This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json)
Hash identifier: 1jBKHkccuxOLwnkOiTlpxl60f0mwVt3EcURcmSwR6po=
Subject key identifier: 5F:6C:55:2F:1B:2C:BF:FA:23:71:E7:A8:8E:B3:FC:B7:A0:58:60:48
Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Certificate serial: 0E62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
Manifest number: 0E58
Signing time: Sat 06 Dec 2025 17:13:22 +0000
Manifest this update: Sat 06 Dec 2025 17:13:21 +0000
Manifest next update: Sat 13 Dec 2025 17:13:21 +0000
Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: cqW4TkHRoCs3Le/WYrgiWVpn8OSuR0UGXYZRLHJh9AA=)
2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: cTGuGnG9rqC1kt6QlqPGiDTyt8yC7pqJIZqMZttM2hs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl
rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:13:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Validity
Not Before: Dec 6 17:13:21 2025 GMT
Not After : Dec 13 17:13:21 2025 GMT
Subject: CN=69346431-ad30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:c8:f7:ec:52:46:36:98:4b:65:c2:c7:69:
5f:17:83:46:e6:ca:7b:68:b9:e2:20:04:73:0c:ea:
8c:d6:cd:2e:f1:f3:ff:6c:61:55:e5:4d:04:5e:2e:
c8:77:bc:25:75:76:fa:d8:c2:f0:56:cb:ab:40:2a:
73:69:35:3f:26:14:4f:cd:3d:82:ba:be:4f:28:48:
b8:16:11:0a:54:ae:e2:b9:6f:32:44:73:99:37:56:
4e:1a:17:fd:ef:69:7b:43:4e:36:b4:d6:12:00:06:
67:47:40:b8:88:67:b6:cd:0e:ab:6e:b5:37:ed:ca:
7a:17:c7:c2:c0:d1:ac:40:5b:cb:f7:41:43:4d:11:
21:37:19:58:29:81:56:45:9e:ac:6a:90:d9:6f:3d:
84:c5:b5:aa:07:e1:97:6e:d0:48:09:2b:ba:7e:e0:
54:46:a7:51:d9:bf:cf:80:6d:91:8f:75:2a:e7:35:
ec:74:43:3a:26:43:2e:bb:25:4d:a5:ac:94:eb:27:
85:30:29:64:61:94:39:82:7e:48:ba:e2:dc:87:e4:
fc:fd:7a:13:91:a6:81:aa:4f:c0:bb:36:fa:7a:0c:
00:6b:da:86:6e:b9:74:79:d4:de:9f:03:ac:ad:41:
87:84:38:23:28:6d:59:ff:37:08:24:db:4f:fa:8e:
2b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6C:55:2F:1B:2C:BF:FA:23:71:E7:A8:8E:B3:FC:B7:A0:58:60:48
X509v3 Authority Key Identifier:
keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:27:37:31:51:97:94:87:1a:23:7b:4d:dc:f6:38:ef:c7:20:
05:3e:67:87:03:fa:57:39:a9:1e:81:1c:bf:fa:71:2b:b4:d9:
9d:75:19:e4:c4:64:5a:08:fb:d5:ac:b0:ba:38:58:e9:5f:00:
95:b2:ea:6e:67:bd:7d:5e:e7:db:89:91:99:9c:fd:5f:54:af:
a7:5b:f7:4b:40:8b:3f:21:a3:58:ff:76:87:9d:eb:4a:1c:7b:
ec:a5:91:c6:9b:30:77:88:6e:e2:80:55:a0:2b:be:3f:4f:1b:
05:ef:b4:15:7e:72:86:9e:8c:04:ff:0f:54:80:c1:0d:12:56:
bd:13:4a:8a:80:95:d2:2c:d4:e2:d9:11:5d:20:4c:db:5b:99:
28:77:ab:2d:20:3e:dc:60:c3:b8:3b:49:cd:20:ba:ea:92:0b:
fe:7e:74:b7:65:bd:4f:56:a0:f4:79:07:69:d8:1d:e6:4d:02:
d8:cf:d3:4a:c1:b7:04:e8:13:ca:c6:e4:c8:d2:f5:fc:df:99:
4f:79:0a:42:a2:fa:10:f4:48:2d:d1:be:20:e9:34:80:85:5a:
f7:f5:1f:2c:2c:d7:ce:bd:e1:13:23:76:91:fe:4d:76:7b:ff:
92:a7:70:de:87:d8:ed:fd:53:d3:d0:b8:77:a2:ca:3b:e9:4d:
2c:5a:7f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:12 2025 by rpki-client