This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
File: spNInjrPKPDRVxQ3zfC8wspUVFo.mft (raw, json)
Hash identifier: ITVZrhYNq05m5YenrDoWxw6WoM/0I63XcqI56L9fFOA=
Subject key identifier: 1C:7E:3D:99:36:DB:8B:D1:50:0D:8A:10:54:1C:4F:0C:AA:DE:AF:60
Authority key identifier: B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
Certificate issuer: /CN=A917C29E/serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
Manifest number: 01D7
Signing time: Fri 05 Dec 2025 01:03:59 +0000
Manifest this update: Fri 05 Dec 2025 01:03:59 +0000
Manifest next update: Fri 12 Dec 2025 01:03:59 +0000
Files and hashes: 1: spNInjrPKPDRVxQ3zfC8wspUVFo.crl (hash: BJSz4ZLgdrXs1tkRAIq4uXWnh+3v3+7WBHqgdZ7EDVM=)
2: ED6DF5CC014611EEBE219313C4F9AE02.roa (hash: Sh9MMHhw+WZ/mCiixFTMPeTs0/iUB/LaBQpEWqALmcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C29E, serialNumber=B293489E3ACF28F0D1571437CDF0BCC2CA54545A
Validity
Not Before: Dec 5 01:03:59 2025 GMT
Not After : Dec 12 01:03:59 2025 GMT
Subject: CN=69322f7f-0c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:10:d4:2e:f5:fe:6b:96:df:d8:eb:35:6c:98:
e4:44:43:56:d3:b8:0c:07:fc:2d:76:25:b7:a7:47:
1e:11:75:39:4c:2f:ce:b4:6c:5a:b0:a8:eb:39:d6:
41:80:76:78:29:bf:e4:5c:4b:44:0c:9b:a1:63:1c:
7c:5d:39:58:65:ed:ea:8d:2e:1e:a2:a1:44:45:24:
53:0b:3b:31:17:eb:32:91:30:fb:cd:00:c1:3d:ed:
04:69:8e:ae:64:b3:f5:c7:30:2f:12:f2:74:d5:38:
fb:9c:4b:ba:0a:78:98:84:73:ba:93:e1:ce:2a:4c:
9c:6e:88:7a:e1:52:aa:c1:83:66:f8:7f:89:39:72:
16:37:1f:9b:12:7d:38:ee:6f:34:f0:e8:86:d5:a3:
26:1d:46:6d:70:2d:61:66:2a:84:ff:37:a0:36:a0:
fe:e3:f7:53:c8:91:ae:c9:ce:cb:cc:93:a0:26:54:
3e:ab:64:17:4c:ea:74:20:ed:09:5e:05:f0:1b:1c:
63:a2:e6:92:bc:54:c6:ec:46:a7:e3:bf:47:a8:ce:
61:bb:73:d0:9b:d5:bf:47:4e:3c:01:77:22:88:c8:
08:65:c1:11:c8:20:be:32:b3:49:f9:c5:6d:fc:76:
bc:1e:c9:ed:f2:a7:c0:b0:34:af:04:7f:2c:2f:62:
0c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:3D:99:36:DB:8B:D1:50:0D:8A:10:54:1C:4F:0C:AA:DE:AF:60
X509v3 Authority Key Identifier:
keyid:B2:93:48:9E:3A:CF:28:F0:D1:57:14:37:CD:F0:BC:C2:CA:54:54:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/spNInjrPKPDRVxQ3zfC8wspUVFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C29E/045122A8011C11EEB2684F4BC4F9AE02/spNInjrPKPDRVxQ3zfC8wspUVFo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b1:57:cf:73:4a:72:2b:17:97:ef:84:a3:3e:83:05:38:3a:
68:1a:ec:ef:fd:47:16:a0:c8:45:1b:85:6d:4b:4c:a0:b5:67:
9a:08:36:8e:48:80:6c:67:0b:72:f6:6a:e1:f6:0a:a4:9a:82:
6f:27:7b:54:1b:b8:55:51:75:cc:23:89:04:ec:32:a8:0c:86:
5d:ad:7e:10:e8:52:f0:06:5a:c5:2a:a4:8e:22:a5:43:47:22:
cb:b8:84:ab:3e:5f:c6:f1:57:4e:eb:b4:63:ff:33:f9:80:d0:
1c:47:cd:4f:ab:2e:46:a3:e1:29:56:aa:ae:0a:2b:d8:2b:11:
52:aa:ae:a0:36:5c:b6:f4:4d:36:d4:80:8d:fa:74:d3:65:d5:
fe:65:a7:61:5d:f4:c7:ba:61:1c:6b:b8:5b:5f:4a:92:42:e7:
13:81:fb:4a:04:37:aa:43:ed:2c:0b:af:d8:4c:2a:26:52:0a:
51:86:c9:c9:1f:21:2b:c4:8b:f5:e8:29:fa:42:33:e2:61:4c:
5d:21:64:af:44:bd:ad:30:09:be:46:84:25:c8:e5:71:c8:f1:
fa:7f:44:da:38:92:60:a6:58:4e:3d:c2:b6:29:2e:87:88:50:
55:72:96:96:3c:bd:c3:1a:94:c7:86:2c:8a:bb:57:e6:76:17:
93:61:0a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:30 2025 by rpki-client