:10:a1:
78:ce:46:8c:bf:6a:8e:04:2f:13:3a:5b:58:47:d3:
05:45:07:1c:51:64:ef:c1:a8:6e:de:22:27:0f:89:
08:d4:f0:d2:30:04:4d:d2:fe:0c:b8:63:42:4e:85:
b6:fc:ea:2a:c3:55:99:7b:7f:d5:11:39:bf:2c:81:
64:ee:7d:fd:e0:a8:55:d0:e8:ea:e5:14:d2:fb:a8:
41:7e:10:1c:32:12:c5:87:41:63:6c:06:2f:cc:20:
d2:0d:1d:5f:02:06:f9:7d:cf:d2:de:70:7a:38:4e:
74:6d:b9:ae:20:1d:97:6f:8a:df:d8:6d:3b:78:61:
9d:b8:71:e2:18:86:4b:cb:55:be:77:ca:96:59:4d:
df:3f:26:08:94:6a:7f:8c:14:f7:5b:14:29:de:bf:
ac:ee:bc:61:53:c2:f0:1b:22:35:29:e5:f8:aa:25:
cb:99:30:0d:7a:c9:25:93:e3:40:3b:09:fa:e8:af:
b5:19:e7:4f:f0:09:ab:49:fa:09:ee:c1:89:fa:b4:
9c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:EE:9F:C1:43:3A:CB:AB:A3:42:F5:03:0B:01:C9:F1:E2:9C:D3
X509v3 Authority Key Identifier:
keyid:4D:29:20:36:81:16:05:F8:F3:88:98:01:52:1B:25:72:7A:1C:D7:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TSkgNoEWBfjziJgBUhslcnoc12U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154DE2/1C5422D0D5DD11ECA14CC623C4F9AE02/TSkgNoEWBfjziJgBUhslcnoc12U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:be:19:8a:ea:29:34:fc:2b:d1:ed:74:37:0e:6f:83:38:d5:
2c:a1:f2:ca:13:af:3b:03:f9:22:34:b6:a6:bd:82:5a:75:7e:
4a:1e:1d:f0:c0:dc:26:4a:3f:d3:1b:e0:df:fc:8e:a3:a9:bd:
ff:28:cb:0e:c2:19:9d:33:9f:28:63:5d:ff:6e:32:82:a8:22:
84:6e:62:55:c4:6e:d9:c7:7a:8d:3b:79:35:0b:cd:55:73:2f:
a5:08:7f:1d:78:74:71:0f:5d:4c:26:e2:a2:44:38:fc:77:04:
f8:39:c8:c7:64:9e:46:07:c1:bc:8b:08:b7:8b:95:39:78:6c:
bf:22:1a:94:5c:2a:f4:fb:8c:cb:19:d9:db:cf:7b:77:36:ee:
f7:c1:f8:87:d7:91:56:f8:f7:07:16:7b:7e:08:07:22:95:b2:
b2:51:b9:93:23:aa:6b:4c:45:de:a4:32:82:3a:ab:8f:16:fa:
c8:41:4f:aa:69:4e:1b:85:4d:f8:49:78:d7:42:47:b9:22:48:
5d:34:48:fa:3e:b7:0a:f7:22:45:d3:94:a8:87:e9:87:06:f6:
81:26:85:c3:39:68:a1:bc:5e:7d:39:26:77:6b:6d:7c:a4:23:
dc:5c:18:0a:f5:ef:3e:ce:88:b2:36:47:d6:c9:9d:97:a4:f6:
ae:3f:e5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:08:21 2025 by rpki-client