This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
File: fgqozSvoYXAaXKfPudRQ09kYJ-g.mft (raw, json)
Hash identifier: Cy5G6rhwPV+J44ZDDdxYZ2CyxePlxfNshVX62rroLmo=
Subject key identifier: B7:47:82:94:DE:14:D7:F1:C2:91:E3:C8:41:F2:C9:AA:F5:8E:47:8B
Authority key identifier: 7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
Certificate issuer: /CN=A915DB9F/serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Certificate serial: 1F8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
Manifest number: 1F7E
Signing time: Sat 06 Dec 2025 15:42:36 +0000
Manifest this update: Sat 06 Dec 2025 15:42:36 +0000
Manifest next update: Sat 13 Dec 2025 15:42:36 +0000
Files and hashes: 1: fgqozSvoYXAaXKfPudRQ09kYJ-g.crl (hash: 1BhpBzDUBm2oMBq4nXTOR79rG+vhem3iV+WraHFDwCw=)
2: 4D94E0D6545211E6A367BC68C4F9AE02.roa (hash: DcM+Lc5+n2tyIRWKbRIwYXhW1cJ+6S2apUWAewERFcg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8075 (0x1f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DB9F, serialNumber=7E0AA8CD2BE861701A5CA7CFB9D450D3D91827E8
Validity
Not Before: Dec 6 15:42:36 2025 GMT
Not After : Dec 13 15:42:36 2025 GMT
Subject: CN=69344eec-ffa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:e8:0d:96:8e:ea:53:96:1a:30:8e:06:06:
66:40:4a:a6:4f:16:d2:6a:2a:c9:90:0e:b5:fe:0a:
0b:49:d1:9c:02:46:54:7f:5f:4a:22:9a:38:ed:77:
2a:82:1c:58:7e:9b:c3:f9:cf:7d:ca:ee:79:d4:09:
f6:27:84:ac:8c:14:2c:1d:2a:ad:84:b7:51:d9:e4:
d6:13:0f:e3:63:07:fc:2a:d0:f6:6c:c6:5d:37:77:
41:6e:0a:bc:28:76:d7:86:1d:6c:06:cc:aa:e6:31:
64:2e:a9:aa:cb:1b:00:fd:d1:13:6b:4d:94:72:ea:
15:fe:fe:97:d9:a6:57:c1:85:80:15:a0:c6:22:ce:
26:ce:f4:48:ce:85:30:6a:90:15:28:80:16:b3:8b:
d3:9a:50:0e:fd:8b:d6:df:0b:4f:6b:8d:1d:78:b2:
0c:c1:bd:89:95:c2:16:5f:c0:b9:ea:31:63:f5:fa:
cb:87:fa:a2:4f:57:b8:1d:bf:54:db:e2:91:9f:25:
83:ba:8e:99:d5:01:f9:73:d4:43:46:cf:af:f3:ec:
54:06:30:95:59:51:4a:11:e6:6c:27:eb:c4:4e:35:
2d:0f:02:85:2b:f1:10:f1:d2:45:68:58:ad:1c:a8:
31:cd:d7:7f:ea:08:fa:07:c9:dc:08:e0:d2:45:21:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:47:82:94:DE:14:D7:F1:C2:91:E3:C8:41:F2:C9:AA:F5:8E:47:8B
X509v3 Authority Key Identifier:
keyid:7E:0A:A8:CD:2B:E8:61:70:1A:5C:A7:CF:B9:D4:50:D3:D9:18:27:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fgqozSvoYXAaXKfPudRQ09kYJ-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DB9F/B88F4252545011E6A3A6D466C4F9AE02/fgqozSvoYXAaXKfPudRQ09kYJ-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4c:35:81:26:53:51:ab:75:48:5d:d1:bd:a4:32:64:4c:61:
53:f7:d1:e1:0d:90:a9:ba:b9:62:bd:d5:a7:74:c6:80:1d:70:
40:56:49:4d:95:93:56:6d:b6:69:7b:bf:3e:5d:2d:d7:b8:ca:
07:8a:68:f3:fc:b0:e2:ad:21:2f:94:74:be:35:5e:66:42:c1:
29:d0:30:b5:0f:3d:b8:88:d4:a1:1e:a3:ba:1d:7d:75:13:76:
16:90:76:7c:c0:05:63:c1:ef:0c:8d:5b:c8:b0:2f:c8:4e:0e:
b6:91:56:dc:17:38:57:e9:cf:9c:f2:f6:32:86:89:b3:a1:ea:
34:75:91:55:c0:70:db:9a:ab:b8:3a:d4:df:09:9e:60:13:ba:
a2:68:9d:e1:4b:ba:22:19:1e:7e:1e:87:48:94:68:1a:51:7f:
d8:73:a3:bb:23:41:fc:3f:68:fc:f1:16:b6:60:a9:91:95:33:
51:06:2e:a8:49:b5:e7:f0:fa:47:e2:ea:05:e4:0e:01:01:40:
81:64:f1:46:e6:5a:cb:28:da:04:1c:b0:c3:f6:b6:5d:81:45:
cb:01:49:0c:ee:e3:1c:fb:d2:cc:d7:b5:18:f7:c0:45:e4:81:
30:ea:67:f4:1f:ab:13:94:25:61:1d:c9:09:84:31:17:46:c5:
ec:10:a0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:33 2025 by rpki-client