This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
File: aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft (raw, json)
Hash identifier: M15vZYYDCNbrSItJx4qqvO4t5Q4W4ChQgVrGcN4tFcg=
Subject key identifier: 0D:7A:32:CB:30:5D:BC:B2:97:14:B7:26:79:31:03:DF:FC:54:30:0F
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
Manifest number: 0229
Signing time: Fri 05 Dec 2025 00:23:21 +0000
Manifest this update: Fri 05 Dec 2025 00:23:20 +0000
Manifest next update: Fri 12 Dec 2025 00:23:20 +0000
Files and hashes: 1: aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl (hash: Mf2DwgK7+05ayegJAcuQaWvzeQxve3WRa2h0m6pBe28=)
2: 24AC43889DE011EDA182F455C4F9AE02.roa (hash: VEixjX/Xe+G6aJHNRJCpYadqa0JmMvyZd3MR6Kj/fCY=)
3: 236FAC269DE011EDA182F455C4F9AE02.roa (hash: DvFHTfUMj5djbvwopTj+xsfhSJgyhsfDlJJptgV29ak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Dec 5 00:23:20 2025 GMT
Not After : Dec 12 00:23:20 2025 GMT
Subject: CN=693225f9-918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:7f:33:7f:72:03:99:7e:a1:39:74:d0:f7:
8e:06:12:57:85:e7:1f:f5:70:df:42:d5:5c:84:93:
da:b6:85:cf:d6:0d:c5:9a:9e:0a:5a:07:2f:bc:3f:
38:44:8d:08:2e:f5:6d:19:b0:de:65:7f:01:09:f2:
53:88:3d:ad:03:c4:9c:b5:14:3b:01:78:29:32:99:
6e:c3:e5:3d:00:96:9d:e0:db:68:1d:5a:6c:33:33:
6e:8a:5b:96:2c:a4:83:12:24:45:7d:22:02:d2:88:
f3:ee:2d:a4:13:41:27:ec:dc:75:85:84:8d:98:e7:
ac:c6:e1:37:56:a5:d3:a6:17:91:d2:ee:0a:a9:8f:
7f:12:d7:1a:df:64:7f:98:50:7c:2c:26:ce:ff:33:
5b:11:eb:c0:69:5a:ce:f6:90:cd:f9:5a:f2:7e:c6:
67:2f:35:d3:57:18:41:92:cf:d9:a5:d6:67:f5:11:
95:1f:ec:cb:0b:b9:4c:f6:4a:6f:37:9d:99:57:51:
ad:36:65:e3:37:e0:73:bf:af:fd:e2:a2:23:2b:56:
0e:85:a7:d6:bf:5e:d2:b8:28:30:b0:20:a6:87:71:
9f:4c:ef:d4:d7:81:d4:34:e4:be:f7:51:df:87:3b:
48:5e:be:be:ba:04:ff:1b:e3:4c:e0:94:3c:b2:1b:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7A:32:CB:30:5D:BC:B2:97:14:B7:26:79:31:03:DF:FC:54:30:0F
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:c2:4e:88:0c:c5:ed:8f:0d:19:e1:1a:69:73:27:27:bd:f0:
1e:08:7a:56:4c:b0:06:a6:b2:75:4a:23:b2:be:4d:7a:ff:5a:
59:38:05:95:a3:25:6f:6d:21:9e:f7:e3:70:c1:a5:57:b9:33:
ce:e0:c0:26:b6:6b:1c:7f:90:c0:bb:15:39:74:78:b9:5b:5e:
09:b4:70:3f:bc:eb:fc:52:78:7c:83:4f:0f:4c:39:20:8e:f2:
c8:94:2b:53:d3:90:ac:eb:c9:e8:ce:c8:05:24:51:40:1e:c6:
67:20:67:bc:f1:13:eb:8a:a7:dc:3b:67:95:d9:b0:c6:4c:ea:
d0:08:85:99:73:af:c6:df:80:aa:9a:87:e1:46:aa:fc:b5:a2:
af:e4:6d:16:21:cf:0c:22:7d:5a:85:57:9b:25:72:0f:03:8b:
2d:93:b4:ab:3c:c3:32:dd:69:1c:43:d4:52:9b:e1:c4:8c:da:
57:84:07:90:74:2c:d9:37:53:9d:1d:57:08:b5:9f:7e:d2:e0:
bd:8b:5a:5d:88:6c:36:ed:b9:5e:6e:bb:70:78:34:fb:e5:66:
c8:99:8a:7c:a5:bd:0d:af:df:7b:63:11:2e:63:cd:64:85:01:
d0:cc:05:63:da:2d:0d:03:7e:f4:f3:f8:92:e6:b5:32:4f:84:
17:80:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:24 2025 by rpki-client