This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
File: 489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json)
Hash identifier: naulZBvGVS3Hjle4GwH2U2u+6Jp6o0LgF1toLHrPOUY=
Subject key identifier: 58:62:9B:86:B2:AF:3E:D7:DC:78:FC:17:D6:D4:22:17:88:2D:F6:A8
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 0340
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
Manifest number: 0328
Signing time: Thu 04 Dec 2025 23:30:58 +0000
Manifest this update: Thu 04 Dec 2025 23:30:58 +0000
Manifest next update: Thu 11 Dec 2025 23:30:58 +0000
Files and hashes: 1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: 5n9XlwdpcfwJGbFhII9A4UAVb9cm/+LuBoqkRT6DxhI=)
2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: +6obkqNFt0tnKMRz6dRit6ArMoN+fxhvRElw6ROUx6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Dec 4 23:30:58 2025 GMT
Not After : Dec 11 23:30:58 2025 GMT
Subject: CN=693219b2-9faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fe:04:4e:4d:d8:f8:37:f4:f8:00:ac:60:dc:
a6:88:0c:90:fe:83:a9:e0:75:4f:02:a9:bf:5a:68:
ca:c0:58:fd:a8:ea:5e:ca:fc:67:ee:98:13:d2:d8:
2a:45:8a:88:d0:82:6a:e4:31:22:a9:c0:d4:0d:fa:
bb:78:b0:db:14:7b:c3:48:b0:39:d2:22:83:ca:28:
25:85:58:8d:7a:88:d5:91:67:cd:02:d5:97:f7:77:
08:fc:ab:b3:c1:5b:c2:e7:b0:2b:fa:14:b7:bc:4c:
2e:42:ea:d4:19:5a:49:75:1d:8d:16:ca:4e:2c:e3:
e9:1a:68:3c:7b:00:cb:88:7b:6e:18:ba:ef:b4:ac:
6d:1b:62:33:91:65:e2:92:d7:92:27:4c:94:85:e3:
af:7b:26:cf:3a:7f:9b:e0:f3:6e:5c:74:85:00:47:
50:73:0d:df:37:79:7c:f7:14:4a:71:53:c6:01:d0:
2a:b8:b2:2e:24:c8:ae:b3:6f:47:c1:9b:a2:1d:39:
8c:6f:44:ff:f8:65:bc:43:58:77:c0:10:61:75:db:
4b:e0:f8:32:73:a8:93:4a:f5:a3:aa:f0:c8:31:18:
47:c6:b9:16:c0:9b:80:ce:f6:f8:99:62:8f:96:85:
01:71:eb:f5:41:4f:05:66:51:3a:4b:7e:fb:35:4d:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:9B:86:B2:AF:3E:D7:DC:78:FC:17:D6:D4:22:17:88:2D:F6:A8
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fb:03:68:85:59:9b:73:fc:5d:61:fb:1b:ca:5a:27:3c:92:
a2:25:28:43:f3:06:21:6c:80:d7:dc:e0:02:f8:2b:3c:74:2a:
f3:f4:e1:bf:0e:a8:99:27:1b:72:18:7f:6a:08:49:ae:f8:51:
3c:dd:b9:8e:f9:4c:f3:30:3d:76:1e:81:69:b9:8b:a5:3f:77:
ea:ec:21:5f:32:4a:ac:2a:4a:31:c6:dc:e9:da:33:9a:ba:aa:
f9:35:79:a9:9c:9c:1a:93:65:5c:83:7f:66:0b:af:e4:fa:41:
a3:d1:6a:a3:c3:e1:f6:c7:40:25:35:c9:29:ac:9e:93:68:21:
02:94:ab:ab:ef:ae:4a:6d:37:eb:fd:f1:bf:a1:c4:62:77:79:
71:a9:76:ce:1f:51:2e:7f:51:52:91:d3:d4:77:67:9b:aa:17:
58:54:cb:95:15:92:68:2e:b6:a6:46:63:df:b0:0b:06:7b:30:
2d:e3:df:5e:3d:8d:08:80:70:fa:6a:ac:85:57:09:a8:0a:f0:
df:0a:72:20:1a:8e:99:36:1c:72:29:10:34:f0:1e:a4:5c:16:
c6:e4:db:33:f5:fa:9a:2c:b1:af:ff:ea:06:6b:49:01:bb:0c:
e4:bf:4a:2e:1b:a3:94:99:1d:9e:df:61:19:9c:00:2e:48:a7:
b3:ee:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:29:03 2025 by rpki-client