This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
File: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft (raw, json)
Hash identifier: DYbDW6Yg6kJWlZs303cqqm3TWhOPRNvzsOXnGjVdmhg=
Subject key identifier: A3:09:98:B3:5F:EA:39:1A:20:5E:E4:E3:8D:AD:98:E6:CF:19:4F:80
Authority key identifier: 06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
Certificate issuer: /CN=A919AFBE/serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
Manifest number: 11
Signing time: Fri 05 Dec 2025 05:45:03 +0000
Manifest this update: Fri 05 Dec 2025 05:45:02 +0000
Manifest next update: Fri 12 Dec 2025 05:45:02 +0000
Files and hashes: 1: Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl (hash: 8VITDMVllHZGDmcA+MyI3fqZ9Ay0UHj0wZ7hnuCXbe8=)
2: 4F172076BA1F11F08DD0CE3CC4F9AE02.roa (hash: 2SVHk8cIQzgO3XRGu4uq00WRCc3uLMHlAw81vpBUV8U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=062D313B099AE86B3F4FE2E20BB45F8E86536273
Validity
Not Before: Dec 5 05:45:02 2025 GMT
Not After : Dec 12 05:45:02 2025 GMT
Subject: CN=6932715e-3731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:2d:c6:6a:56:46:8f:24:04:63:19:c8:a8:
36:25:c0:76:2f:d1:8f:34:6e:23:52:8f:98:68:5e:
fe:a8:fc:36:78:a2:64:00:a2:08:b9:30:1d:7d:6a:
11:7b:31:7f:58:11:a3:20:06:bf:27:0c:9b:a3:01:
10:12:1d:b5:44:60:96:1e:86:64:74:f1:23:39:f7:
59:66:97:7b:ba:5b:b7:dc:2a:39:73:63:44:0e:5e:
11:de:7b:65:66:e0:f9:9c:ab:01:dc:10:40:9d:a8:
85:12:6b:4e:25:8e:41:85:e3:a6:2c:c1:b7:f7:40:
4b:90:26:56:be:b9:96:56:02:15:02:fc:9d:54:0f:
da:cf:bf:3a:7b:2e:da:b0:ea:c8:9a:7c:3e:75:63:
a9:c3:7a:0f:f4:4b:fc:12:b5:6a:3e:16:12:1f:b8:
6e:1d:24:39:53:10:c7:28:a6:32:dd:d7:4c:ef:70:
06:9a:c5:c0:17:00:31:89:60:9a:8e:a8:71:14:3f:
70:69:1f:87:95:bf:02:aa:ba:5f:b7:ef:7b:1a:fa:
5e:8c:d0:c8:90:07:e8:2a:7b:b9:b4:1e:7a:5b:93:
31:41:4b:1a:8b:41:d6:7b:8d:55:9b:94:a6:89:ee:
2e:f2:27:b7:13:d5:bb:19:6c:65:6d:91:79:59:81:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:98:B3:5F:EA:39:1A:20:5E:E4:E3:8D:AD:98:E6:CF:19:4F:80
X509v3 Authority Key Identifier:
keyid:06:2D:31:3B:09:9A:E8:6B:3F:4F:E2:E2:0B:B4:5F:8E:86:53:62:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/BA018DB4BA1E11F0B987393BC4F9AE02/Bi0xOwma6Gs_T-LiC7RfjoZTYnM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:c5:1f:f0:96:0f:ad:c4:0f:bb:40:8f:b0:9f:7a:b7:96:6d:
f7:82:42:3d:8b:c8:75:f0:85:6a:9a:f6:61:ec:0f:7f:27:b0:
8d:0a:f5:e3:2a:6e:5b:1e:ca:0e:ba:a9:71:65:03:aa:b9:5b:
69:2f:97:6c:be:4c:cd:77:bc:b0:f7:36:57:f2:27:fc:c0:3f:
cf:15:c0:b4:b4:7a:b2:ce:9e:43:7d:2b:d3:19:a9:81:d1:93:
ed:28:73:17:ba:13:55:88:a0:6b:03:7d:4d:91:13:d3:d7:58:
9e:03:32:88:f3:68:41:dd:98:65:19:b5:3a:c6:6d:a0:05:7e:
72:76:af:18:27:69:8a:11:06:e8:d0:80:cc:8f:db:32:2f:ef:
ea:cc:d0:55:96:ec:33:d9:91:f4:72:f8:c3:60:a2:92:86:32:
c3:1c:bc:3c:90:d8:a8:8e:d9:c6:36:af:e9:4d:35:b5:b0:6b:
1c:7d:7d:80:26:c8:cc:83:4e:b4:46:d5:f1:98:84:1e:ca:f6:
17:aa:62:92:b3:aa:79:6e:2a:a2:67:81:76:3e:dc:b7:90:94:
8a:49:e6:65:de:9a:f3:0e:0b:04:e0:5e:db:2c:6e:46:e6:29:
28:13:eb:f2:2f:a4:05:e9:74:bc:6f:6b:3e:3e:52:e0:29:9b:
4c:f9:6f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:29:25 2025 by rpki-client