This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json)
Hash identifier: 5zQarj7yqM4rf0oh3X3/bf9889NR28PYmTJe4siLeM4=
Subject key identifier: 2B:D4:46:88:DD:52:D3:07:C9:48:8D:47:36:EA:22:6D:09:7D:B9:10
Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Certificate serial: 051F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
Manifest number: 06D1
Signing time: Thu 04 Dec 2025 22:09:20 +0000
Manifest this update: Thu 04 Dec 2025 22:09:19 +0000
Manifest next update: Thu 11 Dec 2025 22:09:19 +0000
Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: L0vNm8wu1wtICHPGfYFFDk/QCm0/wfVa3vMQ8Wg1l0c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1311 (0x51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27
Validity
Not Before: Dec 4 22:09:19 2025 GMT
Not After : Dec 11 22:09:19 2025 GMT
Subject: CN=6932068f-4b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:4e:cf:e7:eb:e3:9b:7d:98:7f:c4:ae:30:
20:01:f9:f9:e2:11:94:59:09:aa:98:4b:ec:c4:ac:
ac:6c:79:f2:18:7b:89:6b:cb:5b:13:e3:36:eb:a3:
4c:c3:c4:e9:a6:42:9f:02:e3:25:b8:29:f6:89:c1:
cc:aa:b5:11:21:d6:42:b3:86:93:47:83:4f:0f:4b:
8c:77:47:58:ce:7e:5d:c6:03:00:28:68:f7:5f:4a:
0b:bf:75:bb:f7:ac:c8:1f:12:1a:04:de:f4:4c:c8:
a2:39:7d:ea:68:82:d2:13:f8:9d:a2:ec:6e:63:7a:
6e:d1:3d:64:fc:23:bc:b6:06:f2:04:2d:5d:91:50:
5b:70:ed:a5:e0:28:21:0c:cc:10:ab:a9:75:3c:f6:
96:5f:1d:ed:16:9e:14:88:8b:fe:50:5e:23:76:cb:
f2:e1:a4:76:4d:17:e5:48:1f:8c:9e:56:d2:1a:8b:
ae:ed:70:f3:74:8b:61:e9:82:05:8b:2e:d8:31:41:
be:7e:f3:e3:f0:38:c2:ee:de:63:40:09:ad:84:50:
62:36:0a:59:8f:32:b3:78:21:4e:08:13:8a:96:8f:
e4:a2:48:7d:71:4d:d7:c1:17:9e:64:45:69:8b:1c:
03:a3:0d:07:4b:06:93:ed:d3:92:f6:86:15:0a:ab:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:46:88:DD:52:D3:07:C9:48:8D:47:36:EA:22:6D:09:7D:B9:10
X509v3 Authority Key Identifier:
keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:bc:c4:e4:ed:0d:4a:52:b6:44:6e:4f:09:86:da:60:bc:c2:
38:aa:fb:9f:c6:15:96:be:48:ba:57:c9:2d:d7:15:62:90:af:
f7:86:09:77:fc:85:ed:66:03:91:96:a6:68:f9:fe:0e:fc:03:
ee:0f:e8:8b:f8:c2:5b:16:4d:86:ca:79:b4:4c:ac:a6:43:48:
40:6f:c0:17:dd:ba:b7:a4:fa:71:4b:a9:1e:16:e3:49:5e:a2:
68:cc:6c:64:a6:85:91:3c:44:08:f1:44:74:4e:c6:9b:ea:54:
9a:29:26:c3:48:ef:b4:6d:1b:82:ec:6a:62:51:b6:b1:8c:34:
58:ed:60:4d:a3:f5:97:da:ca:00:3f:c5:b6:b4:83:1e:6a:4e:
5d:e4:a3:6c:d9:e4:4b:71:33:a0:5c:8f:79:5a:89:d7:ff:2a:
41:dd:8d:c3:cd:e8:e5:1b:f1:23:34:05:e4:2d:bc:4a:28:9f:
90:c9:60:5d:b8:b8:75:7a:02:a0:09:a1:ee:76:29:ae:aa:ae:
2f:e7:4b:24:00:fd:58:b0:66:79:77:93:e9:49:00:b0:19:47:
cd:c0:8f:f7:fa:9a:c1:1e:00:50:9a:c6:f7:13:3d:d8:91:b0:
71:86:8f:d4:82:71:cb:95:a5:36:3a:6c:f3:63:2c:0d:a9:21:
a9:a0:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:58 2025 by rpki-client