This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
File: tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft (raw, json)
Hash identifier: Its2URcpI3DTtUYjXPpGB5O2jxdE9iBHB5tK7inm4ME=
Subject key identifier: 37:FB:C1:05:1A:0E:AB:5B:90:41:9B:05:DA:13:96:B2:0C:90:89:04
Authority key identifier: B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
Certificate issuer: /CN=A915577F/serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Certificate serial: 0B78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
Manifest number: 0B6E
Signing time: Sat 06 Dec 2025 18:24:23 +0000
Manifest this update: Sat 06 Dec 2025 18:24:23 +0000
Manifest next update: Sat 13 Dec 2025 18:24:23 +0000
Files and hashes: 1: tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl (hash: S+AhX9QSs2WvDajtTaPJe1Nw6vjxZysd6h+uFZrfvGg=)
2: 741645EE422211EA937BB919C4F9AE02.roa (hash: 8tDMb7QbvAxPwaQ73OW8ydvRFg2I4adHfXyKJL4c0jA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2936 (0xb78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915577F, serialNumber=B559FC44ABFC22D1461F78EA8672F23738573155
Validity
Not Before: Dec 6 18:24:23 2025 GMT
Not After : Dec 13 18:24:23 2025 GMT
Subject: CN=693474d7-ab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:c8:c1:69:57:62:36:df:4c:b8:d7:a4:df:
92:7a:92:0a:b3:c7:f1:59:47:af:a9:10:38:9a:22:
1b:91:d0:94:4f:2d:c7:e6:4b:11:a1:ba:b1:54:d3:
6b:f4:9d:b7:b5:9b:b7:71:ef:3f:d5:87:e8:1d:8a:
0a:93:81:24:f9:97:e0:cc:7e:bd:3e:be:bc:a3:00:
51:b4:37:a3:55:4d:9b:55:73:1a:df:6b:6a:f3:02:
61:10:c0:5a:36:08:6d:54:19:61:7e:fc:94:8b:88:
87:17:a0:aa:cd:c7:f8:2b:66:4f:5f:be:83:3b:ee:
b1:d1:f7:2b:9f:84:89:bb:91:52:e7:d5:be:58:d9:
8c:f0:03:ba:38:0c:2e:d1:e4:ff:1d:8d:8d:d9:9d:
60:c4:34:04:ef:0e:bb:57:86:d7:03:fa:36:b4:13:
65:66:56:1d:ab:7e:34:86:e8:c4:8a:1d:0e:b5:c3:
34:df:2a:a7:28:d6:6a:7d:62:4d:b5:e4:4b:95:52:
6a:7a:36:a7:32:ec:7d:1f:d6:94:e0:45:b6:01:ea:
dc:4f:ab:2f:fb:4a:e2:a0:82:11:4d:d1:88:23:4a:
0f:87:fb:ae:a6:b8:0c:c7:0a:f6:19:99:2b:a7:bf:
64:cf:53:98:46:5b:c4:e8:be:64:be:ea:e1:f9:15:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FB:C1:05:1A:0E:AB:5B:90:41:9B:05:DA:13:96:B2:0C:90:89:04
X509v3 Authority Key Identifier:
keyid:B5:59:FC:44:AB:FC:22:D1:46:1F:78:EA:86:72:F2:37:38:57:31:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVn8RKv8ItFGH3jqhnLyNzhXMVU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915577F/1A4FFB88422011EAA1C07714C4F9AE02/tVn8RKv8ItFGH3jqhnLyNzhXMVU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:cb:fe:9d:b1:26:9d:c5:20:dc:4a:5a:38:7a:99:b0:6f:
7a:7c:6d:d9:0f:d5:fb:31:41:d1:ee:f9:ed:68:f9:80:ac:ad:
46:6a:e7:4c:e5:ac:8e:75:a8:d4:e6:b9:dc:48:5c:d4:a1:65:
c1:72:91:d0:72:20:82:2a:6e:63:d1:a5:76:6d:ae:ff:53:a2:
c0:ba:a5:95:e6:09:ff:da:f4:c2:0c:3d:64:d7:9e:2c:7c:bc:
2a:cf:ec:39:08:7d:da:cd:8b:75:4f:ad:fe:0a:ed:7f:68:ab:
a8:2e:2a:da:07:ba:45:10:67:3b:83:64:fe:6d:23:23:1f:b5:
83:19:ae:fc:d5:42:b9:4f:df:b1:a0:b0:a6:1e:f3:91:e5:ef:
d5:94:46:1d:45:40:24:92:6d:00:36:13:0f:45:42:7c:f2:1f:
db:31:50:b6:78:09:6f:6b:93:15:86:ce:6c:b4:84:fa:dc:b2:
bb:13:e9:85:e6:c1:4d:77:67:23:a3:11:43:ce:97:f6:c3:8c:
ec:5e:d2:d2:89:de:78:7e:1a:a8:a6:d6:48:07:28:53:cb:ba:
2b:c3:f5:82:2e:57:a2:ae:5f:f4:29:82:99:8f:50:24:15:cc:
9d:f0:91:34:a3:75:e1:b4:ce:bd:2e:ac:0b:6f:a2:7a:60:b2:
78:66:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:09 2025 by rpki-client