This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier: 6cR2G3fIBEszLp6G/k9LVb9c9g3VwkMLCjekeBHlllE=
Subject key identifier: F2:40:7B:18:D4:CC:97:AF:9B:53:50:E0:55:ED:D0:C9:61:22:10:5E
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer: /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial: 0746
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number: 0733
Signing time: Thu 04 Dec 2025 20:42:20 +0000
Manifest this update: Thu 04 Dec 2025 20:42:20 +0000
Manifest next update: Thu 11 Dec 2025 20:42:20 +0000
Files and hashes: 1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: Ojm81p7YgjUeXP5J+8w9YLBjkeOS4NBRYmGA3zwQprA=)
2: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: TMdvekGhsYRkD7vQxOC9M1BNi4ODftadLHkHNnnsSEE=)
3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: wIAUJo6pLOtcdDl/q+XVckYcgHnVKsYs5npKOOs0/x0=)
4: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: Ac+21perclmyIdH4cwpABd4VrpSu8D0aj/0rXmLovJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Validity
Not Before: Dec 4 20:42:20 2025 GMT
Not After : Dec 11 20:42:20 2025 GMT
Subject: CN=6931f22c-a366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:7d:ea:fd:ce:04:0e:54:ea:53:74:dd:26:
15:ff:90:a7:cf:57:80:9d:0a:f7:ca:00:7d:48:64:
cb:f6:1f:1e:a7:2d:d3:d3:b5:84:aa:1e:bf:3f:35:
6c:ca:8e:d2:37:f8:83:80:46:55:f8:b5:51:1f:bc:
75:14:b4:58:33:cb:8c:27:d0:32:ca:e4:ec:cd:11:
46:23:3a:40:03:59:81:1a:55:b3:16:bb:1d:7e:bc:
ee:98:4b:47:e1:b1:f0:c0:a6:af:96:f7:2e:0d:11:
55:73:30:bf:38:f9:0e:fa:8c:92:fa:53:48:d3:02:
93:c1:bc:2f:30:45:c1:99:2b:37:7b:38:93:97:4d:
9a:5b:e9:a9:7c:1b:ae:4c:02:c7:da:71:2f:b5:a0:
ec:12:b3:aa:50:80:7e:91:27:6b:b9:ab:39:c5:6b:
59:d0:1c:c0:ef:4b:8a:c0:bd:30:a1:47:e9:bb:c8:
f2:01:c5:a5:bf:7d:40:5b:8f:79:2b:8c:1c:64:93:
a8:ef:3a:d3:f8:02:5a:d7:21:ba:f5:90:f2:b9:03:
32:8c:ca:c3:d0:67:52:de:6e:29:3e:57:d6:86:4d:
f8:84:5c:ff:78:57:0b:04:e9:f6:c8:06:f7:96:bf:
50:a6:46:97:86:40:97:ee:df:85:5b:0c:c2:d7:f6:
dc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:7B:18:D4:CC:97:AF:9B:53:50:E0:55:ED:D0:C9:61:22:10:5E
X509v3 Authority Key Identifier:
keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:e0:da:2a:33:4e:83:b5:fa:49:64:53:e4:32:c6:2c:1c:
7b:47:d4:c9:cd:ea:ba:c0:b6:0d:64:13:06:f9:05:b7:27:0f:
64:7c:79:91:5b:0f:97:81:51:83:9c:60:82:5c:8e:33:46:b9:
71:c4:b6:71:4b:aa:b1:83:bd:16:46:02:c3:f9:b5:09:d2:4a:
e9:e0:ef:d6:7c:6a:78:f8:eb:53:d0:71:07:96:d7:5d:8a:89:
f3:7d:47:67:b5:12:fd:ea:a5:90:29:e8:36:72:d2:1e:b5:4c:
ff:ba:44:23:8b:aa:ea:5f:aa:19:43:97:4f:84:32:33:ca:3c:
22:c7:ce:d0:17:7c:50:91:34:2e:7d:4f:e5:6f:4f:c9:7a:18:
e3:dc:c9:47:fa:4c:5d:f2:fe:27:13:02:81:06:d1:83:43:93:
41:c8:6f:66:fd:55:96:45:60:41:40:c4:2c:e7:1f:9c:f3:ba:
dc:8b:07:d3:0c:e5:ba:03:c7:b1:8f:85:28:43:16:f0:cd:0b:
03:47:4d:96:99:d8:63:b0:68:5f:7a:75:76:12:0f:fd:87:19:
85:60:c2:fe:fa:0a:57:34:b5:c2:c2:de:ba:1f:33:56:eb:af:
e5:11:fc:ed:ca:e5:4f:eb:3d:ae:34:8e:be:55:52:0b:16:96:
be:48:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:41 2025 by rpki-client