This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json)
Hash identifier: fth6yvryl1bChxI6hDEqgD+mgzilt7vw01gNEzBaUKk=
Subject key identifier: 62:DE:DD:49:2F:F1:4F:47:EF:A1:42:26:ED:A1:F9:0C:8E:13:44:7E
Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
Manifest number: 0202
Signing time: Fri 05 Dec 2025 00:44:50 +0000
Manifest this update: Fri 05 Dec 2025 00:44:50 +0000
Manifest next update: Fri 12 Dec 2025 00:44:50 +0000
Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: V8sjcsDiiEOnTcS/ssHCLnTOT8TPLBwmZ3EZsdIJVGA=)
2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: vTjIWL+7U0681ZWCBVmHMtqcTBbPy9kNb1m5t3OENUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69
Validity
Not Before: Dec 5 00:44:50 2025 GMT
Not After : Dec 12 00:44:50 2025 GMT
Subject: CN=69322b02-01b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:32:11:e5:2b:02:25:f3:85:eb:8e:53:d2:
d9:4b:76:1a:cd:94:26:3c:14:09:2a:d0:e0:6e:d2:
09:72:0b:1d:45:db:72:e6:2b:88:1c:02:fc:ec:4b:
95:bf:02:f1:df:ad:f5:9f:35:d5:8f:84:5e:5a:2e:
b0:ee:d6:17:76:05:3d:02:cc:e7:a2:bc:2c:83:82:
22:17:c8:84:ef:6e:5e:5f:b9:f5:62:38:ac:09:e9:
2b:2f:ea:47:6c:3c:0d:10:1c:73:cc:06:0e:9f:d0:
03:02:bb:d2:ab:c8:76:c2:86:8e:fb:ba:95:bb:bf:
63:47:f8:4c:22:b3:51:ce:e8:fc:15:18:cc:4b:cc:
b6:12:17:65:84:62:34:52:b6:15:29:1c:03:dc:e6:
37:02:4f:03:14:2b:9b:aa:81:90:8b:92:c1:4f:73:
44:41:90:bc:aa:30:d0:17:e8:ea:24:3e:9f:25:db:
fa:5a:5b:01:22:b1:8f:a0:c6:5b:d4:6a:85:d4:17:
78:65:72:e1:e6:29:ea:c1:2b:e9:af:7a:e9:14:d0:
94:c3:4f:9e:8e:8a:0b:28:7c:6d:bf:43:5a:fc:b9:
a2:59:bb:4a:d5:b7:8d:1a:94:13:b3:24:52:7d:e4:
c3:57:0f:73:35:0c:1c:cb:6c:e0:8c:98:c0:4c:5d:
50:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:DD:49:2F:F1:4F:47:EF:A1:42:26:ED:A1:F9:0C:8E:13:44:7E
X509v3 Authority Key Identifier:
keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:69:c0:42:9d:50:ff:df:ac:9b:1e:3e:ed:f8:7c:81:01:
d3:6e:32:74:e7:10:9a:74:5b:03:b6:70:a7:30:eb:9e:fb:b6:
48:bc:d5:b9:2f:cf:1c:2d:ae:2c:3e:42:b7:0f:89:75:d4:17:
1a:48:59:77:d0:b6:15:79:65:08:da:be:d9:97:aa:f9:f3:ef:
15:eb:c7:6d:54:28:d7:ae:de:50:12:9e:6d:b2:69:f6:15:ea:
12:b0:15:19:46:ae:c4:7b:ba:12:2b:c9:00:a8:7b:d8:a3:15:
7a:71:99:22:92:fe:ec:3b:d0:6e:62:de:b4:ae:e5:71:38:b9:
a0:eb:ec:b2:6f:e3:8c:9f:7b:a0:09:12:64:28:71:58:c6:8a:
40:d0:05:03:aa:86:d1:23:e7:70:62:7a:c4:5c:56:80:a4:f3:
8d:72:77:5f:b5:ec:ac:62:84:5a:5e:db:03:48:c9:51:81:83:
2b:7a:fb:7e:bb:5b:da:dc:b7:11:cd:47:9b:e9:8f:36:f6:28:
3f:60:18:43:cf:01:8f:59:93:6f:67:40:7c:7e:47:c6:d4:58:
0e:0b:28:22:03:21:76:a2:58:82:fe:11:07:40:8b:5e:cb:e9:
49:65:2b:d4:2f:72:98:9a:0c:20:ee:a5:f2:ff:2d:10:b0:a2:
e5:49:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:55 2025 by rpki-client