This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json)
Hash identifier: QOTOhAJLwYfsUx/bP4TIqxF0kfHEqj/VcERB/v11EUI=
Subject key identifier: 3F:D5:08:95:01:17:55:05:0D:D5:7E:C3:7C:91:EB:DD:5F:B7:5E:D2
Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Certificate serial: 057F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
Manifest number: 056E
Signing time: Thu 04 Dec 2025 21:58:14 +0000
Manifest this update: Thu 04 Dec 2025 21:58:14 +0000
Manifest next update: Thu 11 Dec 2025 21:58:14 +0000
Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: Z6v4Q+Rme9EXlurYrXqamed9WxCWkdWOWYDfQl+9ibs=)
2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: Xe5R5MOlm4gwXbVja2Q4tYsbuWQrcSRJ+5R+3dF8PsM=)
3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: EroGR2PKG0Syu1AnhKuuGY0KAjoG8CwxX6jbtNC3fQQ=)
4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: JR+JLVhrBv19TVxeSOsCpkJTUKAD4jSPXjbCWZYYaDQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407 (0x57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Validity
Not Before: Dec 4 21:58:14 2025 GMT
Not After : Dec 11 21:58:14 2025 GMT
Subject: CN=693203f6-ae5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f4:3c:56:39:5a:c6:86:ea:74:18:02:18:66:
56:70:40:5c:b3:4c:08:20:82:2f:6e:b5:cf:9d:f6:
06:30:c6:91:4d:73:a0:de:76:23:1c:18:7f:83:b8:
1c:d6:3a:1c:49:e3:12:c4:e4:a4:1b:26:90:5d:0b:
87:0d:b4:78:53:03:ec:f1:10:c4:1b:6c:fe:11:c3:
20:b0:33:ca:37:3c:00:12:b4:ba:8a:10:c0:73:72:
eb:c5:75:d8:bb:ae:a7:2f:8b:52:df:9a:e3:bc:32:
11:ad:3e:7c:14:6b:a7:07:90:3d:fa:7d:e5:fb:51:
56:06:ed:38:a9:bc:83:95:7f:5d:3b:d4:2c:c9:06:
63:11:a2:b7:89:4e:73:93:4d:1d:13:3f:ba:92:ff:
0c:33:ca:f4:07:95:d1:3e:eb:1c:75:85:12:3a:8a:
e7:13:7c:fb:49:17:60:a7:ac:ca:ac:3a:0b:d4:69:
cb:7e:95:07:58:df:6a:2b:04:00:81:ba:4e:25:48:
a4:32:7a:d4:70:15:03:1a:83:4e:84:02:c9:d3:40:
a2:51:19:c7:1c:0e:f1:51:ce:ad:43:10:a7:ac:54:
fd:e9:82:3d:87:46:bc:e1:49:e9:65:5d:89:59:89:
d1:8a:6c:c5:67:1a:a6:0e:a2:5a:60:28:18:e9:60:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:08:95:01:17:55:05:0D:D5:7E:C3:7C:91:EB:DD:5F:B7:5E:D2
X509v3 Authority Key Identifier:
keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:4d:b4:f3:9e:ca:a8:a0:33:a1:ac:42:2d:f9:7a:30:ab:
6c:8a:a6:86:50:bd:85:4e:d1:26:a9:2d:02:07:da:c2:d7:b3:
0e:06:47:02:2e:9f:72:07:a1:2f:ec:52:7a:f5:f7:fd:92:35:
e1:ae:06:4f:d6:d1:ff:e5:08:28:55:81:9e:3f:ea:46:09:19:
45:4d:dd:c5:ee:62:3e:81:98:8f:64:be:d4:d1:e5:b2:a7:0d:
56:9d:f8:9d:f4:aa:01:e4:4e:54:5c:c1:83:f0:65:36:12:d6:
90:8c:0b:77:10:ea:b2:5a:45:57:ad:67:b0:75:f7:04:a5:ff:
de:95:48:53:19:54:78:8b:2b:62:16:78:6a:ec:c1:34:82:5b:
9e:98:96:18:25:eb:46:3c:91:30:89:67:50:db:c2:ec:f2:ec:
9f:7b:8c:90:ad:9c:a2:eb:49:e9:aa:f4:39:cf:42:83:6c:0d:
f0:cb:9d:e1:bf:db:f9:ec:7e:71:ab:23:15:39:99:75:b6:29:
21:54:fb:71:b1:79:45:84:d2:27:f5:a7:5d:cf:52:b4:06:59:
8c:bc:54:17:4e:56:c7:3d:a9:f7:e9:05:87:af:b7:47:ac:65:
41:52:d0:b0:cd:c2:0f:69:df:af:eb:a3:2a:e6:37:c3:c1:f3:
af:59:36:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:17 2025 by rpki-client