This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
File: punLpSnAWpYkymA1SKPjFJF1jys.mft (raw, json)
Hash identifier: A8FsfPrRpkYOMvRG8WAvCuIBSHgCFHv6813Zo7X2xZM=
Subject key identifier: 71:68:13:CF:A8:9E:F8:91:8B:AE:CB:4C:B0:A1:89:4D:84:41:D4:E4
Authority key identifier: A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
Certificate issuer: /CN=A9189B41/serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
Manifest number: F2
Signing time: Fri 05 Dec 2025 03:20:10 +0000
Manifest this update: Fri 05 Dec 2025 03:20:09 +0000
Manifest next update: Fri 12 Dec 2025 03:20:09 +0000
Files and hashes: 1: punLpSnAWpYkymA1SKPjFJF1jys.crl (hash: i1K3obtdZ2EUayqrssWw0523aE6H1rg699D9wPjLY2s=)
2: 17AF252C605A11EFB7F45361C4F9AE02.roa (hash: IdTeZSdJYpvrv4PlLAcbyZ45qrh+mkn1A6fS8tzZ0GE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:20:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=A6E9CBA529C05A9624CA603548A3E31491758F2B
Validity
Not Before: Dec 5 03:20:09 2025 GMT
Not After : Dec 12 03:20:09 2025 GMT
Subject: CN=69324f69-4105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:a0:8d:3a:38:da:42:9f:b0:6a:dd:f5:bb:
f1:7f:01:ae:25:5c:58:85:0d:6d:ce:bb:6b:f7:95:
8b:08:42:0a:32:8c:95:25:33:08:c3:1d:54:96:2d:
b1:9d:36:c4:b6:1b:2b:bf:13:56:ba:f8:20:d3:0a:
61:a2:e0:08:05:2c:0e:b5:93:1f:05:af:d4:70:0a:
d8:46:ba:22:96:5f:09:de:6b:65:57:6e:fb:22:c1:
9a:a2:74:08:20:3e:2b:ad:09:5c:70:a8:98:ba:33:
d6:c3:6d:cc:70:b0:f6:ef:33:38:18:57:89:5a:18:
04:5e:e7:72:9a:48:78:8d:45:46:dd:46:a4:9f:93:
ed:f0:42:56:3e:7d:60:c8:0b:5f:ab:3a:10:d7:f7:
73:34:ce:db:ea:ce:2f:62:9c:5e:98:30:73:e4:3f:
45:ce:61:32:29:f8:7f:93:da:af:0f:d8:de:62:ac:
fa:c9:c6:21:95:f6:48:be:61:0e:16:02:81:63:5d:
71:31:f3:8f:86:9a:3f:17:83:fa:bb:f4:c3:f1:f0:
fb:bd:3c:0a:fb:ea:af:5a:33:d0:72:56:8b:ab:ae:
8d:87:f1:b4:c2:8c:a9:f6:3e:22:e9:15:ec:0e:54:
18:f1:17:df:e0:b5:e9:e7:bb:43:ec:e5:35:9f:69:
de:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:13:CF:A8:9E:F8:91:8B:AE:CB:4C:B0:A1:89:4D:84:41:D4:E4
X509v3 Authority Key Identifier:
keyid:A6:E9:CB:A5:29:C0:5A:96:24:CA:60:35:48:A3:E3:14:91:75:8F:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/punLpSnAWpYkymA1SKPjFJF1jys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/69B7698E605911EF9C223760C4F9AE02/punLpSnAWpYkymA1SKPjFJF1jys.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:2c:e3:61:39:56:7d:01:f0:de:63:c6:8f:74:1c:04:4c:5e:
83:86:6e:d0:32:64:04:1a:6f:2e:b0:aa:c0:e3:63:f4:01:3e:
42:ec:d5:58:51:59:56:c3:40:37:f6:b4:2a:7f:9b:f6:e5:89:
c2:21:8f:5f:40:7e:1f:8d:d9:3e:4b:b4:ad:02:60:10:8a:bc:
e0:2a:19:4b:48:bb:04:0b:29:38:ec:16:67:42:cb:5e:31:f2:
50:14:bd:27:c5:00:3d:9f:03:f8:69:e7:e3:3c:d7:49:69:3c:
f6:f0:e1:25:f1:4a:6a:a0:e5:cf:f5:a8:5e:63:54:a1:17:de:
be:0a:ea:72:0a:bd:5a:e7:98:3c:df:f3:29:31:5f:36:c7:7d:
3c:ce:34:88:b3:ba:ad:48:95:ed:fd:3a:2f:24:d6:33:ab:37:
30:3f:19:84:85:5e:71:74:a2:50:8a:7d:6a:6c:ca:6d:5c:03:
9d:5f:ff:ab:0a:f6:af:2c:96:e2:dc:8d:79:89:eb:b3:bf:3a:
11:eb:8d:97:0a:ce:4b:e5:64:b7:0e:3f:31:2c:2a:b6:ee:85:
26:44:c9:ad:8b:b5:91:bc:2b:7c:67:40:10:d4:d0:3b:db:cc:
a1:47:4a:09:77:d0:0e:45:c2:f4:d6:bf:eb:45:5b:79:cb:f0:
88:f1:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:10:06 2025 by rpki-client