This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json)
Hash identifier: MZ2ip6WCMuo3EMDyzIgloigldnUL3Qt16cCiKVUIaKY=
Subject key identifier: F4:57:0F:38:F0:65:61:56:6D:C7:61:C6:1F:F6:A9:9C:12:9E:71:D3
Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Certificate serial: 0B72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
Manifest number: 0B6A
Signing time: Mon 08 Dec 2025 18:31:45 +0000
Manifest this update: Mon 08 Dec 2025 18:31:45 +0000
Manifest next update: Mon 15 Dec 2025 18:31:45 +0000
Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: jaP83MR2WC/Zr+K9T3UjQTrGvXrD66/L6mUeZVr1tJo=)
2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: Q+t5vtr4zi9qbMz+XlbKgiQudk9xrXCU2lb+B14yXgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 18:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF
Validity
Not Before: Dec 8 18:31:45 2025 GMT
Not After : Dec 15 18:31:45 2025 GMT
Subject: CN=69371991-749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:0e:57:72:c6:57:c6:42:6e:9b:15:69:8e:
d1:74:3a:1a:9a:c7:af:30:dc:8e:5c:c4:19:a9:7d:
ca:61:4c:88:37:0a:4a:a2:b5:f6:bd:7a:b2:1b:1d:
f7:3e:97:d3:2a:ef:47:d3:08:66:e1:e1:cc:46:35:
cc:99:54:ff:f6:5e:ef:84:a7:cf:6d:2a:96:02:7b:
17:55:2e:fd:ce:3c:7c:b5:d6:72:36:54:ec:f8:a0:
f6:b2:51:db:9e:92:d4:60:b9:00:1e:ff:ee:85:32:
35:7a:70:b1:95:66:06:6e:6f:e4:6f:b0:e2:be:54:
82:92:58:0d:b3:45:48:bd:83:d6:ad:89:c3:aa:96:
e2:fe:94:e0:2c:5b:e3:60:7f:5e:f0:b6:b4:4b:1d:
df:67:5d:d1:84:3c:fd:f9:cf:3b:bf:4c:26:9d:fa:
0a:ca:c2:c5:c6:9e:63:5d:3d:4e:6e:fa:7d:30:5d:
59:16:be:13:1a:35:33:b5:61:93:4e:c9:63:ae:73:
2d:6e:db:1c:8d:f5:45:51:57:40:1f:01:29:53:00:
5a:58:f7:83:5a:2b:1a:71:db:87:6b:78:8b:68:1f:
90:15:e6:2c:64:fa:70:2c:35:7e:f0:82:35:d6:d1:
75:4b:be:89:d8:d9:e4:5b:29:f4:67:7c:24:1a:fd:
4f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:57:0F:38:F0:65:61:56:6D:C7:61:C6:1F:F6:A9:9C:12:9E:71:D3
X509v3 Authority Key Identifier:
keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:f3:60:69:43:08:27:0f:f6:e8:42:fe:c9:ff:09:24:74:9c:
27:e1:ce:ab:6e:48:b3:c1:56:08:93:24:c1:87:c5:54:82:48:
a6:73:72:58:3d:50:ae:3f:e2:97:5c:65:f2:61:95:dc:85:9d:
ba:03:a9:ed:e2:78:db:50:17:5e:96:56:9a:d0:97:af:15:9e:
ec:14:88:6e:bf:a3:88:f2:eb:c5:6d:90:3b:e7:a6:97:39:d0:
57:9c:a0:f1:05:30:ff:fe:cd:2c:48:1a:49:20:60:0c:f1:ff:
d8:26:17:59:fd:87:14:b1:fa:29:51:e4:c4:b9:1f:bc:c5:15:
63:ac:4e:11:fe:1d:83:61:8e:74:bb:b1:d4:ec:11:e8:7f:7e:
3b:c7:d8:b7:45:7a:a9:4a:f5:6d:21:cf:b9:be:a8:97:42:4e:
ae:ce:3d:3b:3f:3a:44:47:fe:c9:9f:f8:7c:89:98:d3:21:23:
8c:8a:bf:f6:93:a0:92:38:d7:6b:a8:69:a5:44:7c:7e:2e:2b:
08:1c:98:75:c0:05:d0:db:7b:d2:da:ce:00:4e:27:03:b2:8e:
bf:36:b3:07:10:63:71:2f:48:c8:45:fb:52:ca:05:90:c0:f3:
4d:73:79:ca:c7:02:62:9a:f6:d6:df:4d:c7:78:4b:f6:d2:27:
ca:e8:be:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:23:03 2025 by rpki-client