This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
File: XiM50eqvU0mhOKR5fagtDrTfqew.mft (raw, json)
Hash identifier: bNLBDA3cpdYgPF9J/n2x+s0u3LeInzIiVT7b0eQb2/s=
Subject key identifier: AC:59:D3:8C:7A:89:61:50:98:2E:F2:4C:8D:0F:CE:04:62:73:11:65
Authority key identifier: 5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
Certificate issuer: /CN=A918CFAD/serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Certificate serial: 013D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
Manifest number: 013B
Signing time: Fri 05 Dec 2025 02:32:36 +0000
Manifest this update: Fri 05 Dec 2025 02:32:35 +0000
Manifest next update: Fri 12 Dec 2025 02:32:35 +0000
Files and hashes: 1: XiM50eqvU0mhOKR5fagtDrTfqew.crl (hash: T1+iQuUuKaC/yIuIEuYBQENk56+t7NN4TUnMahURU1o=)
2: D161B1F0EA0411EE98A86A13C4F9AE02.roa (hash: +NOhwE6m6lpwH5XuFy8HqU1ULWBp+YrGh21v4UoRt+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 317 (0x13d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CFAD, serialNumber=5E2339D1EAAF5349A138A4797DA82D0EB4DFA9EC
Validity
Not Before: Dec 5 02:32:35 2025 GMT
Not After : Dec 12 02:32:35 2025 GMT
Subject: CN=69324444-61c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:38:8e:3a:7f:5b:2f:07:45:22:11:61:dc:
91:9c:52:24:bb:ee:ff:97:b5:f9:e8:7e:e6:df:7d:
6e:20:dc:f9:09:2d:21:52:e3:68:5d:db:e5:28:51:
33:f3:06:34:91:cb:84:4a:b3:4c:b2:79:dc:ad:91:
a1:87:1a:23:3a:47:fe:65:c6:6e:42:21:bf:5f:7d:
f3:4b:b1:e7:26:31:89:03:9c:ae:88:6c:ec:c6:62:
83:b1:ca:b5:a9:64:b9:51:19:2f:a2:c2:78:6c:b2:
64:03:8a:12:19:d4:49:aa:04:79:35:62:a4:ee:97:
8d:87:17:24:66:e4:b1:be:72:8f:fe:4b:2d:4d:9c:
0e:75:9f:d2:eb:de:1a:0d:d5:20:23:ed:13:b0:7e:
ec:9a:76:c0:82:91:74:8f:6e:f8:60:9d:01:d2:bd:
ed:6e:1d:45:05:29:56:00:2d:fe:0e:b3:12:38:71:
92:a0:e9:e7:38:15:d2:fc:1a:82:94:7f:90:7f:19:
bb:ff:21:20:44:f7:d0:4e:e8:95:ad:ca:ce:cb:02:
7f:0d:84:88:b7:43:eb:e9:82:41:ae:ce:73:29:5b:
02:2b:89:fb:7c:55:b5:c3:7c:65:dc:50:2d:ac:7f:
d4:2b:3d:15:42:29:88:2e:90:71:76:e8:c6:14:b1:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:D3:8C:7A:89:61:50:98:2E:F2:4C:8D:0F:CE:04:62:73:11:65
X509v3 Authority Key Identifier:
keyid:5E:23:39:D1:EA:AF:53:49:A1:38:A4:79:7D:A8:2D:0E:B4:DF:A9:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XiM50eqvU0mhOKR5fagtDrTfqew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/4C900F1CEA0411EE92D10611C4F9AE02/XiM50eqvU0mhOKR5fagtDrTfqew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:8f:51:be:35:e7:89:30:cf:22:20:8e:8b:df:76:16:c4:45:
9b:46:7b:d9:30:28:94:f5:01:a7:05:f4:0d:93:63:f2:ca:14:
8c:b6:8b:d0:e4:34:f7:11:88:9d:ae:8c:11:c3:78:33:56:2c:
64:f9:c3:98:58:d8:73:8b:1d:18:95:cd:4b:5b:d3:1c:d3:8b:
10:84:78:c8:ec:75:94:9b:20:44:4d:a2:2e:70:58:0a:1b:8a:
5a:44:b8:06:68:0e:90:fb:e8:16:07:93:d3:17:ea:e2:79:56:
11:c4:a4:78:f0:cc:d1:98:7c:92:1e:7a:f0:eb:22:9e:31:ca:
45:8f:f0:03:6d:de:5b:85:c3:f0:e9:ba:f1:97:ce:29:21:6b:
74:4c:1f:86:e0:4e:4b:60:e5:f5:e4:a9:18:37:4e:63:60:23:
b1:c6:6c:e0:68:a8:c7:fc:20:98:e0:05:3b:5f:30:82:de:8c:
5d:9a:ca:e3:c3:2a:60:70:ed:44:5c:a6:40:cc:fc:ec:18:8e:
f7:8e:48:01:b0:7b:ca:3e:bb:ef:76:de:ee:91:44:5f:6c:1d:
0b:5d:06:32:5c:b0:41:08:b3:50:6e:52:b8:83:c7:57:f1:88:
33:f9:f1:e6:1d:21:f6:d5:92:b5:97:1f:53:a1:14:c4:22:9b:
02:12:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:29 2025 by rpki-client