This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json)
Hash identifier: 7Bhc3CEsgZKL8hb9HiOBLq+Ek+Wb5rLQRkVi+JKqUmA=
Subject key identifier: 62:F3:8A:CA:06:A0:B1:00:89:41:94:ED:12:7D:1E:E7:B3:A1:8E:85
Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Certificate serial: 0538
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
Manifest number: 0532
Signing time: Thu 04 Dec 2025 22:05:48 +0000
Manifest this update: Thu 04 Dec 2025 22:05:47 +0000
Manifest next update: Thu 11 Dec 2025 22:05:47 +0000
Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: 9z6/XzAI1zb+cAiAzEKJ2G7IRh70VpGNS095FQV/kaQ=)
2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: Bfjs/rTdpDPTDnJIoWaxeafLKa6QSKWFHwoAGDnn1AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:05:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1336 (0x538)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721
Validity
Not Before: Dec 4 22:05:47 2025 GMT
Not After : Dec 11 22:05:47 2025 GMT
Subject: CN=693205bb-5a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:38:5b:d7:41:4d:35:7c:0f:72:d3:fb:a7:
a9:0f:38:a0:45:d5:c0:f4:77:14:1e:31:1f:6a:c0:
0a:80:cf:24:20:97:5d:6a:3e:4b:19:25:4e:47:f0:
5f:cf:74:ba:74:da:58:7d:62:fe:aa:ac:50:86:cb:
65:f2:28:39:e9:68:18:4d:da:e3:eb:0a:d9:b0:b7:
60:46:31:9e:bf:ef:29:fb:01:a8:9f:c6:52:79:2e:
8c:1e:a7:a9:3f:36:80:3f:5f:68:73:67:c7:a6:8c:
2e:4d:dd:c4:72:2a:80:ea:4c:2f:94:ca:50:f5:8c:
33:c9:14:f1:42:04:4b:64:7d:3c:00:8e:c3:48:73:
47:ab:56:d6:02:75:e4:b7:79:90:f8:9e:d3:56:b0:
44:ab:91:04:c6:48:f3:2a:eb:d6:56:d7:bb:05:1d:
78:b4:a9:0d:dc:50:5d:75:63:6e:60:2f:72:4e:9d:
9f:38:c7:2d:64:e6:91:25:2a:91:6b:70:de:12:bd:
da:9b:3f:77:d4:d2:e9:ec:e0:d6:96:5f:46:01:84:
88:90:cf:0a:a0:cf:fe:5e:43:c6:eb:2f:0b:24:f0:
3b:c5:51:ed:61:fb:f4:03:bb:f7:d0:df:9e:f7:87:
8a:f7:7d:a2:1a:78:23:b7:43:1c:77:eb:4b:e6:e7:
a0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F3:8A:CA:06:A0:B1:00:89:41:94:ED:12:7D:1E:E7:B3:A1:8E:85
X509v3 Authority Key Identifier:
keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:65:74:f0:79:b7:7a:e2:88:3c:46:ff:ba:7a:b3:fa:4b:f3:
30:4f:57:c6:85:1c:06:1a:db:74:1a:42:51:6c:04:d9:30:a8:
42:a4:d0:92:b0:d5:23:ef:6e:25:75:77:12:fe:1e:3d:ab:6e:
6e:f1:c8:e9:6c:dd:53:18:68:5b:12:60:c1:8c:84:df:2d:ca:
ba:79:7a:60:a1:7d:0b:43:92:f9:c9:fe:25:86:83:5c:c1:45:
8f:66:f4:8d:9c:39:3c:28:ac:b3:ba:89:0f:11:84:ef:a1:5f:
46:f4:0c:51:61:24:29:9f:94:27:ac:8a:67:2e:bd:9f:2c:dd:
6b:e0:b5:4e:1d:4b:07:63:b8:24:51:62:19:d7:66:ea:7c:17:
af:07:c3:64:98:c4:ca:e1:5d:ae:77:58:5b:d4:3e:3b:82:2e:
93:2f:ba:43:d7:fa:7e:61:f5:ce:dd:cf:a1:b7:3c:c6:68:3f:
80:23:ad:ae:d8:2c:17:79:66:b6:98:03:62:fb:0e:6a:d1:27:
c3:3f:9d:ab:25:67:8c:e7:99:63:a6:67:cc:7f:f5:38:d6:95:
e0:90:32:4d:e9:88:90:a0:b1:fb:48:42:08:ca:37:79:c4:10:
54:5a:97:76:64:82:89:36:a1:c5:42:c9:46:e8:85:d1:76:25:
68:ce:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:24:05 2025 by rpki-client