This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File: AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier: 8RxcOuuRW71CamQ6v4OeOzk0/m3yAbe2IltpGOo5ddE=
Subject key identifier: BE:0F:FE:BC:69:72:C4:C5:29:7B:62:81:CA:78:2C:BF:A7:80:94:91
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer: /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number: 11
Signing time: Fri 05 Dec 2025 05:46:02 +0000
Manifest this update: Fri 05 Dec 2025 05:46:02 +0000
Manifest next update: Fri 12 Dec 2025 05:46:02 +0000
Files and hashes: 1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: uosD/YeC7I2Fu7t8VqZF4v+r1pciMbkNaTxwskcekRQ=)
2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: kF3MsF0LKW2hpCo2tc4HdlJWfcSXM3xD20g6oUSt0Tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Validity
Not Before: Dec 5 05:46:02 2025 GMT
Not After : Dec 12 05:46:02 2025 GMT
Subject: CN=6932719a-887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:d8:ed:bf:ad:6b:55:c3:fa:72:ad:e6:8a:
d8:10:55:60:05:61:0b:9f:89:14:87:06:98:8e:99:
93:98:9b:96:81:c9:6e:de:5e:18:46:2e:50:59:83:
de:d2:87:ba:88:18:1e:de:cb:ea:bc:f7:5c:3c:e9:
f2:4b:89:70:2d:1e:e8:45:72:32:61:be:bb:50:8d:
97:d1:10:5a:52:6e:a6:cf:ac:a8:7c:8e:16:1c:d5:
ab:3f:51:4c:62:d2:65:f3:5f:22:bf:34:4f:63:d3:
da:68:1f:d2:e3:c1:cf:94:9c:c9:01:ab:38:10:fa:
d1:21:e7:a6:f5:3c:8f:e0:5c:5a:1f:cf:8d:32:01:
ee:d8:94:80:61:15:10:37:f1:41:b2:44:a0:62:82:
99:52:61:04:98:4c:82:f1:6b:1f:8e:91:2b:d2:aa:
79:a3:dd:15:47:4a:f2:df:d5:75:00:55:f8:be:07:
53:e7:e9:83:f8:e6:29:a0:2c:00:d6:bc:66:06:78:
df:ac:bc:73:be:d7:af:7a:97:48:d9:e3:45:18:f8:
a3:28:52:e7:0b:06:f3:59:38:4f:2b:d8:e9:20:4d:
43:b4:8d:d6:79:76:cb:95:d1:4e:1c:2f:5e:8c:68:
6d:b5:d7:e5:2a:6b:0a:91:58:19:b3:dc:2d:3e:76:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:FE:BC:69:72:C4:C5:29:7B:62:81:CA:78:2C:BF:A7:80:94:91
X509v3 Authority Key Identifier:
keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f9:f4:0c:66:02:11:b5:db:04:27:de:3f:ff:f2:f8:13:a0:
b9:ad:c7:46:61:a2:22:3f:4f:b0:d5:f5:aa:fd:8c:a6:5b:e7:
f7:d2:69:d2:87:41:6d:9a:38:bb:57:41:5e:c8:a6:4c:65:0b:
ec:d6:57:f0:85:e2:c8:f6:fa:75:ab:ce:94:09:e0:52:b4:89:
de:fd:04:68:0c:91:14:bd:64:78:4d:87:ad:bf:e7:b1:c9:40:
02:a8:db:03:c5:ec:5c:da:19:a9:64:8d:ba:53:c3:bc:d7:e2:
4f:2b:8d:a4:94:e1:d8:2d:70:5c:aa:d2:b0:2c:ad:20:e5:f8:
d5:f9:54:1e:3d:2e:05:59:40:3b:57:d2:cc:2e:db:0d:8b:54:
43:83:d9:e0:90:5f:36:50:b5:53:8c:2b:aa:86:f3:24:b3:70:
d5:70:9a:0b:4d:22:60:40:d1:fe:96:6a:aa:83:67:87:96:07:
9e:12:e1:9a:a5:5b:87:27:2f:68:8e:fc:62:a4:4e:8b:82:25:
32:83:76:e8:0f:c0:ef:6e:2e:fa:51:93:b5:11:98:89:42:62:
68:a5:1e:09:e0:e1:72:d1:3f:91:92:5f:42:87:db:f2:84:a7:
f3:97:0d:b0:f7:7f:87:12:bf:14:f2:6a:a9:d3:62:4d:92:c1:
14:81:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:41 2025 by rpki-client