This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json)
Hash identifier: 8PxnnqjNfuYt846do7dVybBC0eRqUGN1DisnMUK4ukc=
Subject key identifier: BD:37:E3:C8:37:FC:A4:9A:17:B7:98:AD:55:3A:53:66:8A:C3:DA:88
Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Certificate serial: 079F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
Manifest number: 1319
Signing time: Sat 06 Dec 2025 18:19:30 +0000
Manifest this update: Sat 06 Dec 2025 18:19:29 +0000
Manifest next update: Sat 13 Dec 2025 18:19:29 +0000
Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: 9CHOMysB16nDLjlhXs1FSQqrlVOptk2e3wwUwgCCepQ=)
2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 3j6fcjarkwTsrFF+jI5l1fkUVOMv+A+fXywGLnEk9ME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951 (0x79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Validity
Not Before: Dec 6 18:19:29 2025 GMT
Not After : Dec 13 18:19:29 2025 GMT
Subject: CN=693473b2-f8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:13:99:87:60:72:72:54:f7:b6:97:4c:be:
44:34:f8:e5:6e:1c:2e:3d:cc:d6:be:ac:26:55:8a:
4f:c8:be:80:60:25:b7:3c:1f:be:30:b9:83:fc:64:
b1:34:55:ef:79:85:37:0f:58:c2:03:07:2d:54:1b:
da:aa:a8:1d:6c:e4:ee:60:5d:5b:3b:91:a3:8d:9c:
e9:f6:73:22:cc:79:f6:ef:3f:e9:84:82:a2:9d:c6:
2e:5a:09:7d:fd:91:16:3e:1f:7e:95:46:ef:be:66:
ac:3e:e8:a6:b9:dd:b1:66:e4:a8:7e:6a:a0:cb:e3:
ea:9f:f9:cd:0e:0a:17:c9:5d:c7:51:29:b3:82:08:
88:0e:e2:f1:d0:6d:f3:10:cf:2d:31:8c:34:56:5f:
0f:85:75:61:f9:d9:c8:d2:f3:f5:70:ba:81:25:fa:
1a:0a:69:fe:59:99:eb:7f:1f:0b:b4:c1:5c:42:f1:
c7:a8:e6:41:80:6e:e7:00:91:b6:6e:4d:55:31:60:
78:4c:9b:73:05:c8:05:65:25:ff:09:c8:9a:49:69:
89:e0:28:bf:57:1c:51:3a:47:7f:88:d8:e4:80:68:
d9:24:03:ed:52:a2:81:3f:bc:c4:19:34:34:71:81:
9b:21:00:a7:69:0e:4a:16:d5:7e:e4:aa:73:08:0e:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:37:E3:C8:37:FC:A4:9A:17:B7:98:AD:55:3A:53:66:8A:C3:DA:88
X509v3 Authority Key Identifier:
keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:85:96:e2:d9:9f:83:d3:d2:16:c6:0c:4c:b2:5f:2e:04:
47:45:c7:ec:4e:0b:f9:55:cc:7a:1e:d1:e3:87:01:5d:d6:b2:
be:4f:0a:34:f6:49:dd:ae:87:d1:2f:f1:1a:aa:db:5c:99:17:
b8:9d:a1:e5:0a:98:2b:8f:f8:15:77:01:e6:4b:aa:ac:ca:71:
b5:97:34:f5:3b:73:f1:e6:e4:88:b8:e3:44:ec:02:d1:72:53:
87:9a:a9:71:d3:6e:b4:1a:7e:10:3b:ed:c9:fd:a3:ff:a8:ff:
85:51:c5:f5:dc:59:fd:56:02:94:49:6b:c1:63:9c:6e:29:4a:
b0:46:b7:dd:10:d5:9a:19:26:15:c6:56:5e:53:6d:24:d7:93:
24:75:05:1c:37:17:0a:49:75:af:88:51:de:57:f3:7e:73:e0:
26:fc:f6:be:f4:a1:25:f2:f6:1d:79:f6:94:31:ed:e4:3f:e9:
85:e7:c6:ed:05:3e:25:4e:52:1b:68:1a:fd:4e:f0:37:42:d4:
d4:70:3d:d3:47:56:fb:d4:48:fd:5f:b4:62:1f:11:2d:e0:51:
9a:59:bf:f1:e9:5b:c9:79:91:6f:61:b4:aa:1f:8b:c0:c7:d5:
1b:b6:e4:2a:bb:5c:60:b7:66:1f:b7:de:ad:e7:f5:20:18:94:
01:53:6b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:27:51 2025 by rpki-client