This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
File: MYj5ufXpCvsNsN5lZfAskL7qSNA.mft (raw, json)
Hash identifier: x9trPqDiw0SZ19vVpIvPcC1jOkdXOmwozqQXMvLo90Y=
Subject key identifier: 57:25:4D:FA:68:26:71:0A:F9:BC:B0:A7:D5:5D:CA:75:11:01:CF:E8
Authority key identifier: 31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
Certificate issuer: /CN=A9184AB8/serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Certificate serial: BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
Manifest number: B4
Signing time: Fri 05 Dec 2025 04:12:50 +0000
Manifest this update: Fri 05 Dec 2025 04:12:49 +0000
Manifest next update: Fri 12 Dec 2025 04:12:49 +0000
Files and hashes: 1: MYj5ufXpCvsNsN5lZfAskL7qSNA.crl (hash: CwTJ7DB3uIyvXs9LxVQCA8RPD57JjCPCEFf4iLz0iLQ=)
2: ED63E306F5EC11EFBB174335C4F9AE02.roa (hash: G7Rh/kD9ovidahZtN/DccolLPZ5w6zif+prC8czAfkA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=3188F9B9F5E90AFB0DB0DE6565F02C90BEEA48D0
Validity
Not Before: Dec 5 04:12:49 2025 GMT
Not After : Dec 12 04:12:49 2025 GMT
Subject: CN=69325bc1-c324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:81:b9:39:13:04:47:63:a5:b2:d3:91:9c:
2c:0a:52:c9:32:1b:76:a2:74:2c:62:e3:d6:70:8c:
a9:04:3e:d9:80:d7:ab:12:ac:47:48:67:d6:1c:bd:
38:90:35:51:c4:47:2a:b5:7f:36:c8:03:db:ac:b3:
24:c0:54:23:3b:ad:37:bf:99:da:db:dd:cf:0e:c6:
91:6c:6f:e7:fd:6e:a7:6d:c8:26:3e:8c:a4:cb:c9:
f8:a6:95:66:e4:63:75:25:93:65:d4:03:29:bc:d4:
1a:fb:cc:40:35:01:14:4d:de:c2:ac:ef:3e:29:0e:
8d:05:57:a7:af:fd:7c:02:10:b2:c4:91:5c:a5:e7:
4f:d6:ca:14:0f:f6:f7:16:48:a0:bc:89:8b:7b:2f:
75:fc:29:81:5a:65:ef:c1:5f:38:36:3a:3f:74:1c:
1c:c0:93:10:bd:34:b6:61:00:a3:6a:30:f6:7a:50:
31:8b:cc:4c:9f:70:d9:ca:36:e6:d2:de:fb:ba:9e:
94:eb:5c:14:e7:c3:73:72:a8:49:d1:4c:65:00:86:
3f:59:ca:df:ac:b2:13:d1:3d:12:10:2a:30:87:9e:
b3:11:41:a6:be:b3:f2:24:36:85:7a:9e:97:37:f9:
d6:42:dc:19:5b:15:41:c9:c7:e5:2e:d4:57:09:00:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:25:4D:FA:68:26:71:0A:F9:BC:B0:A7:D5:5D:CA:75:11:01:CF:E8
X509v3 Authority Key Identifier:
keyid:31:88:F9:B9:F5:E9:0A:FB:0D:B0:DE:65:65:F0:2C:90:BE:EA:48:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MYj5ufXpCvsNsN5lZfAskL7qSNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/3B0A9C64D1B011EF8C20DD32C4F9AE02/MYj5ufXpCvsNsN5lZfAskL7qSNA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f3:d2:f5:bc:4b:94:9f:3b:de:9f:20:69:0c:1f:15:0f:20:
f6:85:49:cb:98:eb:f3:d4:24:af:10:2a:7e:d6:f8:8b:78:fa:
58:90:97:8e:81:dd:54:47:e6:ee:05:95:a2:f7:1a:a8:79:48:
02:34:cc:71:45:5e:2c:2f:d9:3a:a1:39:56:eb:bb:20:fc:18:
ca:cc:6b:40:06:16:d6:96:e6:ed:04:f8:f0:5e:2a:77:d6:e2:
1c:9a:28:a1:a3:88:a2:c8:9a:1a:11:3a:2c:64:93:86:39:c0:
07:54:75:1f:58:7c:36:45:d6:4a:f1:82:7e:6e:19:6c:21:a3:
f5:fc:fb:19:97:4e:c2:95:16:eb:07:c9:95:63:a9:03:c6:a3:
6b:8a:ce:ee:7a:f0:e0:3d:a3:b4:25:8e:89:aa:78:22:76:55:
dd:f4:ef:31:3b:b4:6f:fc:52:bf:2c:75:af:00:36:03:c7:74:
d9:4a:b2:ad:04:e5:c4:c5:50:9f:ad:85:6b:37:10:29:2d:b6:
f8:a1:8d:38:17:fd:fe:8b:ac:74:ce:18:2a:2a:f8:a5:a1:39:
dc:84:89:ff:1a:a5:32:d1:cf:e4:2a:85:0a:64:28:15:1f:aa:
24:82:51:aa:e6:85:d0:1f:e3:47:25:d3:bf:5d:e7:a4:da:b1:
41:46:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:00 2025 by rpki-client