This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier: +nE7YI6y8JRK2BoI+FEzqi1vEozMpZtaL8wkfvBIuUU=
Subject key identifier: EA:F4:F2:6B:69:F0:CA:DF:E3:9C:A5:19:C9:CD:67:B2:23:F0:F3:79
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number: 0774
Signing time: Sat 06 Dec 2025 20:39:51 +0000
Manifest this update: Sat 06 Dec 2025 20:39:51 +0000
Manifest next update: Sat 13 Dec 2025 20:39:51 +0000
Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: vKMXHAekyshFp1YFYgXpQcJtLgG20Rec1EipklTVulU=)
2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 2jsCymQavrx92Kq4v6h75mDYqdyK8XpnNBvpUzJpvhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Validity
Not Before: Dec 6 20:39:51 2025 GMT
Not After : Dec 13 20:39:51 2025 GMT
Subject: CN=69349497-9e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:ca:00:7f:73:ab:93:a4:33:28:f4:16:6e:
a1:3d:90:46:9a:5e:33:98:89:c0:d3:bb:e1:44:5e:
64:93:41:e4:b6:99:5a:2a:e6:c3:63:88:c8:d9:b2:
28:93:31:13:09:7b:df:16:93:0c:85:c0:02:4e:cd:
88:71:4e:12:91:c0:ac:01:81:be:08:69:c5:1e:d6:
f2:c6:6f:c6:bb:75:66:41:60:c1:8c:6c:79:46:f4:
da:18:5b:6e:2c:5c:4c:a1:12:a7:2e:a1:a5:f4:33:
95:42:14:05:eb:df:43:ec:34:5c:d2:c7:0d:52:20:
1a:d8:4e:16:42:52:03:98:dc:a0:bd:b4:f0:03:74:
7c:85:da:23:75:fe:4b:38:29:60:2e:58:0c:c4:01:
1c:ea:53:0e:1d:4e:39:c5:90:d5:66:a5:5a:fb:fd:
ab:a4:b4:8c:c2:84:10:91:ac:9c:a2:77:44:93:c7:
10:8c:86:36:82:fc:71:f9:ef:1a:91:f3:e0:31:d7:
28:35:b1:19:0b:c2:d8:4b:0d:0f:61:91:e8:6a:df:
9a:e6:30:e4:8a:80:57:02:e8:68:19:ea:6c:00:d8:
e3:a5:44:e8:10:1f:ac:74:ef:14:26:46:5c:d0:79:
fe:c3:85:73:5a:b5:67:f6:8d:c6:d7:b2:23:88:96:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F4:F2:6B:69:F0:CA:DF:E3:9C:A5:19:C9:CD:67:B2:23:F0:F3:79
X509v3 Authority Key Identifier:
keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:cd:91:ba:23:d6:0b:34:38:a7:e4:6b:7e:8a:75:d9:b2:43:
dd:21:88:3f:b0:87:f2:56:bf:ad:78:10:d8:06:a5:02:88:60:
6e:7a:25:52:a9:7b:96:bc:c4:b1:fe:6d:c1:73:c8:fd:31:85:
c9:0c:e0:d8:cc:a5:e8:94:18:44:3b:da:21:cd:33:45:61:b5:
64:c5:25:9f:ad:e6:8f:9d:45:2d:f0:b9:a2:28:f1:0b:c4:21:
ad:0a:70:33:9f:13:68:73:fb:45:51:9a:63:51:ce:c6:6e:5c:
17:16:42:0b:6b:74:a1:63:d7:19:7b:44:98:a0:75:e9:b7:68:
42:72:77:74:b9:2f:ad:c4:3b:ab:54:27:a0:c7:89:a0:1c:66:
e7:2f:75:01:c1:84:ea:b1:64:d7:76:b6:dd:b9:44:b0:a8:73:
5d:77:11:b8:5e:c7:8d:f5:37:fe:c7:ee:eb:50:2d:dc:34:bc:
a2:45:bb:a6:c2:84:a3:1d:79:ce:2c:b8:7e:c6:10:2b:fe:c3:
94:85:d2:b4:aa:2c:8b:6f:88:05:9a:8d:de:c8:e4:3b:98:7b:
ac:43:85:a5:3b:d7:49:5f:ed:70:9d:b3:48:3b:f2:7b:45:ea:
ea:f6:91:ba:d1:b2:4b:ef:94:a2:5b:36:0d:cd:9f:0e:b2:55:
c4:a8:0f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:46 2025 by rpki-client