This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
File: MviQDThWvkOnLWx_k-kEtbg8w00.mft (raw, json)
Hash identifier: TEwWSUQ2ThyRQ4Sjz++8m80mJSoImLcv6k8MMrxI6kU=
Subject key identifier: 85:CB:88:3E:42:29:92:66:09:08:6E:B8:28:44:FF:87:3A:75:C6:35
Authority key identifier: 32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
Certificate issuer: /CN=A9199371/serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Certificate serial: 04FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
Manifest number: 04F7
Signing time: Thu 04 Dec 2025 22:16:27 +0000
Manifest this update: Thu 04 Dec 2025 22:16:27 +0000
Manifest next update: Thu 11 Dec 2025 22:16:27 +0000
Files and hashes: 1: MviQDThWvkOnLWx_k-kEtbg8w00.crl (hash: 58UOAjFG0QzF5eCvH3QdnsrqyWZTpuDy/xudL/l2g0g=)
2: 5FC6CEFC38BF11EC9BA51E52C4F9AE02.roa (hash: O5o2WM89g2GajktjirO4l7am93YdomSAoRe9/bA2z6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1277 (0x4fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199371, serialNumber=32F8900D3856BE43A72D6C7F93E904B5B83CC34D
Validity
Not Before: Dec 4 22:16:27 2025 GMT
Not After : Dec 11 22:16:27 2025 GMT
Subject: CN=6932083b-dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:cc:5c:63:90:1b:82:81:a4:46:6f:b2:ed:
a6:8f:61:97:cc:c1:b7:0a:96:1a:7e:55:49:92:69:
81:3a:7d:c9:68:7f:70:b3:a0:2b:b1:20:60:32:b1:
34:e0:e7:93:c1:26:e8:41:5f:47:26:a9:d0:52:0e:
32:07:d0:0d:3d:07:a2:24:59:23:b4:80:9e:66:c9:
0f:d5:6a:1f:5c:3d:77:b0:b8:5a:d5:3d:d8:2d:47:
56:e3:81:1c:e5:a2:07:56:b2:11:56:59:94:8f:77:
74:fc:0b:61:c5:f8:a6:46:6a:2b:b8:a6:38:f2:2d:
db:75:be:02:7f:19:83:6b:33:a8:e4:8f:01:84:cd:
39:a5:8b:94:3b:d4:29:66:57:82:88:4a:d5:e1:1c:
57:64:5e:79:63:92:5f:19:02:90:9b:f3:ac:bb:32:
d5:5d:75:72:60:fd:e2:8f:eb:16:70:c9:8b:96:56:
12:96:24:8b:38:33:03:3c:5f:37:38:5a:56:cb:44:
df:2c:75:2f:dd:fb:d7:04:ae:03:4f:0f:e0:58:0b:
5b:59:d8:97:22:4a:7c:db:0a:4d:62:9c:92:92:33:
cf:9a:d2:75:53:36:44:65:0c:1a:28:1c:9f:ac:51:
e8:02:2a:29:a2:3a:41:6a:68:30:df:e3:33:06:76:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CB:88:3E:42:29:92:66:09:08:6E:B8:28:44:FF:87:3A:75:C6:35
X509v3 Authority Key Identifier:
keyid:32:F8:90:0D:38:56:BE:43:A7:2D:6C:7F:93:E9:04:B5:B8:3C:C3:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MviQDThWvkOnLWx_k-kEtbg8w00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199371/36FEE7EA38BD11EC9DD4EB50C4F9AE02/MviQDThWvkOnLWx_k-kEtbg8w00.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ab:82:c3:1d:71:f9:bf:1b:d7:3d:c2:d6:1c:c9:74:0e:4c:
aa:6b:ba:52:ec:04:f1:92:69:51:e0:5f:74:d3:1d:34:e1:f8:
55:d7:e7:a6:e9:8d:97:b5:12:6b:34:f5:65:e2:d0:0d:a5:bc:
34:0b:09:e0:09:94:ff:60:00:24:f5:dc:a6:f4:e5:1a:1c:88:
3f:27:62:6c:73:b2:5b:9b:b0:ff:0a:19:a3:22:86:43:9e:b7:
22:7e:da:9a:fe:ee:c4:45:30:9e:48:1f:1c:ce:b5:bf:d6:0d:
93:57:34:43:af:1a:75:f8:5a:0f:a3:f1:55:40:9d:a8:34:ae:
9e:56:8a:df:59:f0:30:ea:6a:37:8d:41:8e:ec:07:0b:d1:36:
39:41:f8:0f:58:1e:71:a5:34:1f:4c:0c:93:c3:b7:d7:08:fe:
05:59:3b:7d:f3:c7:1e:ce:f8:53:95:93:fb:32:0a:e0:da:ca:
fd:3b:b3:a8:7f:15:77:83:3f:31:b5:24:5a:8b:92:f9:4c:58:
e5:09:df:80:7f:79:11:93:e4:25:21:50:bf:4b:b6:6d:1d:9a:
b9:bc:ed:6c:2d:3e:cb:f8:b5:be:61:6c:d9:c1:96:16:63:4f:
96:09:ac:4c:e7:20:23:47:dd:f1:5c:6b:35:c2:62:a0:ed:e6:
df:d4:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:55:45 2025 by rpki-client