This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
File: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft (raw, json)
Hash identifier: BHJw+TKvCHlvLDdvyiyEy5kkPspl7A6E8AsxSUxIESE=
Subject key identifier: BE:6F:B3:93:DE:55:D1:C4:F6:6C:3D:37:58:E9:A6:DE:56:19:13:86
Authority key identifier: 16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
Certificate issuer: /CN=A9158F08/serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Certificate serial: 0C99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
Manifest number: 1616
Signing time: Thu 04 Dec 2025 17:51:16 +0000
Manifest this update: Thu 04 Dec 2025 17:51:15 +0000
Manifest next update: Thu 11 Dec 2025 17:51:15 +0000
Files and hashes: 1: FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl (hash: kHTAZuyQFRVb/tl81pahUaR7t8UPUUuVoMhf1/DwBeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3225 (0xc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158F08, serialNumber=1613D115ED83A06E97A73DAE5516BA1B684EEC09
Validity
Not Before: Dec 4 17:51:15 2025 GMT
Not After : Dec 11 17:51:15 2025 GMT
Subject: CN=6931ca14-ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:c9:fa:b6:8c:19:4e:29:47:4c:13:14:65:
d6:c1:27:ab:96:b5:60:55:8d:ab:e0:2f:51:43:6c:
b9:c1:e0:fa:58:fa:19:3a:7e:be:91:33:f0:54:dd:
63:9f:ce:55:ee:1a:73:70:94:24:f5:4c:58:06:e2:
38:3c:24:df:2d:9c:cb:63:35:9d:35:1f:49:0f:79:
5b:14:04:a2:c1:da:bb:12:af:c1:9f:d8:3f:a2:7f:
42:7b:cb:d5:64:62:f7:e2:f5:47:e0:df:54:7b:fb:
82:72:3a:a1:40:5d:fa:5b:5c:19:34:c7:12:8b:b6:
e8:e8:7c:e7:0b:30:f8:e6:45:19:95:df:23:5f:47:
c3:0b:ee:37:5f:a6:e1:e6:67:f1:f3:c3:52:85:df:
d2:06:89:65:1a:83:02:60:2e:6e:79:5b:48:a8:88:
fc:ed:11:3b:98:d7:43:f3:a7:47:03:8c:30:d6:da:
ff:fd:05:05:01:61:0d:41:fe:51:09:5e:9f:3b:79:
06:47:ee:b0:db:44:a6:1d:52:fc:55:29:2c:cd:5d:
a1:76:23:8f:69:95:69:5a:a2:6c:db:ff:c4:2b:af:
75:87:92:ff:48:85:c1:15:1b:78:68:a3:d1:4d:a3:
38:7a:91:30:5c:33:a7:40:e5:49:b3:91:8d:a1:6f:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:B3:93:DE:55:D1:C4:F6:6C:3D:37:58:E9:A6:DE:56:19:13:86
X509v3 Authority Key Identifier:
keyid:16:13:D1:15:ED:83:A0:6E:97:A7:3D:AE:55:16:BA:1B:68:4E:EC:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/FhPRFe2DoG6Xpz2uVRa6G2hO7Ak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:30:68:4e:9a:b6:c8:e1:78:ea:61:e1:24:9d:a3:b5:ef:35:
d8:7e:0b:ab:9c:07:8c:3e:23:68:5d:8c:58:1f:7c:22:0c:7f:
ad:90:b4:6f:94:98:49:03:45:49:86:e3:6c:d5:7b:7c:7c:9e:
9d:71:de:f1:d9:c0:d2:3d:b5:18:5a:4c:88:db:06:08:15:39:
3c:55:f5:cc:e9:7a:6f:ec:fb:5b:ec:8f:fc:2e:2a:cc:49:06:
ff:33:3a:80:e3:f0:8e:59:bc:36:36:0d:a4:24:d1:ad:9c:22:
74:5f:4a:1b:fc:9a:17:5f:32:8d:4e:24:5f:c7:7d:e4:22:4f:
ea:da:2b:0a:5b:5d:e8:5f:8d:d3:fe:81:ba:ee:98:e9:05:00:
bb:43:19:7c:2e:90:ef:20:5a:62:65:d0:82:e4:27:98:1a:ba:
e4:9b:6b:2a:e8:4f:0e:06:86:64:0f:05:d0:3b:f4:41:60:10:
7b:9f:19:68:c7:4e:ff:12:f3:af:f4:25:46:bd:e9:71:8f:5b:
3f:54:6a:7c:35:b3:d4:bd:73:67:47:af:c9:5a:74:0e:1f:b6:
03:10:c9:c6:ad:7f:91:1b:53:87:71:1b:03:ca:73:12:9b:54:
76:36:0c:9a:bd:03:4b:77:37:d0:b5:4c:73:3f:b8:f4:4a:25:
99:4e:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:27 2025 by rpki-client