This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
File: pAislKDTNvRzJJBakYrySQLw3os.mft (raw, json)
Hash identifier: McjTSsHfGCpjnjsQXaHtnjS5VMuDifSJq4tfaszjEh4=
Subject key identifier: 51:D1:D6:7F:DB:E6:5C:1B:39:AB:4C:59:A7:DB:11:0F:D3:FA:1E:57
Authority key identifier: A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
Certificate issuer: /CN=A9158620/serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
Manifest number: 0191
Signing time: Fri 05 Dec 2025 01:53:26 +0000
Manifest this update: Fri 05 Dec 2025 01:53:26 +0000
Manifest next update: Fri 12 Dec 2025 01:53:26 +0000
Files and hashes: 1: pAislKDTNvRzJJBakYrySQLw3os.crl (hash: RaMhJmE4SwwffFoEcAe3h90IM717kWDO4lNipm8hmVQ=)
2: 62258D42C93A11EEA1A4CA4FC4F9AE02.roa (hash: TLDnWAlNl4+LlNPMq6EhX78RX8oFwqpDV+CE22BbZbE=)
3: 31A1996898F711EEB7B27877C4F9AE02.roa (hash: inpneUp76nQQX6Q/CpN1dgRfEj/8zpxJb6ddO35TdAM=)
4: 62C61398C93A11EEA1A4CA4FC4F9AE02.roa (hash: jax3qkALNRFMNrAOXKyN2WiovYFpDRlk86jOWinHUwU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158620, serialNumber=A408AC94A0D336F47324905A918AF24902F0DE8B
Validity
Not Before: Dec 5 01:53:26 2025 GMT
Not After : Dec 12 01:53:26 2025 GMT
Subject: CN=69323b16-1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:a7:e3:7d:74:0a:00:0d:17:08:c3:e8:bc:
1b:9c:68:88:12:d0:7a:9f:a3:18:c7:2f:3c:4f:02:
ae:0a:44:79:57:21:26:da:44:b1:03:c1:ef:e8:8a:
17:de:4c:3c:16:35:c4:09:c8:5c:0d:ac:50:65:c3:
18:76:b1:60:0a:3f:04:ce:d4:4e:82:8f:4f:a9:64:
aa:a3:3a:0d:f9:f0:12:b7:1d:b9:4a:10:97:fb:7b:
1b:a2:bf:02:20:53:0f:2e:8f:3e:a6:93:6d:cb:90:
fa:ae:46:f1:be:c0:51:12:ac:ba:c9:0c:45:8f:89:
2e:cb:a7:a2:60:7a:bc:4a:b3:b7:dc:13:72:37:92:
03:e8:33:9a:ff:f3:6b:f5:2d:79:30:7f:c6:df:10:
8f:0b:b6:96:d5:f1:ef:74:19:78:c0:69:3e:a4:40:
ce:f1:d4:ca:45:27:b0:4c:32:f7:65:96:ca:1d:79:
f6:98:7d:ae:d5:26:85:76:a1:1c:1a:72:a6:da:43:
7d:d6:d3:38:ec:da:20:a8:23:0f:9f:6c:b9:16:ff:
ce:df:8b:2d:00:39:86:e9:ca:b8:03:19:fa:df:c7:
f5:86:a8:8e:93:f1:eb:30:4c:f2:6a:b4:15:e7:6d:
6e:fa:8b:d3:0b:5e:5f:eb:b5:d0:27:9c:52:96:c1:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:D6:7F:DB:E6:5C:1B:39:AB:4C:59:A7:DB:11:0F:D3:FA:1E:57
X509v3 Authority Key Identifier:
keyid:A4:08:AC:94:A0:D3:36:F4:73:24:90:5A:91:8A:F2:49:02:F0:DE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pAislKDTNvRzJJBakYrySQLw3os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158620/0E919934884211EEA7D8C814C4F9AE02/pAislKDTNvRzJJBakYrySQLw3os.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4f:2e:91:76:e3:73:7e:05:ee:c0:50:83:df:76:f1:23:48:
c2:eb:b4:8e:04:36:39:4b:2b:11:44:14:29:f6:5e:f8:12:16:
c9:94:4c:23:fb:bc:f0:9d:55:07:2f:72:92:e5:cc:03:bb:3d:
19:ae:a3:c4:5f:62:7b:44:1e:cb:45:b1:8a:aa:fc:a9:5f:e0:
2c:3a:fd:9d:28:3a:02:e1:6f:19:a6:29:a4:b6:47:d2:a2:47:
a4:b8:d6:38:37:0a:19:bc:a7:05:8e:f9:14:f7:d3:f7:d8:52:
c6:5c:d4:62:b7:75:56:f4:69:70:49:37:20:13:19:b4:7a:a2:
95:4b:50:52:df:2f:6a:42:78:2f:61:3d:32:a1:bf:0c:f6:a3:
1d:58:65:14:c3:19:77:f0:dd:c1:29:e2:8e:c0:8d:02:be:62:
8c:c0:0e:6d:83:50:74:ed:6d:93:7d:50:d2:12:74:4b:3b:b4:
94:6c:cc:02:81:19:53:86:96:61:64:6f:ac:25:da:e1:2e:29:
12:ae:30:59:30:ea:15:7f:ef:68:10:44:d0:45:fa:05:6f:eb:
70:43:c8:aa:8b:df:9c:7c:8a:38:a4:0c:90:39:22:39:14:ad:
6f:55:b7:f6:52:02:ba:6f:dd:4f:7c:1c:d7:8b:3a:5b:8d:44:
5a:35:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:57:56 2025 by rpki-client