This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft
File: vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft (raw, json)
Hash identifier: oNUCkT84VywsfgRO/++3W+CK6VzF1tkUCD6RV3VXWco=
Subject key identifier: C0:0F:37:F0:F5:A1:E3:2D:ED:27:C9:93:0C:83:A1:64:FA:20:5B:D2
Authority key identifier: BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A
Certificate issuer: /CN=A9174679/serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft
Manifest number: 0241
Signing time: Fri 05 Dec 2025 00:09:11 +0000
Manifest this update: Fri 05 Dec 2025 00:09:11 +0000
Manifest next update: Fri 12 Dec 2025 00:09:11 +0000
Files and hashes: 1: vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl (hash: NprlLYJvPxtFFLvU8XubVDvYPNahTOi9UxUcGp5HN9I=)
2: D5F2D9B05B3011EDB926E484C4F9AE02.roa (hash: kKgc9mKeybgGGMkDQ58sZzpe326cVTFWWZKCKZ6tXgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl
rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174679, serialNumber=BCFD1C3BD01D7E7F0809CA69D105DB661836216A
Validity
Not Before: Dec 5 00:09:11 2025 GMT
Not After : Dec 12 00:09:11 2025 GMT
Subject: CN=693222a7-388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:27:24:24:7c:21:1a:27:24:72:fe:fc:96:
d9:ca:bc:f2:73:71:c8:7c:80:1e:5e:a5:c9:fa:1d:
8a:8a:b2:68:cf:9d:3c:24:c3:b9:b8:82:8e:bb:33:
43:ad:f3:bd:35:7b:e2:ef:ad:2a:f6:55:81:dc:d0:
92:fc:9c:2f:e5:c9:78:80:d9:54:1b:58:ec:70:aa:
f7:ee:29:41:45:18:5d:9b:df:50:fa:b4:42:d1:eb:
8d:43:63:ba:3b:ea:cc:1b:8f:0d:93:e2:75:9f:f8:
d8:64:48:93:dc:20:10:de:9d:68:a4:c6:3f:52:b1:
51:27:b1:07:ab:c4:f7:7f:fa:2f:48:9f:1c:cb:64:
77:5a:42:e6:89:7d:24:1a:c6:37:96:c7:a7:78:2e:
ed:42:36:1c:d1:dd:29:f5:a6:13:1e:ee:af:9d:34:
d8:6f:4f:c6:dd:bf:52:04:51:9a:71:09:f7:d7:fc:
f3:b5:f0:6c:c4:b8:d0:0f:ff:ed:33:3f:49:d1:bb:
b2:4e:71:bd:65:d9:a2:57:3e:0c:0b:23:e7:f5:c1:
2c:fb:dd:5f:cb:30:e7:23:5c:86:81:73:e7:17:ce:
d5:b3:37:1c:dd:7c:99:5f:fc:c9:bb:2c:3c:f0:ea:
2b:38:e9:f1:4a:ff:5a:d1:87:f4:98:70:60:3e:65:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:37:F0:F5:A1:E3:2D:ED:27:C9:93:0C:83:A1:64:FA:20:5B:D2
X509v3 Authority Key Identifier:
keyid:BC:FD:1C:3B:D0:1D:7E:7F:08:09:CA:69:D1:05:DB:66:18:36:21:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vP0cO9Adfn8ICcpp0QXbZhg2IWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174679/3B423AE85B2E11ED83841969C4F9AE02/vP0cO9Adfn8ICcpp0QXbZhg2IWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0a:1a:51:7d:f3:fd:7a:59:7c:12:e8:ff:11:3d:eb:86:04:
d5:7e:c5:b9:a0:04:e5:50:f6:13:66:71:f1:e8:34:22:dd:9b:
2c:90:49:da:17:47:e9:df:83:f9:78:a1:78:7d:6c:45:6a:e6:
48:6b:82:8b:50:7a:e0:c2:9c:e2:8d:0f:3c:b1:6a:af:4a:6a:
9d:c8:bb:53:10:7b:97:82:4d:50:88:53:b4:29:b5:28:10:a9:
6e:87:1b:20:a1:71:72:cb:46:50:c1:b4:5f:18:36:07:ec:33:
0a:6e:a6:d9:9c:d3:7d:c9:37:78:f8:e8:a8:60:56:0d:16:6c:
8e:92:52:3e:c3:ea:58:a2:83:1f:2e:14:d1:87:88:21:71:93:
6c:db:84:23:68:ac:f4:f4:d7:e7:d1:66:c3:0a:d8:90:e8:7c:
5e:31:18:7a:72:33:70:76:ab:b9:82:f6:ab:4c:25:40:03:7e:
7c:c1:b3:ba:b6:d2:ec:91:93:9b:f7:c9:03:eb:2d:2f:78:a9:
2a:8b:e5:c2:6b:c6:52:87:a9:5e:44:21:30:e5:02:89:85:ff:
78:ef:1b:57:5c:72:b2:6e:d9:59:36:49:44:eb:d6:05:a6:04:
17:d3:b7:bc:ff:0f:11:ea:2b:56:19:10:67:ab:37:56:7e:a1:
3b:c1:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:54:54 2025 by rpki-client