This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
File: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json)
Hash identifier: ogC3rNIShV0TkrSo6HxJ6JgAGYkm1RsdpvUKUwDICmk=
Subject key identifier: CB:25:99:A9:5F:08:C1:35:03:24:C4:35:B1:49:BD:20:B1:8B:2D:E2
Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45
Certificate issuer: /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
Manifest number: 0162
Signing time: Fri 05 Dec 2025 02:12:57 +0000
Manifest this update: Fri 05 Dec 2025 02:12:57 +0000
Manifest next update: Fri 12 Dec 2025 02:12:57 +0000
Files and hashes: 1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: QPNifuv8o9ddbEZmBLN6YLS87UdLbzm3Lexz0MCgQOo=)
2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: Pi2lHW1DBGVDDiFKA6gLvJJbMOhPiktvXLmZ+ShVpYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl
rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45
Validity
Not Before: Dec 5 02:12:57 2025 GMT
Not After : Dec 12 02:12:57 2025 GMT
Subject: CN=69323fa9-a079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:d8:58:d3:f9:8e:70:01:da:97:f4:ad:f1:
ce:b9:43:04:b9:d3:5f:5e:8f:d4:77:b4:18:01:9d:
49:bf:73:96:8d:07:4c:89:7b:9d:88:0f:02:ee:2b:
d8:25:7c:84:19:ef:18:95:2d:b2:0a:1d:49:28:ad:
c6:00:19:5d:9c:e2:71:6c:f1:f8:26:e7:38:cb:5e:
54:41:7c:5c:97:87:0a:8f:0e:66:a7:15:23:ca:80:
1d:f3:89:b8:c2:f5:7c:5c:28:00:89:cc:38:fc:f7:
79:5d:d3:b2:6d:10:92:33:98:07:6a:1f:d5:f2:df:
a0:8a:55:d5:9b:20:34:47:f9:bd:d6:41:e7:a4:aa:
75:c8:ff:f1:a3:0d:ae:f4:14:1b:ed:2d:36:1e:2d:
a4:58:5d:60:0a:7f:72:99:c7:b3:12:c7:e2:4a:95:
49:f9:73:ec:6a:09:8a:f3:6f:7f:16:e4:cc:f9:73:
ee:f3:1d:81:78:fa:4a:3a:a7:b6:74:2b:e2:2f:5e:
de:d1:27:93:40:20:3f:a0:ee:cb:a7:5f:ab:3c:94:
b9:07:54:00:9b:75:cb:4d:e4:e2:09:6a:d2:1b:05:
b8:ad:52:80:f7:58:6f:fc:e1:f5:97:b2:4f:f0:ea:
fa:bc:e8:d5:15:c6:12:59:c2:3b:f2:ec:57:a6:0b:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:99:A9:5F:08:C1:35:03:24:C4:35:B1:49:BD:20:B1:8B:2D:E2
X509v3 Authority Key Identifier:
keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:e6:0e:3e:f4:15:5a:51:6d:d1:4e:16:bc:8a:ad:ec:0f:
73:37:2f:0c:bb:4f:ec:5b:31:fd:e5:a1:92:0f:d5:7e:da:d7:
96:03:c9:d5:fe:87:93:45:3b:56:57:cb:af:94:cd:f9:e9:47:
59:c1:7c:f8:e9:5e:17:2c:49:b0:01:45:74:3b:b0:0b:04:88:
12:fb:a9:c0:c1:69:a6:6c:e9:df:69:20:64:56:8b:6e:64:9c:
ed:69:92:4a:20:5a:ab:3f:72:85:58:2e:46:c9:2b:ec:b9:8e:
c5:be:81:4f:2f:86:b5:48:90:59:ce:d1:73:73:50:70:15:6f:
03:74:57:b7:ff:dc:43:e0:c4:21:22:f6:13:7d:44:9d:ed:e1:
1e:a7:0a:b7:02:2d:6c:a9:3e:e6:0a:79:e0:54:40:ce:dd:05:
fc:07:f4:2b:c1:6a:92:fd:c5:4c:e0:de:af:a2:8c:c7:99:b7:
4c:c7:31:cd:ef:a1:98:9a:cd:4d:97:cd:ad:6a:1b:a8:cc:49:
09:bc:38:74:bc:1c:64:c9:5a:d6:ed:e8:7c:ec:6e:2e:16:46:
15:f2:ea:55:82:a9:9a:e5:6b:b2:85:fd:64:e4:f9:a0:20:0c:
8a:78:c7:9e:69:31:a9:1e:76:2a:7e:a0:c2:6e:9b:69:be:50:
b0:f8:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:26:08 2025 by rpki-client