This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier: yxcEBZKVx2jRoPtE8A4m2KJRe4mfiJ1LVw1ubYcH2dc=
Subject key identifier: 0E:65:01:B0:31:C7:BD:AA:B8:3A:6E:E9:D9:8D:C2:06:B9:51:75:FB
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial: 05D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number: 05FD
Signing time: Sat 06 Dec 2025 21:53:46 +0000
Manifest this update: Sat 06 Dec 2025 21:53:45 +0000
Manifest next update: Sat 13 Dec 2025 21:53:45 +0000
Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: lt6+zk1lJKaZdoN2mK9di6R3wIqQ5qlPBoR9qdwEDdc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1490 (0x5d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Validity
Not Before: Dec 6 21:53:45 2025 GMT
Not After : Dec 13 21:53:45 2025 GMT
Subject: CN=6934a5ea-fd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:1a:5f:2b:74:51:b3:4b:db:f2:6b:3b:45:
7d:4d:22:39:29:52:02:c0:7c:65:37:46:3a:2d:24:
10:65:f6:ba:07:76:17:78:68:66:15:25:33:00:7b:
51:0f:11:cf:d6:b1:06:d5:6b:0f:52:5f:e1:5c:1b:
94:66:ab:0e:42:45:b6:cf:9c:bf:0d:6f:87:e1:ba:
9c:a8:9f:51:9a:fb:0f:2a:b0:d5:8e:1b:59:c7:73:
12:5d:29:7b:c5:be:7f:a6:8d:95:79:3c:f5:39:c7:
87:8c:27:b9:08:df:df:80:e2:86:9e:af:ef:60:84:
34:b1:8b:7c:01:92:b0:19:61:28:5f:43:b7:7b:fa:
b6:65:38:75:1f:20:5e:90:3f:d0:5c:81:af:6d:f1:
0c:06:88:9c:8e:5b:cf:41:b3:24:5d:a8:54:ce:d3:
90:25:9f:17:03:02:dc:9a:ea:54:d5:f4:de:4a:f5:
3c:0c:b4:3a:78:d5:54:cd:61:8a:73:94:39:ec:08:
49:58:c0:ee:af:5c:1a:c5:d1:41:7e:d5:87:bd:37:
85:96:22:20:92:4e:69:52:2b:f5:c1:b8:9d:7a:df:
0e:74:2e:2e:03:38:71:0a:21:37:08:fc:56:49:de:
5a:be:e6:a4:19:95:00:94:46:f9:fa:27:c4:36:b1:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:65:01:B0:31:C7:BD:AA:B8:3A:6E:E9:D9:8D:C2:06:B9:51:75:FB
X509v3 Authority Key Identifier:
keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1e:b5:b1:1e:09:a7:24:71:0d:17:89:ed:a0:c7:39:ac:59:
b0:72:fb:26:30:5b:20:b9:c4:08:35:2f:51:5c:b0:11:3b:93:
4f:6d:41:36:2d:e5:44:4a:fb:c5:c3:6d:3e:51:87:b3:f1:f4:
df:48:0b:11:e5:ec:56:8e:a3:17:da:a6:38:ee:11:27:2a:d8:
20:73:86:0e:bd:31:76:6c:fe:96:a3:6a:b7:c1:6a:58:f0:67:
82:16:10:57:e8:e0:0e:40:e1:4e:3f:d6:d7:82:06:80:61:65:
46:95:b2:98:80:9f:80:41:4e:ed:da:48:e8:f7:dd:90:f7:d4:
58:7f:57:3d:0a:f6:55:f4:53:87:6d:1f:35:6c:af:54:53:14:
4c:2a:e5:fd:7f:7c:cc:99:e7:b6:8a:31:af:b6:6b:78:ed:6d:
5d:a0:04:38:c4:0b:01:51:3b:08:45:b1:22:ae:be:26:69:8e:
90:10:2c:61:5e:c6:9c:dd:e8:46:cb:2c:26:13:30:a0:e6:99:
a7:88:26:f0:ba:d2:61:50:6c:df:b8:79:ab:5c:6c:3f:e2:1b:
37:6a:61:34:43:76:9d:f2:f9:0e:a1:5e:1c:2a:c7:a4:42:aa:
ff:f2:65:24:f4:c2:60:0e:6f:36:08:ad:c5:8f:0c:e4:3a:dc:
84:3b:73:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:22:41 2025 by rpki-client