This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
File: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft (raw, json)
Hash identifier: puBn7kQp9iWPBgasWHesWzVfWJ3rYK+aox2HsTdEJos=
Subject key identifier: C6:34:5C:A7:0F:EF:08:D5:92:DA:89:EA:53:B2:3E:10:74:9C:B2:16
Authority key identifier: 94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
Certificate issuer: /CN=A916DC92/serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Certificate serial: 0CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
Manifest number: 0C92
Signing time: Thu 04 Dec 2025 17:53:41 +0000
Manifest this update: Thu 04 Dec 2025 17:53:40 +0000
Manifest next update: Thu 11 Dec 2025 17:53:40 +0000
Files and hashes: 1: lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl (hash: KcT2kvb8vU3LhvFDjSL5OrHKOTk3i+a0FZqq4FfjI2Q=)
2: CE15A7B409D911EA80E56E21C4F9AE02.roa (hash: KRpOoM5OBYozHGqs3tAj+O3jIxT+88DuqXNJ+j9YBFM=)
3: CCE5BAAA09D911EA80E56E21C4F9AE02.roa (hash: UK4U60eiGuCuztGWWVANU0DD3PkFQsjwpFntP06fM3U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC92, serialNumber=945D097F2263D14C36B7B65C2DC0C25F9EE77192
Validity
Not Before: Dec 4 17:53:40 2025 GMT
Not After : Dec 11 17:53:40 2025 GMT
Subject: CN=6931caa4-7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:17:67:75:26:2b:d6:a6:5f:46:64:ca:74:
7e:d7:cc:6b:78:6a:ba:cd:13:f0:18:cc:eb:1c:cb:
6a:14:8a:c9:36:3c:ce:79:3c:fe:04:da:e7:0f:b0:
2f:e0:53:96:ba:47:3b:fd:c4:34:23:8e:d6:22:88:
c3:b1:7c:f9:4b:81:f8:3f:c5:29:36:e0:37:af:42:
3e:32:3d:7c:0c:05:53:c4:05:57:5f:69:8b:f6:ba:
f2:45:a4:c2:df:d8:e7:94:b4:70:b4:37:05:e4:9a:
8f:a9:b0:4b:06:41:2b:9f:77:e9:41:4d:40:10:31:
48:24:87:1f:06:39:23:5b:ed:69:71:6d:58:9b:fd:
3c:ed:6f:ae:32:1d:b0:bd:31:c4:e5:f9:86:84:5a:
a0:ac:e8:4e:1b:83:ee:a3:1d:18:ac:c5:15:fa:e5:
6c:dc:62:e5:20:7f:54:48:bd:ff:21:83:9d:8c:8d:
80:d7:64:04:34:36:b7:a0:59:1a:91:7a:96:d4:0e:
22:a5:b1:b3:4d:a4:9a:96:2f:3e:e6:70:8a:9f:14:
61:57:e8:d5:0c:b8:11:43:1a:e3:95:da:f1:89:07:
08:f5:78:22:ba:51:db:88:dc:d3:83:80:70:df:ef:
52:2e:cb:bf:f8:82:bf:b1:0c:f2:c6:4b:c2:c3:5d:
15:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:34:5C:A7:0F:EF:08:D5:92:DA:89:EA:53:B2:3E:10:74:9C:B2:16
X509v3 Authority Key Identifier:
keyid:94:5D:09:7F:22:63:D1:4C:36:B7:B6:5C:2D:C0:C2:5F:9E:E7:71:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC92/0F4D7B4609D811EA9FE8DB1EC4F9AE02/lF0JfyJj0Uw2t7ZcLcDCX57ncZI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:42:96:f9:bf:80:19:9c:ad:1f:fe:00:4c:a6:39:13:05:
d0:06:26:b1:47:9b:21:ee:ba:5f:9c:94:e0:f3:b5:42:1f:2b:
01:a3:bd:5e:8a:52:d7:ae:cb:66:06:f7:e3:97:3b:45:20:6d:
fc:5a:1d:0c:01:cc:1e:0f:51:d5:d7:81:5c:65:35:23:5b:32:
de:db:52:87:d0:46:b3:22:11:a7:d8:c9:e4:45:44:09:1d:b1:
1c:1d:2b:70:37:52:ad:8f:22:ce:b7:1c:11:ec:6d:52:51:d8:
e4:95:70:37:b2:fc:83:ab:64:53:ff:8f:68:10:c5:4c:fd:87:
14:dc:23:37:86:6b:eb:e9:99:8a:89:91:8a:52:ef:3b:58:fb:
76:66:4e:34:d5:9e:65:1c:fd:7b:b8:b3:0a:ed:99:09:09:37:
79:f2:ef:c8:97:91:0a:7e:1e:fe:23:7a:7f:48:c5:52:14:25:
ad:9e:60:6d:43:84:96:2f:2a:2f:86:9c:ab:78:ba:57:4e:fe:
75:f5:d7:db:fb:9a:07:28:2f:11:f5:37:0e:b2:9d:04:20:34:
ed:00:42:d3:c0:c7:94:7b:17:a9:40:b3:76:da:e7:42:47:de:
ed:2e:1a:24:14:eb:68:8c:3e:fd:5a:9d:08:41:d0:fc:cd:ae:
31:72:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:57 2025 by rpki-client