This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
File: cDXbQxmt4s_Ooig68PFrYgkCbao.mft (raw, json)
Hash identifier: SqHfI0Z2qiMXZaAwx3uS/mqogTiO43wO+0jXPs1+6s4=
Subject key identifier: D6:80:A7:20:44:EA:8F:9C:7B:2D:7C:05:A2:FD:45:79:C4:55:94:97
Authority key identifier: 70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
Certificate issuer: /CN=A918387F/serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Certificate serial: 0691
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
Manifest number: 0691
Signing time: Thu 04 Dec 2025 21:12:31 +0000
Manifest this update: Thu 04 Dec 2025 21:12:31 +0000
Manifest next update: Thu 11 Dec 2025 21:12:31 +0000
Files and hashes: 1: cDXbQxmt4s_Ooig68PFrYgkCbao.crl (hash: KWAPDp9IcMAOZ4yyZvsLO4jdH4LMb5ZgBLOsU2S4j/A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1681 (0x691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918387F, serialNumber=7035DB4319ADE2CFCEA2283AF0F16B6209026DAA
Validity
Not Before: Dec 4 21:12:31 2025 GMT
Not After : Dec 11 21:12:31 2025 GMT
Subject: CN=6931f93f-13a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:a2:7b:49:cf:d7:f2:cd:2f:74:14:23:25:
e0:da:47:10:22:56:6a:3d:f4:a5:06:4f:05:bb:6d:
2c:9f:0b:6d:d0:5c:6d:4b:f1:a3:19:83:fa:d5:0c:
76:4a:00:3e:9d:08:fe:54:66:ea:b7:8d:2b:c7:9c:
8e:a1:15:28:97:06:c2:86:96:74:dd:8d:0b:96:f9:
87:e2:8b:68:60:08:d5:8a:6c:04:83:a7:1f:93:83:
f5:1d:6f:75:aa:f0:9b:84:f0:32:ce:b2:b8:01:fd:
93:ee:15:df:bb:7e:13:b6:d5:89:f9:28:c3:de:e1:
77:ae:fa:5a:ff:30:a5:68:64:1c:17:f0:ad:8c:4b:
ea:04:62:36:ef:3b:0f:2a:79:45:2b:b3:7a:08:84:
f1:52:89:78:8b:c2:8d:03:58:f8:a3:38:2d:9b:ad:
17:ed:91:4a:54:8e:e9:17:a5:62:82:7b:f1:33:0d:
f0:f2:57:97:44:4d:f6:f4:43:c8:6a:fd:2f:8a:9e:
23:e1:71:49:5c:5d:17:d4:ed:6c:1a:dc:67:00:4c:
c3:01:89:93:c0:32:fc:d4:2e:ff:24:49:25:b5:58:
ed:82:da:45:02:ae:0b:c1:7d:1f:1e:16:00:7d:81:
a4:0b:88:d8:6c:b5:4d:27:f2:7b:50:41:6b:21:61:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:A7:20:44:EA:8F:9C:7B:2D:7C:05:A2:FD:45:79:C4:55:94:97
X509v3 Authority Key Identifier:
keyid:70:35:DB:43:19:AD:E2:CF:CE:A2:28:3A:F0:F1:6B:62:09:02:6D:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDXbQxmt4s_Ooig68PFrYgkCbao.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918387F/B4C79AF8934211EBA3769B79C4F9AE02/cDXbQxmt4s_Ooig68PFrYgkCbao.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:67:35:32:63:3c:c8:91:3a:4a:f7:78:4f:67:1e:57:bc:1b:
4a:61:c3:8d:7d:1c:1a:71:84:dd:39:ca:b0:a5:34:2a:dc:f3:
0e:51:8c:51:be:f5:08:51:e9:3f:bd:8e:3c:70:e8:11:59:8d:
55:00:49:45:bd:a0:9b:f1:67:4f:62:1b:cb:06:d8:fb:17:b0:
41:09:18:57:20:0a:33:2c:e9:9b:76:a4:33:20:13:53:2f:42:
74:43:46:65:f0:99:18:d4:b6:69:c5:b2:46:19:9a:43:73:46:
53:3b:0a:bf:0a:4c:84:bf:73:94:88:44:ef:e3:d5:a2:a3:d0:
21:b7:d6:cb:31:6f:4a:8f:62:42:a2:9d:d4:ae:01:18:74:0b:
8a:41:b6:dd:a5:19:5c:03:7b:14:74:67:54:ee:e7:c4:6e:45:
98:dc:50:90:0a:91:ac:e0:3e:a9:a1:f8:41:c9:38:95:e6:45:
1f:72:07:c3:2b:f1:8f:94:11:65:15:47:dd:73:34:95:3a:2a:
74:ed:df:40:d4:53:60:84:ba:38:f6:02:ec:03:b8:b4:77:cd:
4a:6f:47:9f:d2:ec:6a:15:f2:aa:be:a6:63:5f:6a:d5:0c:f8:
ab:1b:3d:09:47:03:05:14:ac:f6:91:57:5f:07:63:68:97:2f:
85:94:bd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:33:32 2025 by rpki-client