This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
File: AxycJuW6sbAa8YoLsblwq1dzRWs.mft (raw, json)
Hash identifier: OsA7ogBs9nFj6sw2WNS7AAb8vQhA++NWs3h3uqBocek=
Subject key identifier: F9:E1:10:A9:89:91:52:DB:4F:DE:2C:12:A4:97:6B:8D:2A:E5:46:EB
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 069B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
Manifest number: 065A
Signing time: Thu 04 Dec 2025 21:35:38 +0000
Manifest this update: Thu 04 Dec 2025 21:35:37 +0000
Manifest next update: Thu 11 Dec 2025 21:35:37 +0000
Files and hashes: 1: AxycJuW6sbAa8YoLsblwq1dzRWs.crl (hash: +mzo57ZGm8mEn9Pu85n5Ff5j6zyEzkXb23yILx4rRQQ=)
2: F2CF477E50C711EF8B03E673C4F9AE02.roa (hash: btGjIQwgSn7JJwZL2buYiqMnVUjDHCpTzcRyOHOVV9w=)
3: 3B428CDA8AE011EF90B73462C4F9AE02.roa (hash: 57IRG/hk+CbShhSRohuNNMRM6NtPI2s9mEQB7EL1Rs8=)
4: E88EE726E93611EF9E3FF729C4F9AE02.roa (hash: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=)
5: 37DF315640B111F0B139F22BC4F9AE02.roa (hash: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1691 (0x69b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Dec 4 21:35:37 2025 GMT
Not After : Dec 11 21:35:37 2025 GMT
Subject: CN=6931fea9-607c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:02:4d:ad:11:f6:9d:94:d1:bc:1a:5e:bd:
eb:ef:7b:42:c3:58:12:35:3f:4b:45:ee:80:4f:5b:
8a:f5:53:ea:13:14:1a:a6:f8:cb:c7:74:1b:1e:b9:
87:67:4f:fb:9f:ee:7b:fa:ee:ee:f5:e8:b2:06:de:
d9:fb:82:80:e7:ba:77:8c:d2:09:9e:ec:2e:68:a2:
29:aa:5f:d1:97:79:b6:30:a3:3a:85:cb:c5:cf:d3:
5f:46:3f:0c:d2:aa:80:92:8a:bd:cd:52:72:b3:47:
26:d3:67:03:6a:0f:30:1c:f9:d8:b8:83:a9:f3:cc:
a7:73:17:33:72:c5:b2:9c:47:f2:ec:72:17:8f:86:
92:bb:52:ea:23:e1:a5:37:be:3b:e1:ac:db:61:36:
5c:b8:4b:50:aa:8e:83:08:48:ad:02:88:54:3e:86:
3c:8a:9a:6c:7c:29:48:ac:e7:3c:95:00:c1:6e:de:
ed:b8:12:bc:55:69:9d:a4:2c:d1:89:a1:f0:a0:93:
a3:ef:a0:22:8e:c0:b5:6d:0f:1d:aa:e8:0d:52:31:
18:6a:a3:77:b5:60:02:2b:8f:68:f4:78:be:fe:95:
e2:c1:84:19:86:11:06:a4:d2:af:15:49:1a:17:d5:
30:9f:a1:d0:00:f6:d0:23:45:77:37:36:83:57:f9:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:10:A9:89:91:52:DB:4F:DE:2C:12:A4:97:6B:8D:2A:E5:46:EB
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:8e:02:19:fa:c0:d0:c5:00:04:5b:af:7a:25:53:a0:31:dc:
96:d0:e1:6d:4b:56:0a:22:f9:26:f3:88:99:5b:e2:85:ab:32:
b5:e2:90:a9:9b:dd:cd:28:65:a7:e1:03:27:1a:db:31:b2:8a:
e1:3f:06:0a:d5:17:66:31:e3:43:3a:33:99:dd:22:45:c4:6a:
f4:d3:e1:ed:3d:c4:5a:89:09:15:2c:17:c5:37:56:47:a7:2f:
97:04:ae:ea:47:bc:13:59:7e:7a:cc:9c:35:05:70:81:e7:47:
e1:0c:28:00:ed:fb:d5:70:ef:c4:b5:d8:98:91:af:b3:1b:0f:
30:32:53:9f:99:06:59:ec:bb:01:80:90:70:ea:68:cd:1d:85:
c9:02:59:8d:8d:42:36:4e:1d:a8:13:67:6d:7e:39:9b:c6:ab:
71:1f:87:d8:c3:a4:32:ec:bf:46:09:3a:8c:59:23:34:9f:e6:
a1:13:e3:ad:9f:cb:92:c0:84:65:0a:08:23:95:c7:50:a6:d1:
7f:6c:28:5d:c0:9b:af:b3:68:49:10:ad:c3:89:79:e7:dd:97:
78:21:c0:37:9d:9e:d9:02:e4:01:37:d1:2b:04:1b:55:fb:21:
c4:db:00:89:bb:48:60:a4:60:d1:b7:35:ed:7f:a7:7e:ac:4d:
19:37:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:08:42 2025 by rpki-client