This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
File: 15v9g5udDgnQQF7QTuUpIOkLesQ.mft (raw, json)
Hash identifier: cklr7fVN6mlRs9n+ih2K1hltHv6pPB8UC5hK6LyST5g=
Subject key identifier: 62:A7:70:E4:85:10:A9:1B:4C:46:D3:3D:2C:24:F7:29:E3:87:E8:A0
Authority key identifier: D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4
Certificate issuer: /CN=A9180DA5/serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
Manifest number: E3
Signing time: Fri 05 Dec 2025 03:27:50 +0000
Manifest this update: Fri 05 Dec 2025 03:27:49 +0000
Manifest next update: Fri 12 Dec 2025 03:27:49 +0000
Files and hashes: 1: 15v9g5udDgnQQF7QTuUpIOkLesQ.crl (hash: StacQo8lMokq6ERIJ6TP2bBBJTtSusCF9lc5+gaBzKI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl
rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DA5, serialNumber=D79BFD839B9D0E09D0405ED04EE52920E90B7AC4
Validity
Not Before: Dec 5 03:27:49 2025 GMT
Not After : Dec 12 03:27:49 2025 GMT
Subject: CN=69325135-534e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:c2:c9:9a:5e:73:57:5c:4c:4f:22:05:d1:
5a:02:78:66:01:03:17:d4:bc:d4:2f:da:9f:8d:a6:
4d:73:a1:5f:47:37:76:59:89:a8:59:ff:e6:ed:bb:
1b:de:70:45:8d:0f:71:5e:d6:ef:48:55:5a:6e:e3:
a4:15:72:8d:16:52:da:27:f5:a5:b4:c7:25:0f:a8:
09:36:81:5b:92:91:e2:66:52:08:b6:90:a4:7c:78:
58:73:09:d6:3c:07:e1:60:d0:41:3f:42:71:bc:54:
2b:04:98:2a:66:3b:fa:13:e0:cc:3e:1b:1c:44:2c:
7c:ef:82:46:4a:87:48:3b:0a:5a:55:cc:d8:14:5a:
33:65:d8:b8:95:b8:b0:64:6c:48:1b:86:46:d6:38:
ff:2a:cd:81:eb:1e:40:a1:36:81:74:36:b9:ad:68:
4d:76:d1:b1:98:f9:99:7d:73:ef:4d:eb:f7:b3:1e:
16:06:6f:42:a1:52:b9:b0:b5:11:9a:7b:b6:7b:63:
1c:ea:64:66:e1:02:8e:ae:93:ca:ff:09:9a:a3:2b:
69:aa:66:6d:47:8e:7e:8a:1f:09:81:13:aa:6e:ed:
cd:2d:ba:76:7f:43:2d:95:77:f1:ce:c9:b6:71:90:
2f:cc:81:8f:25:7e:ce:f1:2d:0e:2d:de:31:24:9c:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A7:70:E4:85:10:A9:1B:4C:46:D3:3D:2C:24:F7:29:E3:87:E8:A0
X509v3 Authority Key Identifier:
keyid:D7:9B:FD:83:9B:9D:0E:09:D0:40:5E:D0:4E:E5:29:20:E9:0B:7A:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15v9g5udDgnQQF7QTuUpIOkLesQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/AF885F6673ED11EFB0BA025AC4F9AE02/15v9g5udDgnQQF7QTuUpIOkLesQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:21:1a:90:f7:9e:25:04:0f:c7:85:00:d2:4f:4b:c8:b4:
40:88:12:61:45:18:3a:9b:fb:7a:ad:9d:b8:90:94:85:70:37:
d4:35:da:47:5a:55:6c:81:35:b7:3e:9f:ad:80:0d:8c:08:89:
0a:71:00:aa:80:c5:f1:3a:00:84:76:3b:24:4d:94:05:87:8f:
b3:bf:ce:23:3d:3e:66:07:64:3a:6d:9c:47:b3:81:3a:40:1b:
0b:87:53:92:93:88:a0:d8:11:fe:21:ef:67:e7:a9:e1:34:a8:
ef:e0:d0:a3:58:41:48:0e:74:50:13:e3:1f:b1:f1:a9:c1:97:
12:9f:94:24:1a:fb:ee:e5:27:1f:0c:eb:92:af:3e:3a:02:30:
83:94:e2:74:51:1d:e3:70:ac:1d:b9:59:06:1e:45:cf:83:05:
62:14:55:d6:eb:fc:be:39:c8:f9:a7:45:e3:a0:20:c0:b8:89:
9e:d6:f1:f0:41:03:01:11:f0:76:0f:5f:8c:b3:7d:90:04:f9:
ca:a5:ac:5d:85:01:4a:eb:a6:de:08:1f:31:7f:0b:0e:c0:9f:
d3:5a:1d:d9:9e:fc:5f:de:83:54:3f:81:48:43:12:65:b4:aa:
7a:e2:77:4e:97:b5:69:80:c2:bd:d6:d0:ed:d5:ee:86:73:7a:
04:f8:77:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:17 2025 by rpki-client