This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json)
Hash identifier: eR4kP+Bv3Ea9ct8bgkVhAovxGPhfio9NkoZV9bIXXJ0=
Subject key identifier: 99:9A:56:87:21:99:4A:8B:A0:84:1E:2C:5A:EA:91:59:6C:A8:78:9E
Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
Manifest number: 01FF
Signing time: Sun 07 Dec 2025 00:55:19 +0000
Manifest this update: Sun 07 Dec 2025 00:55:19 +0000
Manifest next update: Sun 14 Dec 2025 00:55:19 +0000
Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: qj437s0jJdSWs9X+E915tCIg5w247hXASZC0Q24vvlU=)
2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: iJgF3xLl/F7BTTiuttHhI1X4PDcUoYj6A2s1rvrmJk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Validity
Not Before: Dec 7 00:55:19 2025 GMT
Not After : Dec 14 00:55:19 2025 GMT
Subject: CN=6934d077-30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:9a:f4:9b:4f:df:eb:7f:40:94:74:b3:3d:
cf:b1:72:74:d8:cd:7f:19:47:ac:26:c9:54:df:bf:
77:42:b4:61:0f:4d:27:ab:a8:4b:b6:30:84:21:f3:
1b:b1:26:f7:6d:ba:95:33:f5:75:d5:8b:41:75:4e:
e4:14:2c:4f:16:0a:91:39:6b:89:00:57:7e:56:e8:
4d:24:a4:5c:a8:60:cd:5f:82:d8:86:10:c6:3d:13:
22:b0:e3:eb:37:b1:31:52:3f:fc:00:6a:b0:ee:db:
fb:f4:80:44:ee:4f:26:7d:fe:87:2e:b3:62:cc:20:
ad:7c:a1:73:1f:ab:8c:22:85:0a:32:2d:40:9b:f7:
66:56:98:86:10:f6:f2:1f:47:dd:12:c1:6c:05:17:
4f:73:ac:08:81:31:cc:dd:40:90:a6:fb:f2:b1:8a:
d9:61:66:6e:e9:88:ec:78:b7:dd:e9:c2:73:12:84:
93:69:4a:10:84:72:18:52:97:35:c1:66:98:7a:c9:
a4:06:00:23:d6:f4:cd:72:4f:cf:61:67:e1:ca:5e:
8e:e9:a7:5f:6e:44:3a:de:12:f6:be:00:be:e9:3d:
e5:72:7e:51:ee:3c:ad:2d:88:c0:45:67:9f:1f:f8:
b3:c8:43:7a:c6:a0:bb:0f:ae:ac:a2:14:4c:76:12:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9A:56:87:21:99:4A:8B:A0:84:1E:2C:5A:EA:91:59:6C:A8:78:9E
X509v3 Authority Key Identifier:
keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:38:a5:c1:74:7b:3b:5f:cf:be:df:7f:b4:d8:96:c5:cd:92:
eb:5c:78:25:eb:ef:27:65:bd:1e:5e:1a:6d:4b:5f:04:68:af:
5a:63:9a:42:ea:6b:1d:d6:ed:61:93:c2:f4:59:8b:fd:44:86:
b0:f7:ea:b9:61:a4:44:82:7e:3e:a5:7d:36:5a:27:54:c5:79:
c8:d9:07:ae:c3:e0:dd:76:ed:a1:0e:2e:b3:61:c8:fd:ca:47:
cb:af:2f:34:a4:fe:8f:3b:61:f5:0b:5f:91:7b:40:5e:9f:d3:
43:93:c6:b8:f8:d3:6d:09:e2:e7:70:40:71:90:06:9d:c1:2f:
39:67:2c:21:49:15:f9:6d:a1:eb:d4:20:5b:42:8e:d6:26:17:
f4:9c:84:d2:07:f7:fb:36:2b:47:91:09:f8:9a:5e:a4:1d:9c:
4c:f3:69:d1:31:07:a6:c2:f4:31:e7:da:4f:1e:31:84:71:18:
f1:67:61:7f:c7:a3:68:3b:d9:9a:f7:ef:04:61:df:2c:c2:00:
ee:45:08:69:d6:a4:3e:2d:2c:95:a2:7d:f2:7b:54:9d:ac:2b:
a6:50:16:70:88:91:52:ae:6f:6b:88:21:68:bb:49:bf:05:7d:
80:b1:e5:c6:8e:b5:4d:7e:f8:99:16:c0:46:d5:20:7b:ca:a4:
ae:6e:10:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 11:47:22 2025 by rpki-client