This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
File: TySfPU9SKVXadOhT4AXndAZ6Oaw.mft (raw, json)
Hash identifier: dv0miwYKFeByC3Ys5njDBmAQATTnBhpNx5DwJSW+Uhg=
Subject key identifier: BE:73:95:38:21:D3:05:24:20:DB:2B:05:75:62:3C:E7:59:EE:F4:75
Authority key identifier: 4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
Certificate issuer: /CN=A919F06A/serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Certificate serial: 0785
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
Manifest number: 0785
Signing time: Thu 04 Dec 2025 20:29:26 +0000
Manifest this update: Thu 04 Dec 2025 20:29:25 +0000
Manifest next update: Thu 11 Dec 2025 20:29:25 +0000
Files and hashes: 1: TySfPU9SKVXadOhT4AXndAZ6Oaw.crl (hash: hlgm18N+9V+YkyIPWq0DFPz0IdGQpVNxsM2ZcTrHWKg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1925 (0x785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F06A, serialNumber=4F249F3D4F522955DA74E853E005E774067A39AC
Validity
Not Before: Dec 4 20:29:25 2025 GMT
Not After : Dec 11 20:29:25 2025 GMT
Subject: CN=6931ef25-be13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:b4:3c:e7:f8:83:c6:9f:05:b6:d5:69:89:
94:cf:90:0f:28:68:0b:e7:79:3b:52:15:84:ac:18:
8c:e1:e3:c9:04:f5:59:80:d5:4e:a2:9c:67:2a:db:
4c:30:86:15:e6:91:15:e4:f4:56:b4:43:1f:52:9c:
63:cd:12:c8:01:cd:40:c0:e9:63:09:36:b2:4e:95:
2c:30:8a:af:bb:d9:9d:9b:7f:95:82:bc:4e:cb:07:
91:2e:8f:58:f2:55:be:71:ae:75:26:f3:c4:e2:fa:
1b:fb:65:b3:3a:bf:e3:68:4f:c5:8b:64:c0:23:e0:
84:6a:b0:0c:eb:9d:16:00:15:98:9f:18:56:cb:cf:
bb:01:c4:cd:83:aa:e1:4a:05:a3:e3:fb:14:f3:7b:
f2:52:de:4c:b6:4d:6a:ec:e4:56:c2:86:c7:cd:54:
d5:4c:12:b4:dd:bf:0c:8d:2b:31:32:f7:91:e7:03:
f1:0a:d9:5b:5e:a4:83:ca:95:c1:ea:fa:35:da:2f:
6e:7a:43:e6:6f:33:b7:f7:27:fb:8c:41:26:50:d5:
69:e2:92:00:f3:c3:85:71:74:30:46:cb:3a:b5:9e:
47:24:22:6d:e3:31:c7:19:e0:af:44:91:84:d7:10:
cf:99:be:e9:88:cd:fc:06:1b:46:81:72:2c:ed:ca:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:73:95:38:21:D3:05:24:20:DB:2B:05:75:62:3C:E7:59:EE:F4:75
X509v3 Authority Key Identifier:
keyid:4F:24:9F:3D:4F:52:29:55:DA:74:E8:53:E0:05:E7:74:06:7A:39:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TySfPU9SKVXadOhT4AXndAZ6Oaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F06A/FCF27AC633A411EBAC54852EC4F9AE02/TySfPU9SKVXadOhT4AXndAZ6Oaw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:a7:34:76:d1:95:f1:f8:6e:98:59:06:06:9c:4a:d0:14:52:
c1:0d:7e:6c:3d:84:5c:c7:84:54:62:37:a2:ff:0b:56:46:3f:
7a:d4:e7:ad:f1:18:bc:19:36:a2:59:67:79:20:c8:96:0e:9d:
f3:2a:26:48:d5:28:73:83:cc:79:46:b6:dc:19:52:b9:a2:85:
1a:ae:48:8f:5f:52:7d:76:31:cf:d7:74:83:52:3e:bb:ca:39:
3d:2d:d5:16:56:e0:61:e3:d7:9f:d7:63:42:92:4a:f4:8c:44:
60:b2:13:e7:42:09:7d:9b:35:ba:95:1e:68:f8:3e:05:26:0c:
43:80:49:a8:90:05:11:67:36:f6:86:18:9e:cf:62:35:fd:d6:
de:6a:86:aa:78:d5:1a:ee:a7:2d:fa:4b:0c:2f:d4:80:cf:6d:
e8:e5:9f:27:a4:d8:57:05:99:b4:ad:23:03:af:d6:4b:3f:1c:
06:ca:1d:1d:09:2c:b2:c8:9f:77:36:3e:6b:f3:05:b3:35:7b:
d6:a3:2b:d8:4a:3f:00:36:b6:18:50:e4:ba:02:42:b5:3a:d0:
67:17:a6:9b:88:96:71:9f:02:94:32:32:87:e3:d2:70:8c:44:
19:55:17:91:3e:65:a6:c7:6e:5e:86:26:36:cc:60:b1:81:5d:
6b:36:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:28:38 2025 by rpki-client