This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json)
Hash identifier: HefIwrtefzTQVx5bv8Qs34Do4UQQQ+QtWDH9DHmhgYE=
Subject key identifier: 5F:AF:01:D2:94:93:64:0B:00:49:50:57:80:52:3F:9B:5C:E8:69:32
Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
Manifest number: 98
Signing time: Fri 05 Dec 2025 04:21:09 +0000
Manifest this update: Fri 05 Dec 2025 04:21:09 +0000
Manifest next update: Fri 12 Dec 2025 04:21:09 +0000
Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: mf82mIa3j3vmxtu9kdJB7Jh0RE0SWD5AS1zbwiCImyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:21:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C
Validity
Not Before: Dec 5 04:21:09 2025 GMT
Not After : Dec 12 04:21:09 2025 GMT
Subject: CN=69325db5-236b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dc:05:a0:a3:b4:24:30:1e:02:78:6e:54:2f:
19:8b:05:28:13:a1:7b:bd:0e:b8:26:b0:3a:ba:27:
9b:2b:13:77:7f:3f:fd:d1:6c:54:b9:43:12:5e:18:
ff:8d:be:b9:72:db:11:54:0e:4e:3d:ad:b2:be:aa:
94:ee:9d:7e:dc:33:a1:df:0d:83:4f:d9:50:07:ef:
8d:30:ff:de:05:3a:47:5d:91:22:f9:6c:dc:ef:32:
d3:2e:41:01:d9:f5:b8:1f:14:e1:2b:6a:08:b1:0d:
16:e8:22:b5:89:80:8f:9e:8e:95:2e:f7:46:96:1f:
e7:f0:34:b8:7e:d2:ff:4c:eb:82:62:d6:e6:f4:67:
9f:e8:02:bc:16:a4:27:b4:63:1b:e8:8f:61:ec:4a:
ae:76:3f:e9:b5:8e:ee:e5:eb:5d:f1:15:db:2e:55:
79:6d:ac:a6:8a:63:9e:1f:bc:9e:77:7c:79:77:c4:
cf:76:00:a8:53:f3:50:f2:30:6c:62:57:e6:b9:0d:
2c:23:d5:34:01:5c:e4:b2:2f:e3:14:ab:03:87:6d:
a9:24:90:63:01:0e:e6:8d:cb:01:36:08:11:1c:f1:
20:00:45:02:3c:c5:28:59:6d:a3:bf:19:39:77:2a:
4e:fb:01:c2:f3:4a:d0:a0:2c:09:c1:96:24:eb:da:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:01:D2:94:93:64:0B:00:49:50:57:80:52:3F:9B:5C:E8:69:32
X509v3 Authority Key Identifier:
keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0d:53:1b:03:9e:35:78:44:dd:6b:a8:55:a9:a1:cf:f0:62:
e5:55:3e:5d:cc:cf:10:6d:95:8f:f3:bd:1b:56:fd:b1:79:aa:
f6:d4:be:52:0f:8f:b6:21:df:05:45:0a:ab:fc:66:70:d0:7d:
f3:9b:80:16:d0:99:27:47:e2:4c:0d:6a:d4:3d:37:52:a1:11:
8a:e9:5a:44:ba:82:a4:36:53:7e:65:be:b8:ff:bb:4c:ae:e0:
7d:d3:c3:0d:ad:ed:94:25:dd:39:49:c1:14:8e:d2:66:96:39:
09:6a:d9:fc:38:05:0c:91:32:d7:b6:8f:5d:8d:af:74:54:b5:
ba:f8:4d:e8:09:fc:b3:d3:39:24:af:8a:3c:26:05:5b:56:f7:
82:29:99:96:02:bd:30:03:8c:5a:34:8b:9b:7e:d2:f4:cd:a1:
43:dc:eb:76:8b:6a:83:6f:b7:66:49:fa:6a:f0:c9:82:79:ad:
06:fa:96:56:40:7f:68:7c:de:bb:6a:81:6c:e3:f7:7b:c8:b8:
ff:7c:81:c7:d4:ad:07:90:ba:42:39:ab:93:a3:c2:1d:ce:f7:
62:07:75:4e:a9:98:5e:51:b7:ad:59:36:96:42:1c:84:57:05:
12:d4:3a:9e:72:25:b7:90:84:9f:1c:bd:a8:79:2c:23:09:f9:
38:aa:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:14 2025 by rpki-client