This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File: rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier: Q41dz6/C1n47E6lIe2MDcGfosNcUC7ZJJ6H6BDKSbC4=
Subject key identifier: ED:59:8B:BB:51:B3:4C:AB:7A:C0:4D:73:C9:54:B2:20:6A:21:F6:46
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer: /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial: 05FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number: 05FA
Signing time: Sat 20 Dec 2025 22:13:23 +0000
Manifest this update: Sat 20 Dec 2025 22:13:23 +0000
Manifest next update: Sat 27 Dec 2025 22:13:23 +0000
Files and hashes: 1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: xN/pbRCwZALLRWkE5uzD1hDY6gtTFonyxQD3HcYMJjg=)
2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: fgnyTe5aBHpvAstEwjQrp1aBpknZRHuqjkJbh+yJFsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1535 (0x5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Validity
Not Before: Dec 20 22:13:23 2025 GMT
Not After : Dec 27 22:13:23 2025 GMT
Subject: CN=69471f83-a9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:44:7a:be:37:61:ac:04:2e:01:32:90:e7:
ca:6b:4e:78:dc:a2:ec:a0:7d:9e:74:24:86:48:e2:
50:19:18:1e:14:84:03:cb:e3:1c:19:76:55:47:be:
6f:4f:4d:ac:83:14:01:e4:0c:bb:04:19:7a:0a:74:
46:37:0d:85:6b:cd:8c:ce:b6:2f:aa:22:d6:60:63:
f2:c5:9e:fb:02:72:61:c4:5f:c6:ec:d0:67:7b:03:
1e:28:26:75:3c:57:89:be:76:d8:2b:63:cc:07:72:
70:bb:78:e8:31:3a:d4:57:e0:3a:90:11:fe:4a:cd:
c6:b9:f9:b1:9c:aa:60:a0:2a:5f:b2:14:28:f5:e6:
db:af:76:cf:d5:33:02:48:b5:1f:74:38:71:62:6b:
37:63:16:ad:4b:4d:d1:68:7f:82:83:6b:fe:d4:d1:
fd:4c:11:49:cd:25:e8:19:44:5f:b0:d3:1a:81:4d:
e5:a0:fc:55:a0:94:cf:5f:2f:50:a3:fe:fc:6c:a7:
9b:31:48:40:13:ae:53:11:e6:5b:ce:81:69:01:96:
13:57:ee:37:de:86:fe:d3:81:8f:53:39:5d:3a:ee:
33:cc:ad:98:b2:f3:6a:e4:f5:c1:cd:76:db:c3:96:
97:f2:bc:6c:69:df:1d:7d:12:b4:9f:fb:87:90:4c:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:59:8B:BB:51:B3:4C:AB:7A:C0:4D:73:C9:54:B2:20:6A:21:F6:46
X509v3 Authority Key Identifier:
keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:b4:49:33:8c:73:89:17:d8:c7:e8:40:39:78:75:bd:bf:cd:
ce:2c:7e:35:70:73:1b:42:d2:f9:f0:3a:c5:48:98:c9:11:33:
61:34:13:fd:85:71:59:f3:87:48:36:7a:19:ea:2b:d6:f2:7a:
e6:54:6f:81:5e:a4:ec:cc:b9:1c:72:81:f1:15:0b:2d:88:c2:
2e:af:2a:20:a8:60:c0:94:47:00:d3:63:73:64:06:fa:c7:83:
e3:87:45:c6:f4:c0:9a:e0:63:c8:f1:4e:66:0c:bc:99:7d:ac:
d0:4c:33:88:39:e3:55:96:ce:a9:57:5c:83:d5:aa:09:3d:b3:
bb:51:9a:11:9d:7e:5e:51:9b:c8:73:60:bf:38:16:e5:a5:4e:
76:b7:8a:48:63:b0:94:1e:4f:14:b7:61:6d:05:90:d0:dc:99:
f5:a9:4b:b4:5d:09:48:70:a6:e6:90:f9:b0:4e:7d:05:f8:0c:
6b:7d:25:7d:b2:eb:0a:91:70:20:09:2c:1b:39:2a:50:02:aa:
d8:e8:03:da:54:a0:b9:b3:2d:8b:9d:79:29:cb:be:a1:8d:0e:
33:52:f6:9f:fc:d2:bc:5e:13:c3:0d:f1:c0:32:75:57:f9:5f:
d5:ac:92:11:9a:54:e9:46:00:d5:25:b5:fe:e7:eb:f6:28:b5:
99:82:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:59:29 2025 by rpki-client