This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
File: cM1M0T4uN35eXDervHl-7ea2Yhs.mft (raw, json)
Hash identifier: lPWCnhjxmTaKBRs0lKCztpGADkvYuzDV+hFVHDnpOBg=
Subject key identifier: A7:29:20:B4:65:E4:A8:31:55:45:C9:A7:91:89:BB:1D:AC:33:78:BA
Authority key identifier: 70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
Certificate issuer: /CN=A916F338/serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Certificate serial: 02F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
Manifest number: 02F3
Signing time: Thu 04 Dec 2025 23:37:19 +0000
Manifest this update: Thu 04 Dec 2025 23:37:18 +0000
Manifest next update: Thu 11 Dec 2025 23:37:18 +0000
Files and hashes: 1: cM1M0T4uN35eXDervHl-7ea2Yhs.crl (hash: I7S7I4X6Q9iMyHtvlI9pkSJP0wjkNM3D6rU2Hy3Md/4=)
2: BA5354A4044211EDBB686665C4F9AE02.roa (hash: Lf0VfH0avpxECSJrg7abpQt5YjeQO5xWcAxZQuKd0tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 761 (0x2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F338, serialNumber=70CD4CD13E2E377E5E5C37ABBC797EEDE6B6621B
Validity
Not Before: Dec 4 23:37:18 2025 GMT
Not After : Dec 11 23:37:18 2025 GMT
Subject: CN=69321b2e-dd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:6b:01:77:30:25:b0:c4:1a:b6:1d:0b:3a:
cb:dd:46:bc:14:8e:a1:aa:6b:81:d7:28:5b:c4:cd:
56:52:80:dd:9a:d7:30:5c:51:c8:c7:bd:e3:f7:31:
76:b4:0c:47:9d:47:67:c5:23:f4:40:62:42:86:2b:
da:64:3c:aa:a0:64:f5:ab:bd:ad:39:7a:eb:4e:2f:
07:86:a2:37:26:15:4f:ed:e0:f4:eb:1f:c4:5f:94:
59:e1:e5:91:f5:84:58:99:3b:bf:9e:23:39:6a:b0:
2a:1e:d8:0b:70:17:8a:ea:cf:09:cf:05:64:5e:c7:
21:66:ac:b8:ac:ee:27:f1:8a:b0:74:73:57:df:83:
0b:6f:19:82:01:55:58:bd:3a:02:d2:0e:53:27:b1:
3f:b5:12:41:5d:19:e8:c6:34:bc:83:fb:89:ab:fd:
2e:6e:33:af:db:49:83:a4:60:e8:89:78:3a:12:d8:
3a:08:7d:32:05:5c:92:ff:ff:9e:f8:7a:c1:16:2b:
95:f7:e8:ea:c5:b6:24:08:9a:96:93:bc:fe:90:95:
85:6b:4c:b1:9e:ca:c1:eb:64:57:8e:ee:d1:4a:21:
7e:b6:72:fe:74:44:a3:6c:33:21:d1:c9:47:ad:c8:
b7:33:ba:cf:ef:69:2a:e9:02:80:e8:14:84:6f:d9:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:20:B4:65:E4:A8:31:55:45:C9:A7:91:89:BB:1D:AC:33:78:BA
X509v3 Authority Key Identifier:
keyid:70:CD:4C:D1:3E:2E:37:7E:5E:5C:37:AB:BC:79:7E:ED:E6:B6:62:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM1M0T4uN35eXDervHl-7ea2Yhs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F338/D21117DC043F11ED939AE062C4F9AE02/cM1M0T4uN35eXDervHl-7ea2Yhs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f0:6b:b5:24:54:b6:72:02:1e:92:95:69:94:ed:fb:5c:47:
23:02:19:ae:2a:3b:3d:e5:a1:64:b4:f3:c4:d7:ad:f7:f6:d9:
f8:03:bf:78:63:f9:62:b7:e7:c6:d8:b1:2b:af:79:8a:92:59:
18:63:33:d1:06:21:30:62:e0:6d:34:1f:b6:3a:83:d3:25:26:
70:5a:12:00:1b:97:a4:3b:a6:49:5c:6d:ec:6a:97:88:f5:49:
9d:51:f2:f6:20:7e:34:b7:25:68:e0:58:8c:0c:57:88:f7:40:
8c:23:03:4e:2c:cc:f7:d1:52:6e:c6:bc:c2:c2:1c:40:61:79:
8c:fc:f3:f2:b9:03:25:93:9c:bf:72:8a:a6:69:c8:7b:83:8c:
66:bb:a5:e6:e1:de:a4:d6:40:88:2d:b3:b2:4d:9a:d5:73:99:
76:85:ca:41:9f:79:d7:ba:b4:97:51:30:a5:fb:37:c7:ff:f4:
23:cd:b1:8b:c2:a7:fc:38:85:90:26:d6:bf:3e:5e:67:85:d3:
fc:3d:da:a5:64:66:de:17:14:23:8a:c4:61:fa:98:d1:4c:5d:
ef:b2:7d:54:79:a7:cf:41:71:d0:97:c6:78:f3:48:d2:7e:ce:
f6:c6:f3:a3:11:94:66:13:1d:98:f4:88:79:f3:a7:64:0d:dd:
36:4c:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:17 2025 by rpki-client