This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
File: PeZ4HWdeynny_j0XqyQ8t0t7liI.mft (raw, json)
Hash identifier: GgeBiljZBzIRKWuorgh3Nn2VnMh8+vRoVw2Soa7V8KU=
Subject key identifier: DD:1E:27:DE:86:04:24:06:55:D9:07:4B:7A:EE:CA:C0:D4:EA:5E:FF
Authority key identifier: 3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
Certificate issuer: /CN=A9166123/serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
Manifest number: 01E3
Signing time: Sun 07 Dec 2025 01:12:05 +0000
Manifest this update: Sun 07 Dec 2025 01:12:05 +0000
Manifest next update: Sun 14 Dec 2025 01:12:05 +0000
Files and hashes: 1: PeZ4HWdeynny_j0XqyQ8t0t7liI.crl (hash: WJBazFQoHdTQokknWwIPWiWouRBYe3JW8LVXXKUDtZ8=)
2: 38891D6C159111EEA7190965C4F9AE02.roa (hash: meLyoohFJXeq9xZyDhHsYBao6mMdxERyGjcvbUw1nUs=)
3: 2F02BC96718D11EE97E3E022C4F9AE02.roa (hash: aL33iipoIJ8uom00lMgUJWhHvjr9mG3sVCYSyGN714A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123, serialNumber=3DE6781D675ECA79F2FE3D17AB243CB74B7B9622
Validity
Not Before: Dec 7 01:12:05 2025 GMT
Not After : Dec 14 01:12:05 2025 GMT
Subject: CN=6934d465-77b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:f1:1f:a5:35:93:71:de:5f:6b:6f:02:fd:
44:c9:ab:b2:8f:52:c3:49:fb:c7:13:13:fa:60:7d:
21:c7:f4:94:57:98:ea:b8:10:9b:21:fe:31:e0:8f:
d6:55:90:34:93:fa:93:52:bb:36:6d:7d:39:6c:61:
46:4c:8f:d5:78:c3:43:ea:c7:b0:6d:c0:9b:0f:e3:
8a:72:50:59:49:06:74:de:7a:06:d2:27:46:52:f8:
d5:c5:df:33:b5:7a:73:fe:c8:3c:81:fa:71:42:32:
2d:fc:d5:81:4e:39:f2:e0:a4:16:9d:74:05:2e:6c:
8a:16:38:d2:90:03:8e:49:69:cb:bb:2d:12:79:85:
90:79:ad:bf:c1:7f:32:0e:51:80:b3:8d:1b:24:06:
6d:87:01:8a:4a:61:53:ac:e5:f2:9f:d0:16:e5:c3:
c5:96:a5:32:01:96:dc:13:e7:38:53:f3:76:90:01:
69:e0:9f:2a:44:10:21:c3:e2:be:82:9e:3d:d0:f6:
f8:d3:72:66:22:f2:57:24:1d:cf:d7:50:c6:9e:c5:
30:3e:b4:e7:89:ef:8d:33:4b:0d:a5:f0:c5:42:c6:
aa:12:c0:98:e0:46:97:c0:cd:5e:02:71:b1:ce:52:
4c:e5:5c:3e:e6:de:c1:4e:2a:e2:20:d8:51:e8:d6:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:27:DE:86:04:24:06:55:D9:07:4B:7A:EE:CA:C0:D4:EA:5E:FF
X509v3 Authority Key Identifier:
keyid:3D:E6:78:1D:67:5E:CA:79:F2:FE:3D:17:AB:24:3C:B7:4B:7B:96:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PeZ4HWdeynny_j0XqyQ8t0t7liI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/10BE9E22F48C11EDA8895453C4F9AE02/PeZ4HWdeynny_j0XqyQ8t0t7liI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:77:13:5f:75:92:0b:ce:bf:c0:25:1b:90:99:bb:1a:e7:95:
55:25:61:05:7f:d1:97:e1:7f:84:0e:a1:ac:bc:61:23:b7:d5:
0f:ff:36:13:38:cb:30:9b:59:b2:a7:24:b8:10:a2:af:2f:a0:
94:96:d5:df:0a:3a:ba:c0:55:d9:2a:b9:c3:41:3b:0f:e3:d1:
02:ad:72:4b:12:c2:b8:18:8b:0b:07:6c:9f:2f:71:7c:1f:50:
83:fa:82:d8:d3:59:46:81:87:19:61:c3:66:da:af:08:38:fb:
7c:b1:de:93:ea:ab:7d:4f:d9:95:67:49:c0:d0:38:be:a4:42:
e5:47:78:9a:4a:74:fe:79:f6:e7:c6:6d:26:24:52:20:75:88:
4f:13:9a:21:0d:bd:9f:06:48:98:37:89:c0:c3:00:a1:5b:12:
10:e9:c0:d0:38:46:44:42:fc:2f:bf:53:ee:7c:72:df:2a:43:
52:a2:0f:f7:78:1b:fe:16:92:bb:86:70:e8:cc:bc:aa:50:07:
47:e8:76:4f:94:fc:e3:b8:27:ce:db:a3:05:f0:42:f5:5b:d6:
ab:7a:cd:30:25:04:05:f4:4d:71:1d:c6:e2:8f:a8:65:06:7f:
7c:82:6e:26:f7:eb:be:2b:cc:52:fe:fb:c7:d1:eb:9b:c7:5a:
62:b8:2c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:24:23 2025 by rpki-client