This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
File: fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft (raw, json)
Hash identifier: Qhmrz0KERennQoVrxxiaHcuDjLuo5Io6ZlqJOX7Oqyc=
Subject key identifier: 7E:CD:06:C0:F0:F3:77:E1:45:7C:A7:B7:FE:8F:E8:54:31:E8:A4:9F
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Certificate issuer: /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial: 03D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
Manifest number: 03C4
Signing time: Thu 04 Dec 2025 23:08:08 +0000
Manifest this update: Thu 04 Dec 2025 23:08:07 +0000
Manifest next update: Thu 11 Dec 2025 23:08:07 +0000
Files and hashes: 1: fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl (hash: Mh6AXlEgC8eQIGdjk36682Kd//NsvBE9I/oLgThWPUw=)
2: A201A06CB42B11F0849A7A7AC4F9AE02.roa (hash: naDT4mj+S+S7gTqhgPY4e5xWl/al1LzU7j3FtO35LsA=)
3: 319786BEB63B11EF8D06900EC4F9AE02.roa (hash: jSZIZjYKkStn9QppODMFCLkxqd3q8dcDZLkti6SpjkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:08:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Validity
Not Before: Dec 4 23:08:07 2025 GMT
Not After : Dec 11 23:08:07 2025 GMT
Subject: CN=69321457-27fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:eb:8c:f6:f2:73:a3:c8:47:40:7a:d1:3f:ce:
ad:bd:b1:8a:27:83:50:0e:ff:16:e6:3b:5e:8e:89:
26:9a:2c:fc:4b:39:69:4a:ba:43:99:32:7d:35:7e:
53:91:25:a5:18:91:ea:fc:9d:d1:16:87:c7:4a:83:
d8:7f:e2:83:55:9e:50:64:7b:00:8d:9c:52:05:e3:
dc:44:cd:e1:0b:17:75:28:37:14:a9:15:ee:83:8f:
48:b8:65:ba:1b:29:2c:28:89:e3:6f:6e:7f:eb:60:
c1:ae:58:af:4c:37:e8:eb:52:e0:90:2d:e1:97:6b:
54:13:b4:b1:57:89:6c:76:6f:e6:c6:ba:bb:8d:be:
4a:d8:67:f5:56:0b:ec:a7:45:8f:4c:92:b3:b5:6c:
5e:8a:f4:d4:bf:09:a0:94:ce:0a:fe:90:b0:04:29:
0f:81:09:e6:5d:79:4c:b6:08:d3:94:aa:6f:5f:50:
38:59:c4:4b:cc:1d:7a:85:07:de:1b:71:e6:6d:ee:
65:80:85:1d:24:b8:d8:04:fb:22:62:32:e7:34:a9:
a9:c0:ae:80:87:22:f3:05:d6:65:81:9a:2a:2b:ec:
a1:32:ce:57:50:61:41:b2:2d:04:75:b8:37:49:be:
7f:09:9a:2c:f1:2f:e1:d5:b6:c0:a1:11:ec:b1:4c:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:06:C0:F0:F3:77:E1:45:7C:A7:B7:FE:8F:E8:54:31:E8:A4:9F
X509v3 Authority Key Identifier:
keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:63:d3:6a:4c:f7:49:0d:6c:d7:d6:47:c7:a4:51:6d:23:
2b:63:4b:f7:7c:fe:d2:60:30:6c:b9:c0:50:5c:43:de:ae:81:
a2:bf:82:f0:a1:78:92:76:4b:1f:c3:e6:7c:a5:c0:33:ee:05:
9d:29:09:96:63:83:d3:8d:a1:da:20:bb:86:c9:fc:59:3a:db:
e7:8c:b6:b9:7d:d1:0b:0a:94:85:de:3d:e0:49:e8:9a:1f:2d:
3f:c4:de:80:59:25:a6:4d:29:cc:fe:31:bf:5e:43:13:2d:2b:
55:97:69:c6:73:e5:bd:70:51:c8:eb:73:c5:70:67:0e:cd:c0:
31:aa:2e:74:7a:3e:a5:db:ce:95:7e:96:d7:46:d7:52:a2:48:
23:ee:1f:3c:ca:ff:2e:5b:d8:83:66:2e:db:97:02:bb:68:fb:
5a:df:53:bf:50:bb:93:22:47:aa:97:0e:c7:76:fc:44:92:61:
9e:5e:5b:a7:01:19:f4:70:d4:a0:55:4b:89:15:f4:54:ce:8b:
5c:8c:b9:80:05:13:9e:79:8d:c2:37:34:ad:2f:12:1e:74:5f:
21:11:8e:ce:c5:29:d4:31:65:c2:ec:74:7c:79:ac:b9:9e:8f:
32:65:a4:5b:8a:f1:b4:65:c4:c1:f0:fe:58:ef:91:21:8f:a8:
4a:47:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:43 2025 by rpki-client