This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
File: R-xTv901EyDomyxUG6zdTY1SoLM.mft (raw, json)
Hash identifier: 1kDgmMUBKMaalVG+3UqzSqCA/nHkM5mPpZJBoV9zM3A=
Subject key identifier: F9:D5:A4:65:4F:7D:57:19:5A:FB:CA:E4:7C:88:02:D0:CB:A9:D9:B3
Authority key identifier: 47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
Certificate issuer: /CN=A9173DB5/serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
Manifest number: 06B5
Signing time: Sat 06 Dec 2025 21:14:50 +0000
Manifest this update: Sat 06 Dec 2025 21:14:50 +0000
Manifest next update: Sat 13 Dec 2025 21:14:50 +0000
Files and hashes: 1: R-xTv901EyDomyxUG6zdTY1SoLM.crl (hash: GJjBhxf3vnSrUqbinj0ry1zhCVVFP5BPN/Yewq6vo5M=)
2: DC130EBC913A11F08A1B3D3DC4F9AE02.roa (hash: DQnHl31CJCa6fulX34rSYao3uxop1q0eB7CtOK8kjP4=)
3: 24D8D69CADAE11EBB6E7565AC4F9AE02.roa (hash: UrlgPQXsb4gQDscf1nttcVc31km04Zvk2KGgC6tLDaQ=)
4: 0A6D07FC913D11F092E92E65C4F9AE02.roa (hash: jnC/bVKzkBW2sgZUOJOTTr6DZW8ZjwQTZXz1lcwwzCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173DB5, serialNumber=47EC53BFDD351320E89B2C541BACDD4D8D52A0B3
Validity
Not Before: Dec 6 21:14:50 2025 GMT
Not After : Dec 13 21:14:50 2025 GMT
Subject: CN=69349cca-604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:6e:a1:a0:bb:3b:77:13:c5:30:9b:61:01:
ac:02:49:83:4e:63:32:06:70:6c:81:b6:cd:e9:17:
99:da:05:22:b4:da:9d:ca:30:6e:a5:e6:06:d7:1f:
bd:68:fe:43:f2:05:f5:43:b1:1d:e1:b2:08:31:11:
4d:b2:5b:63:05:45:1f:8c:d2:ce:44:8e:a0:a0:5a:
9a:b8:83:f0:8f:08:9d:f0:63:5f:ea:02:a1:82:21:
93:85:ca:a5:50:de:1b:ba:bd:78:8c:4e:65:4c:e4:
11:cc:3f:73:7d:24:bf:6b:96:c6:b4:fa:09:64:ab:
5a:7a:d9:c1:24:5f:0a:f3:30:80:86:db:d8:8d:a8:
f0:4d:f1:d1:e4:ff:fe:78:a5:a7:39:cb:d3:be:28:
89:00:ef:16:2b:de:7f:ca:be:d7:79:d1:67:44:c2:
d6:39:3f:62:29:4b:21:e6:33:bf:0c:e4:f2:be:25:
b2:62:95:55:c9:cd:1a:98:24:af:18:83:cc:6b:52:
cd:75:eb:fd:7b:d9:f2:47:33:68:09:e1:06:95:40:
db:ec:8e:f9:5d:94:f0:50:27:83:6c:8c:ad:a9:11:
d1:7f:af:b3:b4:7f:0d:75:05:a6:6d:ee:f5:d5:da:
6e:ae:9a:10:23:81:42:34:35:fa:2a:c4:ef:33:dd:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:A4:65:4F:7D:57:19:5A:FB:CA:E4:7C:88:02:D0:CB:A9:D9:B3
X509v3 Authority Key Identifier:
keyid:47:EC:53:BF:DD:35:13:20:E8:9B:2C:54:1B:AC:DD:4D:8D:52:A0:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R-xTv901EyDomyxUG6zdTY1SoLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173DB5/0C999EC08FA111EBA220661EC4F9AE02/R-xTv901EyDomyxUG6zdTY1SoLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e8:67:ce:31:fa:3b:ba:7b:74:6b:27:28:3e:e0:e8:11:b9:
7d:63:03:31:c3:44:f0:98:81:cc:92:0e:0f:f6:9e:ba:b3:86:
a1:5b:0c:ea:1d:89:8b:64:a9:99:6d:83:dd:cf:67:bd:d7:e5:
06:5a:32:5f:07:ce:11:32:b4:52:76:bb:b2:1f:26:12:40:7b:
f8:bf:aa:37:08:dd:fa:bd:9f:f2:d8:75:0a:8b:44:c9:95:94:
0b:9d:b3:b9:80:6f:2d:60:86:77:4f:16:05:83:95:95:11:fc:
fe:be:8b:99:2f:10:74:ca:d8:51:7c:c1:39:8a:e0:a1:61:46:
93:b2:fc:77:49:7a:40:03:d4:04:d2:e6:43:0f:fb:dc:72:df:
5a:38:0d:b5:43:5b:6a:84:b6:1f:47:4f:ba:79:ae:a8:d1:b3:
29:59:82:d5:22:e9:31:e0:7c:7f:f0:6e:ed:5d:07:80:c9:64:
8e:37:08:ad:4a:dc:54:0b:5e:b3:01:15:e8:29:55:23:b9:3a:
6b:e3:25:e6:27:e0:c0:7d:4a:2b:81:1c:82:31:17:61:ab:e6:
ba:93:2a:c0:ce:c6:11:b1:82:5e:9b:5d:ca:2c:9e:9b:00:74:
46:91:76:95:05:b1:38:78:d7:1f:63:97:4b:48:23:88:0c:d4:
51:e5:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:24:21 2025 by rpki-client