This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier: cgACKQibdMAJpvQ3zO5mbz5G4xTAfvyP7Fp5l5p3HMY=
Subject key identifier: 6F:A8:7F:C7:29:B8:4B:A4:3A:37:42:0D:2A:6B:C0:79:C5:5D:57:26
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial: 020C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number: 0205
Signing time: Fri 05 Dec 2025 00:44:57 +0000
Manifest this update: Fri 05 Dec 2025 00:44:56 +0000
Manifest next update: Fri 12 Dec 2025 00:44:56 +0000
Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: EoqRflOaJYR5VD3LhJhO8pGdFtgANAj7eaa5AC7N7Bo=)
2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 524 (0x20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Validity
Not Before: Dec 5 00:44:56 2025 GMT
Not After : Dec 12 00:44:56 2025 GMT
Subject: CN=69322b08-d741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:e2:eb:01:70:85:07:74:e4:54:62:d3:e9:
28:63:9e:7d:45:a3:9e:58:aa:b5:01:16:60:32:a5:
6b:44:b2:37:eb:a7:45:24:20:23:02:5a:87:26:fa:
26:56:2c:3b:8e:91:6d:67:15:bd:b2:37:af:9c:56:
5e:f1:b2:a7:9a:48:e9:2c:79:b7:d0:8c:e5:37:c6:
1a:94:1f:bc:26:a8:c6:9c:17:d5:81:57:a7:d0:5f:
59:e5:48:7d:d4:c4:07:08:c9:5a:5b:6b:4f:45:19:
7f:0e:ba:56:0f:0b:fa:e8:c3:32:5c:be:ca:00:cf:
64:d5:f0:36:40:6f:95:7e:9d:81:98:7d:cf:01:b2:
ef:bd:0f:be:a9:6b:a7:70:9d:03:2a:a0:88:01:2e:
bd:9d:50:4b:81:3b:d5:89:13:0e:51:d6:75:be:d8:
ed:84:04:90:e4:7f:88:35:6d:33:94:0b:90:f1:63:
8d:43:9b:d6:17:9e:27:6c:c2:ef:fc:73:4c:48:4d:
70:11:53:c1:2b:57:f6:2b:c3:43:f2:a4:03:c6:d6:
14:d9:7b:2e:0a:b2:08:98:15:04:9b:d2:30:99:c5:
72:ec:47:89:90:ce:5e:17:00:49:0a:17:5d:c5:d9:
20:2b:d7:9c:a1:8b:5d:20:df:f4:88:4f:9a:89:16:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A8:7F:C7:29:B8:4B:A4:3A:37:42:0D:2A:6B:C0:79:C5:5D:57:26
X509v3 Authority Key Identifier:
keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:c3:c2:75:4d:a0:99:f4:98:61:29:be:96:1d:73:7c:89:
00:31:80:98:2e:4c:1a:75:f8:03:21:b3:d5:38:30:01:2c:9b:
e7:31:9b:7c:19:71:95:8f:19:eb:3b:80:d1:0b:ea:6d:64:82:
37:04:8a:81:c3:9d:0b:d6:0e:42:9e:54:88:6e:52:b7:93:b1:
10:c3:69:8d:94:94:c3:09:37:c9:f8:e2:d6:32:f9:a1:91:9e:
05:54:cc:61:5d:5a:4d:00:1b:49:be:57:f1:c2:5f:26:a9:29:
7c:3e:45:c4:08:24:29:6b:4a:ca:ec:69:5e:a3:9b:3a:7d:90:
14:d8:41:3d:d4:d2:e2:47:d5:0f:56:e2:90:c1:26:6f:a1:b4:
e4:76:69:12:f2:ef:4e:0b:de:d1:98:6f:1e:07:f5:f2:3b:57:
c0:c4:6d:c6:be:76:1c:ad:93:ae:c5:5f:ef:26:12:e2:01:70:
bb:af:72:87:8d:fc:24:86:5a:03:3f:11:c8:92:11:63:5d:01:
0c:c8:f2:b5:c5:8a:de:b5:b8:f2:4b:bb:3f:72:0f:be:48:f9:
cc:83:70:08:8a:41:81:4d:9f:a6:1e:0a:9c:43:5a:60:26:90:
a6:fd:b1:46:cb:08:55:bf:7d:66:5c:06:31:a8:90:38:a2:b4:
29:b8:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:18 2025 by rpki-client