This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
File: aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json)
Hash identifier: dEmm0ztTrVxM6OVYttbyWKbT8xOYEnX65n6fpzz7fZY=
Subject key identifier: 5C:E4:17:0A:54:FA:EE:56:D1:3E:7F:88:7E:16:B3:53:36:D4:01:9A
Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Certificate issuer: /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Certificate serial: 1508
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
Manifest number: 1508
Signing time: Sat 06 Dec 2025 16:23:14 +0000
Manifest this update: Sat 06 Dec 2025 16:23:13 +0000
Manifest next update: Sat 13 Dec 2025 16:23:13 +0000
Files and hashes: 1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: WRV4aN/Z2/N49LhGoPUN2TNpp63VQ2NAdBPct2P+JjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl
rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5384 (0x1508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Validity
Not Before: Dec 6 16:23:13 2025 GMT
Not After : Dec 13 16:23:13 2025 GMT
Subject: CN=69345871-2233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:20:59:7b:0f:31:91:e2:e0:15:a7:e1:cb:
58:3e:e7:60:cb:a0:df:bc:d4:b9:ee:c0:39:1d:64:
2f:0e:13:ab:81:14:44:e9:ed:6b:bc:8a:9c:3b:8a:
79:b6:78:47:15:48:d1:c5:a7:76:4f:ea:a4:fb:85:
ca:45:38:f4:d4:9a:23:a8:f2:00:52:b6:26:0f:8d:
c1:be:63:f5:ca:7f:8b:d6:1e:17:7c:80:7b:f7:15:
31:59:b2:02:67:96:cc:79:07:fe:b4:80:b2:02:65:
46:31:af:26:2d:d7:47:cb:d7:fb:c2:7c:c7:ec:8f:
83:e6:08:0e:17:32:8e:79:21:f3:fd:7a:53:f3:bc:
13:34:42:6b:58:b1:4d:da:5e:ae:e4:00:4e:18:1e:
80:55:77:80:bc:18:2c:8e:8c:2c:f2:f3:e7:3c:10:
76:79:90:c9:d2:51:54:98:75:9b:00:11:e5:ad:fb:
d8:24:4f:ec:af:92:ea:dd:d0:15:03:84:31:1a:ec:
da:d5:cd:d7:bf:c2:15:c0:c6:36:00:4d:a8:19:19:
3b:e3:fd:73:20:5b:f2:4d:d9:c9:51:0f:14:9a:69:
a7:87:46:61:84:1b:49:db:0e:80:0e:ac:23:16:78:
2a:f1:58:81:50:c9:b0:a1:92:a1:de:b3:96:22:35:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E4:17:0A:54:FA:EE:56:D1:3E:7F:88:7E:16:B3:53:36:D4:01:9A
X509v3 Authority Key Identifier:
keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:3a:f9:61:7f:04:0c:ac:0e:53:73:64:af:4b:c0:4a:e2:
3d:94:59:1a:f8:75:f8:74:7b:25:c7:19:a7:eb:24:2b:37:b3:
f8:80:22:fc:70:de:9a:3b:fe:ee:8c:55:20:b3:b0:21:06:9c:
c0:87:bd:43:c5:29:81:67:24:ad:70:b6:08:ce:40:1c:27:b0:
9f:a6:29:31:78:eb:a2:dc:5e:90:cd:dd:84:bd:ae:f9:3e:ba:
a1:59:0d:1f:f3:8e:0e:d5:69:2e:18:fb:1d:17:2d:02:12:ce:
af:9f:96:8b:90:9f:9c:6b:82:bf:cb:56:fa:1f:68:34:12:62:
08:30:a1:06:59:82:5a:f8:80:1b:18:a8:af:5b:7c:cf:8d:9e:
22:06:8a:f4:b7:18:7f:42:72:1d:4b:4e:de:10:86:a2:ab:d9:
cc:48:dd:94:ec:85:60:5a:6a:26:9d:2c:d9:c1:3a:ad:a0:78:
0d:be:93:da:e6:ee:f9:77:6b:ad:a0:57:d7:2e:ea:23:22:a3:
c4:7c:b1:5a:1f:ca:9b:0f:e5:21:50:59:61:8e:50:59:7f:4f:
35:be:cd:49:aa:48:50:9d:6d:a9:57:f2:3f:34:4e:38:6b:fe:
e0:fa:e9:7b:16:30:ce:6f:7a:8a:4c:85:66:a1:ce:6f:76:83:
a5:8c:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:41 2025 by rpki-client