This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File: iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier: VdbMl2JGq3g3SGYKP7fUtOuTehOWk4YRuM3MItwJ02w=
Subject key identifier: A7:9D:26:AA:99:E7:48:D6:5F:B5:4A:A0:0F:3A:41:46:81:8D:18:C2
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer: /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number: 0135
Signing time: Sun 07 Dec 2025 02:52:48 +0000
Manifest this update: Sun 07 Dec 2025 02:52:48 +0000
Manifest next update: Sun 14 Dec 2025 02:52:48 +0000
Files and hashes: 1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: zE5Wgwgp+MhJXb+puuKQCNssFOtgdMj3QTVfbK2LBGc=)
2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: csTmTLq4ZRZeFdn5b+fHaqqqdmXKOcBZ5dCUt+D8Cfw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Validity
Not Before: Dec 7 02:52:48 2025 GMT
Not After : Dec 14 02:52:48 2025 GMT
Subject: CN=6934ec00-5cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:4f:b6:c1:2a:3b:2a:49:ea:21:64:14:53:
ba:13:04:e9:2a:38:2d:d1:ea:9b:b3:43:3c:62:2f:
22:41:0b:7c:f2:c3:6f:89:09:ee:45:0d:1a:d6:15:
d0:17:9b:08:14:4a:8c:3e:8d:d6:49:eb:b3:de:67:
35:80:f3:f7:08:84:98:88:82:c0:ba:a2:aa:4b:75:
83:42:04:54:0b:2b:82:d3:f3:74:ed:94:89:3f:df:
d2:62:29:96:c5:02:0a:b2:66:f1:07:3c:de:e2:f8:
ec:e5:94:e7:ec:3a:35:66:68:df:b3:a6:6a:55:37:
a3:c5:69:0c:9b:48:ff:b4:52:28:a9:c8:2f:96:39:
12:c9:a0:e1:6f:89:08:55:f7:4f:47:2f:29:9f:a3:
a0:13:94:57:1d:c5:41:c4:53:77:1e:00:c4:01:c1:
72:32:78:91:be:7c:f5:c5:14:3f:be:a9:8e:bc:02:
a5:ec:6e:c9:e7:ca:e3:83:c7:c9:57:61:7b:b2:c2:
82:ee:a0:8b:f0:58:ba:af:45:59:3c:6c:cb:a0:55:
9f:08:ee:ef:f7:00:0b:45:95:94:16:fa:ec:1d:48:
06:b6:0c:fc:9c:23:87:5e:d0:74:43:e6:65:2e:3c:
8e:fd:4a:7e:9c:53:c4:c9:98:f8:a3:18:6c:3c:b3:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9D:26:AA:99:E7:48:D6:5F:B5:4A:A0:0F:3A:41:46:81:8D:18:C2
X509v3 Authority Key Identifier:
keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:e4:fd:78:f9:62:73:a9:5e:5f:71:cf:a8:6c:f6:42:68:23:
52:13:2a:45:e7:14:65:22:92:26:0d:b4:8e:68:42:39:35:88:
c0:cc:c8:07:e3:3c:99:ab:79:03:6f:ec:8f:7e:86:3a:26:3a:
57:c4:05:64:c8:06:7e:2b:ae:08:2e:39:a8:75:b5:15:72:69:
d5:b7:7c:c7:4e:34:c5:df:f9:a3:d0:05:f6:49:5b:c9:6e:68:
a8:04:91:be:62:39:22:0b:f5:ac:41:6f:dd:f1:5a:1e:51:df:
76:43:69:97:64:37:65:f6:01:5a:90:aa:2c:b6:75:24:67:2f:
1f:5f:a9:25:59:8c:87:c2:9c:bc:2b:ee:d7:59:79:9b:5e:e8:
82:e1:ed:55:cc:84:b0:80:98:8e:46:2d:0e:13:89:97:99:37:
d3:bf:e6:35:c9:f7:9c:15:d6:51:85:57:5c:9c:91:5d:b8:28:
e5:38:8e:01:33:2b:25:ab:cf:b9:73:8a:0a:09:8f:6e:d7:60:
07:1a:81:9a:a7:1a:60:1e:7d:c4:7b:fd:e1:a0:34:44:ea:30:
bf:5f:b9:01:bf:6f:61:ad:b3:4d:c5:fa:10:7d:70:68:3b:d8:
49:15:7e:70:3e:27:be:b8:ba:cd:0f:7c:8f:65:64:e6:01:51:
be:b2:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:22:37 2025 by rpki-client