This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
File: Ym10UmNzXXYYZJvVMYyB-6it3MA.mft (raw, json)
Hash identifier: T0m+k6kaz73ko4IwSP2XbzI/69pTC3gdxyaeoz7Tsdc=
Subject key identifier: 7A:E8:B1:98:8C:47:80:A0:F8:BC:39:9F:1D:30:E1:07:30:F3:E8:97
Authority key identifier: 62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
Certificate issuer: /CN=A916B7FC/serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Certificate serial: 86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
Manifest number: 86
Signing time: Fri 05 Dec 2025 04:34:01 +0000
Manifest this update: Fri 05 Dec 2025 04:34:00 +0000
Manifest next update: Fri 12 Dec 2025 04:34:00 +0000
Files and hashes: 1: Ym10UmNzXXYYZJvVMYyB-6it3MA.crl (hash: YaYXlzaikeIx7MgAnJhi6Pz+nSnFWBriGBznA+FKQTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B7FC, serialNumber=626D745263735D7618649BD5318C81FBA8ADDCC0
Validity
Not Before: Dec 5 04:34:00 2025 GMT
Not After : Dec 12 04:34:00 2025 GMT
Subject: CN=693260b8-69e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:16:59:b9:05:6c:8c:1b:6d:85:17:33:81:
d5:02:67:84:8f:ad:d3:6c:ba:9f:42:88:3e:4f:77:
3d:6f:0e:c1:d2:1a:05:d2:ba:14:f8:33:a0:cc:6b:
b5:e1:cb:bc:54:98:53:45:ad:77:a9:26:9f:85:ce:
04:91:f8:84:01:9a:64:99:47:04:ad:7b:4f:67:e3:
f3:ef:be:0d:0f:25:70:29:42:7d:a9:0a:c5:a6:e1:
2c:19:1c:9a:9a:c0:f1:97:07:fc:61:e0:07:55:15:
a4:d7:74:64:06:5e:9e:ad:7c:c1:77:43:7b:92:f3:
d4:da:4d:17:01:2d:98:96:6c:45:5d:cd:19:6a:d4:
70:db:ba:7e:b7:fa:35:1f:da:6e:c1:93:80:d8:bb:
69:27:8b:1e:4f:20:de:64:a8:2b:3c:1e:91:ef:3c:
f6:24:65:8a:0e:fa:25:9b:16:97:54:23:e0:9a:56:
83:c3:79:ae:15:58:ee:8e:ac:10:af:f2:99:91:14:
04:61:01:e9:83:a5:0e:5c:6f:34:97:a9:8f:0d:7c:
ac:fa:8c:7c:1c:de:94:78:3a:a5:18:ae:72:db:bd:
b9:b3:90:3c:fa:87:6d:2a:47:d0:4f:4a:a2:cc:5a:
b0:d3:ab:f1:77:5a:54:52:b6:e4:81:f0:0a:04:73:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:B1:98:8C:47:80:A0:F8:BC:39:9F:1D:30:E1:07:30:F3:E8:97
X509v3 Authority Key Identifier:
keyid:62:6D:74:52:63:73:5D:76:18:64:9B:D5:31:8C:81:FB:A8:AD:DC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ym10UmNzXXYYZJvVMYyB-6it3MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B7FC/CF8E301603A711F0A7FF9C87C4F9AE02/Ym10UmNzXXYYZJvVMYyB-6it3MA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:2f:a8:2e:a1:c0:35:2e:2e:49:d7:15:bd:78:9a:0c:8c:
a0:77:87:59:b8:dd:8f:2d:67:dc:3f:02:0d:84:04:99:9b:8d:
97:b5:be:11:d1:02:4c:a0:8f:03:4c:a9:65:68:ab:9a:a7:20:
25:52:13:a2:5c:4f:2e:e3:ad:3d:2c:9e:e9:a2:6e:a1:02:83:
9e:22:ce:bb:4d:ab:ab:dd:d1:55:9f:80:54:9a:ae:d9:c5:7e:
af:4d:9f:ee:15:60:9c:de:f8:c5:0a:e7:06:92:bc:0c:db:c7:
80:35:eb:53:06:63:8a:fa:4e:b7:0a:60:54:c6:f9:48:0c:1e:
6b:72:30:d8:e6:6e:3d:73:51:9e:fd:66:db:50:56:bd:a4:9f:
bb:a8:8c:8e:e2:f7:2c:ee:97:8c:b3:78:7f:ff:be:47:00:13:
f2:d9:07:24:cd:4b:ae:86:d3:25:40:09:c9:a3:50:4b:3b:37:
5f:17:1b:ed:35:a9:1e:0c:e5:aa:fc:07:0c:3d:8f:bf:01:7d:
82:c0:23:cc:b9:23:44:66:14:76:8b:03:0b:96:d5:41:67:e5:
2f:c2:19:45:9c:76:cb:55:2a:62:a0:5e:eb:ba:8e:ee:e6:97:
1b:29:f4:40:27:5f:86:4a:c7:87:24:b9:c7:32:90:0c:7b:bd:
5a:94:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:24:27 2025 by rpki-client