This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
File: 7enmnD0KkdKXM8a3AvPMSL7dzuk.mft (raw, json)
Hash identifier: 0culJB8cv7cMJUpHVhFOpVU31nEigIpoNXfoGJgbZvU=
Subject key identifier: 03:5C:EE:8A:32:88:7D:2D:EF:30:85:9D:0B:59:34:89:96:46:63:D7
Authority key identifier: ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
Certificate issuer: /CN=A9193869/serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
Manifest number: 14
Signing time: Fri 05 Dec 2025 05:44:00 +0000
Manifest this update: Fri 05 Dec 2025 05:43:59 +0000
Manifest next update: Fri 12 Dec 2025 05:43:59 +0000
Files and hashes: 1: 7enmnD0KkdKXM8a3AvPMSL7dzuk.crl (hash: dqtUqOTHUWwImyBK2OXtgAV1V8oeQQdt5N3zc7gmmv8=)
2: 00C05CEAB7D511F0AE891D43C4F9AE02.roa (hash: b+1hqemSQst2M7DCyOrAvb7h4SpsImJMoRs35hPQsyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193869, serialNumber=EDE9E69C3D0A91D29733C6B702F3CC48BEDDCEE9
Validity
Not Before: Dec 5 05:43:59 2025 GMT
Not After : Dec 12 05:43:59 2025 GMT
Subject: CN=69327120-dfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:49:cd:76:1a:ce:4a:5f:26:2b:4b:e9:76:e3:
3e:6a:16:5b:a1:51:22:29:d1:17:ef:31:b9:64:22:
1e:88:0e:09:08:2e:e1:6e:b2:90:eb:65:d8:f5:7b:
ce:7c:03:f6:cf:b3:8e:25:64:ad:2f:32:46:41:de:
bf:85:d5:14:97:eb:96:61:79:aa:e9:77:97:6f:71:
19:49:53:69:3e:7f:10:94:8b:fb:36:2a:7c:d6:39:
a1:49:3a:4a:4f:fc:af:df:fa:25:b4:b8:91:8a:5a:
d1:1b:62:71:d6:2f:48:9d:3a:ab:30:65:9f:68:64:
5d:68:20:ab:cd:43:ae:27:10:00:61:cf:7b:7c:86:
99:e3:f7:74:90:98:fd:2c:c3:04:66:29:c8:51:bc:
4b:ef:33:4c:59:39:f2:6d:66:be:cc:cc:89:ed:8a:
4b:52:a4:7c:5e:fa:35:c0:eb:de:3d:08:85:26:fc:
c5:a5:0e:47:fd:6e:f5:65:3d:de:cd:bf:35:ae:82:
79:97:ab:e5:77:d3:14:76:99:e4:75:03:2a:c0:64:
74:37:73:54:b4:7f:f1:a0:68:59:96:9f:3f:c5:b3:
4d:f8:9c:6b:07:d6:4f:78:88:a5:7d:62:89:f6:24:
53:ab:a1:9b:01:a0:54:87:ab:e6:83:16:11:03:48:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:EE:8A:32:88:7D:2D:EF:30:85:9D:0B:59:34:89:96:46:63:D7
X509v3 Authority Key Identifier:
keyid:ED:E9:E6:9C:3D:0A:91:D2:97:33:C6:B7:02:F3:CC:48:BE:DD:CE:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7enmnD0KkdKXM8a3AvPMSL7dzuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193869/36F1A432B7D411F08E1D0320C4F9AE02/7enmnD0KkdKXM8a3AvPMSL7dzuk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:e0:14:06:3f:34:8a:8b:7d:21:c3:3d:9d:d1:f1:25:a3:
9f:c9:c8:96:3c:fb:20:1b:92:85:e4:6e:1d:88:4b:20:28:4e:
16:9b:b3:3e:5a:fc:2e:de:7f:fc:13:31:d6:6d:f5:9c:b3:1e:
f5:e0:d5:ff:33:3a:c5:5e:56:a2:36:75:89:b9:23:9f:46:0c:
04:9b:cb:54:38:a2:db:b8:9a:f4:99:7e:b4:0d:b1:13:fc:2a:
94:f3:7f:2a:30:b0:3c:27:66:e7:ae:30:99:e4:94:93:ef:d4:
af:3a:36:84:82:ac:b1:15:2a:e3:07:e7:d7:3a:ab:c6:33:59:
c1:3e:cb:f0:2b:3a:03:cc:0f:0e:7d:9d:e4:ad:a1:0c:ec:4f:
d2:52:85:d6:4a:63:1e:ca:1d:01:8b:e3:b9:65:a7:49:9e:20:
c1:c8:b8:3e:be:df:2e:09:d4:4d:c3:92:0f:59:3c:95:b2:a9:
83:50:43:76:39:8a:d1:64:b8:12:5d:44:2c:ee:af:26:2e:dc:
54:e4:c8:23:a1:5c:46:a4:28:2f:77:7a:42:bd:57:04:89:a6:
41:20:94:5b:bf:04:a2:12:01:3b:0b:7b:b1:29:96:5e:b8:73:
b5:71:96:bd:2d:94:36:12:49:23:98:3b:b0:f3:71:7b:2d:aa:
3f:f4:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:43:45 2025 by rpki-client