This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
File: 95uku76tPercmtRWS_qe8QpqorI.mft (raw, json)
Hash identifier: UgDSgGE9hjCoDgSPbu8JEK1o+ep75hhn0LzYXmW62Lc=
Subject key identifier: 46:6F:40:EB:57:BF:75:44:C2:7D:1A:B0:DD:88:A4:CC:7D:9B:79:A8
Authority key identifier: F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
Certificate issuer: /CN=A9189A9F/serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Certificate serial: 042D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
Manifest number: 048A
Signing time: Sat 06 Dec 2025 23:00:46 +0000
Manifest this update: Sat 06 Dec 2025 23:00:45 +0000
Manifest next update: Sat 13 Dec 2025 23:00:45 +0000
Files and hashes: 1: 95uku76tPercmtRWS_qe8QpqorI.crl (hash: XyiZl6L3rIFJb2jIRzFh8z2rgH81Vb6Z0AHFLZg2SFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189A9F, serialNumber=F79BA4BBBEAD3DEADC9AD4564BFA9EF10A6AA2B2
Validity
Not Before: Dec 6 23:00:45 2025 GMT
Not After : Dec 13 23:00:45 2025 GMT
Subject: CN=6934b59e-8e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:5a:7c:48:71:15:a9:48:21:e9:07:55:85:
88:3a:54:96:c0:fe:78:4d:ba:03:8e:49:6e:74:5c:
85:85:a2:17:00:96:03:e4:7f:df:5c:d2:a5:b8:d7:
97:f7:24:45:6e:e3:9e:f1:88:c2:60:45:97:59:68:
97:45:89:af:d7:ea:37:e2:06:ab:91:6b:b8:e6:7e:
91:de:34:3a:31:45:31:54:cf:20:a1:d9:58:46:f8:
7b:01:d0:a2:94:ae:2c:85:b8:82:97:4c:90:62:8c:
0c:f3:28:08:61:37:47:e0:03:53:33:c7:8f:c8:03:
b7:0e:0c:36:b5:2e:08:2c:96:4a:f8:39:ba:9c:ec:
19:ea:9e:d4:31:8c:63:1b:18:21:61:0f:aa:0c:70:
ad:bd:52:8e:bf:b8:4f:cd:dc:c8:65:07:80:c5:b2:
d8:b1:62:0c:51:77:fe:7e:41:68:73:08:a6:0f:cc:
a4:c7:35:2b:b9:be:11:67:93:46:01:df:0c:69:d0:
82:9f:ad:13:e7:c4:4e:ed:73:21:e3:56:69:a0:d1:
88:47:a0:bd:5e:07:ef:a6:a5:30:11:ec:b3:86:80:
80:e8:74:38:e0:7e:a8:9f:94:77:fd:12:67:dc:9b:
dd:6e:46:d7:17:5e:97:fd:d5:c7:6d:0a:69:b1:20:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6F:40:EB:57:BF:75:44:C2:7D:1A:B0:DD:88:A4:CC:7D:9B:79:A8
X509v3 Authority Key Identifier:
keyid:F7:9B:A4:BB:BE:AD:3D:EA:DC:9A:D4:56:4B:FA:9E:F1:0A:6A:A2:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/95uku76tPercmtRWS_qe8QpqorI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/95uku76tPercmtRWS_qe8QpqorI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c6:09:ca:11:41:a8:c4:9d:aa:8a:75:e8:11:3d:8b:41:4d:
ff:07:17:7f:71:b8:1e:16:3f:cf:d5:23:df:a1:2a:d4:4c:08:
29:fb:9b:a7:c7:1d:91:69:5b:a1:67:70:d8:dd:4c:9d:32:53:
cc:c7:bb:4c:c1:b5:4e:f0:c8:e1:3d:a8:e9:48:05:e4:1c:69:
60:2e:f0:76:64:e1:9e:43:12:9b:8d:80:0a:b9:06:2c:93:21:
ae:f2:8a:07:29:47:0c:d5:d7:7a:62:7c:b9:b6:53:79:2b:9b:
53:16:30:18:b7:fb:13:d3:ea:e2:f5:39:11:0f:bb:60:c3:3e:
59:56:f9:ea:fb:6d:74:b1:3f:35:62:1e:90:f1:3b:ea:15:88:
eb:3b:10:62:c9:b4:f3:e0:46:13:0f:40:03:12:bf:9a:6c:45:
33:71:b0:52:d9:91:bf:08:55:2b:68:ac:fa:29:08:9c:1c:7b:
1f:9e:95:97:5e:37:c8:b8:ad:b4:7d:41:d9:89:ef:d5:35:a4:
9c:1a:78:1b:01:48:a4:f5:0a:a1:4d:70:3f:16:17:d1:77:e7:
d8:0a:5b:ba:42:39:ad:1e:d8:02:a4:2e:a8:c4:aa:9e:36:4f:
77:e5:f0:ab:5b:8e:4f:81:10:df:59:62:04:b8:8c:a1:cc:a7:
2a:b3:dc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:53 2025 by rpki-client