This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
File: Ps7q_orHtLE44oRfeGEtk9XFMMY.mft (raw, json)
Hash identifier: De+a5pxMHjyXp201Lcli8ZAIgcFp1i6i4CUAduV3Mic=
Subject key identifier: 9A:FA:9A:B9:32:F8:4B:28:C9:12:66:F6:BD:27:C1:2A:AA:CA:CD:21
Authority key identifier: 3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
Certificate issuer: /CN=A9186537/serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Certificate serial: 0AA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
Manifest number: 0A96
Signing time: Thu 04 Dec 2025 18:52:24 +0000
Manifest this update: Thu 04 Dec 2025 18:52:24 +0000
Manifest next update: Thu 11 Dec 2025 18:52:24 +0000
Files and hashes: 1: Ps7q_orHtLE44oRfeGEtk9XFMMY.crl (hash: Zwjig1Sm4RXZ3/+uhjZ0wtR6+AEemm/GTyLc0J4NsYU=)
2: 74637BD8AB5911F0A8E57D4AC4F9AE02.roa (hash: 80PaCFFuMnuRM+D3EQkPjurblzfq2cyz9MfOJnMFwd4=)
3: C50E0D60B31F11EF9044054FC4F9AE02.roa (hash: l+8n3K0f3AeAooimvYQKJeBLoOspZqrmvhsLjnatcyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:52:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2722 (0xaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186537, serialNumber=3ECEEAFE8AC7B4B138E2845F78612D93D5C530C6
Validity
Not Before: Dec 4 18:52:24 2025 GMT
Not After : Dec 11 18:52:24 2025 GMT
Subject: CN=6931d868-eac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:36:26:5c:f2:7e:f8:8e:0d:92:a8:84:58:
71:12:ac:88:c2:87:79:07:4a:f2:be:89:bc:19:66:
e6:86:5d:1e:39:28:70:f7:45:3a:a3:af:fc:a6:b7:
a1:8a:e8:a0:9e:ad:61:5d:c4:90:75:87:18:85:15:
4d:78:a3:79:7d:02:99:88:43:22:af:40:2f:c9:ac:
ab:db:18:d7:fd:be:57:ef:6c:d8:54:ea:15:1d:13:
35:35:8d:c7:5c:d4:58:12:2d:d1:c0:03:fb:7b:b3:
dd:81:50:7d:2c:5d:49:7f:d5:81:f6:73:f2:ca:cb:
dd:fc:d9:86:22:66:00:9d:a8:84:36:02:29:18:15:
85:93:11:d6:09:a4:db:23:6f:bc:fc:03:da:7d:63:
08:52:21:9e:0d:3c:c7:9a:87:14:fa:ca:83:c9:d5:
50:fa:22:8f:88:39:86:22:45:cd:92:5d:f4:fc:52:
02:28:f3:42:4f:c7:3a:f3:32:73:fe:58:05:13:8a:
24:54:fc:72:de:cb:5b:17:98:4e:24:1a:5f:c8:d2:
0e:6e:ac:3d:56:ae:9b:f5:be:55:4e:5f:8c:7b:4c:
c8:ed:62:39:3b:d2:9b:32:23:7f:75:60:89:aa:8e:
75:38:e3:b0:04:2f:07:05:c2:9f:7f:e5:96:9c:ea:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:9A:B9:32:F8:4B:28:C9:12:66:F6:BD:27:C1:2A:AA:CA:CD:21
X509v3 Authority Key Identifier:
keyid:3E:CE:EA:FE:8A:C7:B4:B1:38:E2:84:5F:78:61:2D:93:D5:C5:30:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ps7q_orHtLE44oRfeGEtk9XFMMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186537/BEB0D91A6D9D11EA9A5F2809C4F9AE02/Ps7q_orHtLE44oRfeGEtk9XFMMY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:41:65:d0:32:be:c2:de:99:75:81:f4:e9:56:6e:8a:37:
a6:39:5e:56:b8:fe:18:80:71:7c:38:40:0c:f2:67:f2:a8:ad:
b9:d9:d4:6d:a3:dd:af:cd:4a:03:38:93:b5:66:09:3d:b3:3f:
ee:c5:95:f8:24:53:c9:f8:dd:c0:17:11:18:4f:d5:79:97:b9:
9f:fa:b8:8e:9e:bc:ee:a2:63:4c:2f:89:23:00:13:29:73:84:
69:fd:f1:38:fe:58:7e:2d:5a:86:4a:97:0d:a9:86:fa:48:43:
9b:33:c6:9b:87:6b:fc:07:9b:31:ba:8f:07:16:c1:0b:44:16:
63:72:ec:34:32:bf:aa:da:1a:d7:f3:57:d7:11:1e:ed:87:f6:
7e:a1:e0:80:21:e0:c2:85:31:8c:49:90:37:7b:dc:5c:82:3e:
5f:08:60:71:cb:66:5d:68:2c:b5:74:ed:af:ee:a4:5e:dc:0c:
16:a4:bf:6f:5b:09:1d:ca:46:4d:ba:1e:b8:d9:fb:f1:a4:7f:
1c:aa:eb:00:47:f6:fb:60:32:97:91:8b:46:60:69:c9:88:6e:
13:80:b8:6e:20:d1:ba:b3:e5:c0:51:d2:1b:3a:1d:2e:4d:d7:
1c:19:03:fa:55:b1:6b:14:a6:4e:f5:4f:07:d3:3e:26:82:1e:
76:80:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:40 2025 by rpki-client