This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier: n08Vk2ImE9rmvKSun8Rv84yxAebDznZ8vuw69P5AExo=
Subject key identifier: 4C:48:8B:B0:92:40:50:C7:A0:DD:E6:57:97:33:48:07:B5:CA:84:F6
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 2398
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number: 236A
Signing time: Tue 16 Dec 2025 15:47:40 +0000
Manifest this update: Tue 16 Dec 2025 15:47:39 +0000
Manifest next update: Tue 23 Dec 2025 15:47:39 +0000
Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: F8kA/MqyxhoM/Bp714v2Rwi2KPFsNk2pJvJDATn0Bkg=)
2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=)
3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 15:47:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9112 (0x2398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Dec 16 15:47:39 2025 GMT
Not After : Dec 23 15:47:39 2025 GMT
Subject: CN=69417f1c-3b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:cb:bd:7b:ab:01:29:88:74:ef:57:d5:2b:
05:39:a3:e3:a9:96:4f:25:37:83:67:a8:6d:8b:22:
d5:2c:ae:62:ea:7d:f9:7d:06:d8:39:5f:20:5e:c8:
7d:2a:47:09:9a:69:a2:b0:b9:86:8a:58:58:db:58:
18:24:15:c7:c8:a1:9e:94:38:b0:19:ea:df:23:c4:
39:3a:9a:e6:0d:4a:60:bc:9a:77:03:5b:c2:7b:fb:
ba:c3:4b:c2:e1:37:93:47:49:70:26:73:2a:5f:76:
54:6d:ef:35:59:34:a7:cb:78:85:45:b8:89:0c:2c:
c6:3f:af:3a:26:b1:8e:0a:87:38:ba:26:1c:1b:c6:
f0:fd:f3:ba:fa:66:93:c3:4d:5d:73:40:ad:67:77:
36:e0:29:7e:dc:68:b2:5c:1d:0e:8c:bb:8b:52:ba:
c9:9f:ea:be:a4:59:3c:10:de:56:06:98:66:74:ea:
48:e9:c7:31:72:31:79:0f:d3:f3:85:46:ea:5a:16:
ca:00:fc:d9:ed:8e:1a:54:31:30:fe:b2:65:fb:0d:
a2:b0:36:93:ac:2a:15:f3:08:9a:14:d9:5e:a1:06:
92:df:db:b1:ff:5a:f3:bd:92:d1:0a:51:35:4d:0e:
f8:c4:c2:41:89:4e:9b:9b:b5:04:95:98:94:13:21:
1e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:8B:B0:92:40:50:C7:A0:DD:E6:57:97:33:48:07:B5:CA:84:F6
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:15:a9:69:2e:6a:ff:be:72:91:1c:6a:03:74:9f:5e:5c:1f:
b5:76:18:f5:fe:55:41:b8:08:df:6e:9e:5a:cf:40:e6:6d:e4:
4f:b6:13:89:55:4c:9e:64:d5:03:42:ed:40:27:10:a0:ab:d1:
d8:0a:5c:2f:51:1d:3c:2f:db:7a:fb:9a:3f:78:88:ba:cd:f3:
5b:72:df:0d:4f:9c:fe:6d:96:d9:bb:ee:2d:0c:9d:6f:91:11:
84:fa:21:37:2b:72:58:ac:0a:41:52:13:4a:8f:28:13:ff:e4:
1b:eb:7d:9e:fb:5c:98:d3:69:8f:85:3a:21:c2:3b:09:fe:f9:
0e:bb:f7:85:5f:89:ce:1d:3d:5a:78:c0:c7:0c:ed:66:f0:2e:
a3:f8:3d:31:6a:c3:b5:24:8d:69:62:97:06:2b:3f:6b:c2:83:
c2:58:cf:48:20:e0:12:c6:5e:0a:25:55:da:a8:9b:be:b4:ff:
97:dc:c1:a6:2f:ee:77:5e:38:c8:3d:1c:34:d3:c3:f6:da:b6:
57:85:2b:e6:a9:50:b8:ec:85:5a:41:fb:60:a6:e0:cc:c8:ae:
84:54:99:5e:5f:6b:6f:f9:5d:a8:15:68:ee:f6:38:a5:fa:74:
f4:8c:29:d3:9d:b1:70:c6:ad:34:9b:37:c4:59:d9:a8:5b:df:
35:e0:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 04:58:59 2025 by rpki-client