This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
File: pBUE5m4xRDSGJRkGluDoj_sfUnA.mft (raw, json)
Hash identifier: VDRm0JGG95cn+dfnL+aYkUTMb+WZbM7y1BVhYeaWSj4=
Subject key identifier: 59:66:8A:24:90:2C:E5:F6:A8:93:3C:17:7F:9A:69:42:50:00:D7:64
Authority key identifier: A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70
Certificate issuer: /CN=A915D9C1/serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
Certificate serial: CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
Manifest number: C8
Signing time: Fri 19 Dec 2025 04:58:03 +0000
Manifest this update: Fri 19 Dec 2025 04:58:03 +0000
Manifest next update: Fri 26 Dec 2025 04:58:03 +0000
Files and hashes: 1: pBUE5m4xRDSGJRkGluDoj_sfUnA.crl (hash: vWdjiAudDe4xG98VZ+Ntzg1SmKGcv/rxIpZBmPfbCgY=)
2: C17B1042AD7211EFBD28595FC4F9AE02.roa (hash: 6k1OeDAZbCrNksIQf+J6HTs1CPc04jpy2MtgiZuWAoM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl
rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D9C1, serialNumber=A41504E66E3144348625190696E0E88FFB1F5270
Validity
Not Before: Dec 19 04:58:03 2025 GMT
Not After : Dec 26 04:58:03 2025 GMT
Subject: CN=6944db5b-6cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6d:5a:46:18:35:fe:5d:65:18:f7:0d:19:23:
c1:02:80:6f:f2:38:5d:61:1b:33:be:5e:89:eb:02:
35:8d:8c:a9:6b:fb:c0:bd:19:52:09:f3:59:38:03:
48:fc:5d:2a:1a:07:a3:d4:b6:6e:2a:28:fb:52:56:
7f:b9:ac:bb:4f:12:b4:9e:78:c8:1f:e8:1a:5c:1d:
df:fa:8e:18:b7:dd:3d:ba:90:26:1d:4f:7d:64:ef:
0b:fa:e5:46:9e:9c:19:ed:5d:21:b8:90:91:d9:cf:
1b:8e:90:b1:a8:30:36:b6:94:2c:b9:ce:78:16:95:
12:78:de:6b:a6:39:fd:75:2c:6f:2b:f7:fc:2e:23:
64:1c:99:aa:f8:3a:b1:b6:35:b4:73:11:ec:c0:69:
d6:b3:64:eb:46:d7:16:93:26:c7:b6:2e:50:4a:5f:
be:9e:70:13:5c:be:13:34:77:6d:80:e0:96:5b:79:
26:c9:cd:a0:10:c9:15:f6:59:ff:17:39:3d:13:82:
92:eb:95:55:b3:6b:4a:a4:e3:2b:d4:61:41:5b:2b:
54:09:4d:bd:22:a3:f1:4c:21:e2:6c:df:c3:8c:84:
10:e8:f7:b6:6a:dc:55:34:a9:86:78:7f:40:0f:02:
5f:e7:34:5d:37:1a:f0:e1:dc:16:68:6f:a8:77:77:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:8A:24:90:2C:E5:F6:A8:93:3C:17:7F:9A:69:42:50:00:D7:64
X509v3 Authority Key Identifier:
keyid:A4:15:04:E6:6E:31:44:34:86:25:19:06:96:E0:E8:8F:FB:1F:52:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pBUE5m4xRDSGJRkGluDoj_sfUnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D9C1/30805CAAAD7211EFADF2345EC4F9AE02/pBUE5m4xRDSGJRkGluDoj_sfUnA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:6b:1c:98:83:25:4c:94:bc:d2:20:3a:4c:86:3e:77:61:
1e:7c:c8:f8:fe:20:b4:d3:da:b9:40:59:f8:2b:15:df:de:a8:
93:d0:b9:ec:91:9f:4b:85:94:55:e0:c0:0e:40:5f:04:6d:71:
6c:7a:48:2e:71:e1:6a:cb:cd:87:bb:7b:65:e0:6a:5a:5a:b6:
ba:7f:34:1f:8c:78:9a:e9:50:1e:e8:1b:33:ad:30:99:e7:54:
50:f7:ae:21:47:bc:37:50:14:b6:cd:2d:53:72:f4:58:39:20:
41:60:2f:d8:1b:33:7c:27:4f:fc:a2:0d:16:13:a3:9c:11:e4:
94:6a:4e:39:08:e9:e9:54:42:73:b7:76:d6:da:95:2d:22:28:
c6:6b:53:be:01:aa:17:af:99:62:91:af:93:bb:47:b7:de:0b:
86:8b:b8:da:24:f4:12:f1:d3:c3:24:a9:be:0d:81:cb:e2:f3:
19:95:96:b8:ff:b0:cf:1f:fb:5e:c5:db:33:cd:4a:1a:e2:45:
ce:89:54:c8:b3:07:2a:3a:67:47:15:b9:6a:3a:1b:3e:54:ea:
54:a0:d3:b1:fc:8f:e0:e9:e5:eb:bd:53:1b:ee:12:f3:cb:41:
e5:46:81:9a:5e:36:0d:2d:e1:fc:3f:5d:00:10:f8:14:59:d4:
5c:7d:5e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:56:12 2025 by rpki-client