This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
File: 339FFA93357FAF26142829FABF225AEAE41737F0.mft (raw, json)
Hash identifier: cRU/6sAqrxB8akfoi3WAnFSWSepGv89xihdRgqoy/aQ=
Subject key identifier: 7F:63:D9:C8:30:43:F7:1F:3A:3A:92:CE:DA:42:75:2B:50:8E:2C:CB
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Certificate issuer: /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial: 0C1CFBE9597627536C32C04E8D956451028FCFFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
Manifest number: 0217
Signing time: Sun 07 Dec 2025 03:15:19 +0000
Manifest this update: Sun 07 Dec 2025 03:10:19 +0000
Manifest next update: Mon 08 Dec 2025 05:31:19 +0000
Files and hashes: 1: 339FFA93357FAF26142829FABF225AEAE41737F0.crl (hash: Q4Pv2cM+rPbBBFTenevJLW2Xr5ikIpKrRVB89/bAFZY=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 05:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1c:fb:e9:59:76:27:53:6c:32:c0:4e:8d:95:64:51:02:8f:cf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Validity
Not Before: Dec 7 03:10:19 2025 GMT
Not After : Dec 8 05:31:19 2025 GMT
Subject: CN=7F63D9C83043F71F3A3A92CEDA42752B508E2CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:80:64:8b:1a:24:bf:89:9a:4b:6d:c9:1e:
a6:30:86:fc:da:46:cc:79:64:f7:09:fa:50:12:c0:
aa:30:27:54:6f:2e:ef:fa:e6:e9:c2:f8:7b:d9:b5:
57:74:b8:86:2e:b0:c2:61:af:1a:f3:55:9a:fe:1c:
6b:d9:19:d9:a4:83:2c:27:9b:7f:85:8e:08:2d:e6:
d7:78:7d:dd:8d:e2:66:26:f5:d9:b1:5a:00:7e:33:
7d:c5:94:71:4a:b2:cf:bf:dd:3f:d0:ad:7a:91:d1:
95:9f:3c:cd:6b:05:b4:16:87:b2:47:74:85:bc:cb:
c1:72:a4:7d:d7:6a:2c:dd:9b:9e:63:e2:6a:03:37:
6b:8e:5a:19:8a:a3:6a:03:5a:49:86:2f:1a:65:a6:
79:78:0b:9d:d0:f7:3f:ba:67:43:8a:0b:5a:dd:d8:
5b:52:3f:6c:a0:e7:a9:ef:96:07:7a:ce:34:cb:b7:
be:8d:c0:0f:90:6a:c5:d4:79:97:9e:f6:0a:17:cf:
62:ca:e4:fa:c3:43:c9:45:e2:7c:25:a2:7e:b7:49:
df:99:cc:f4:5f:e4:a7:7c:fe:de:09:9a:ec:5e:cf:
bb:09:ab:81:33:49:21:fd:e7:4f:d4:c9:a2:b8:c2:
e8:a8:42:0e:b4:ba:cf:a4:14:14:a6:de:f3:db:5b:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:D9:C8:30:43:F7:1F:3A:3A:92:CE:DA:42:75:2B:50:8E:2C:CB
X509v3 Authority Key Identifier:
keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:45:a0:a7:ed:eb:d9:2d:97:89:18:2f:7b:a0:ec:39:2d:b5:
db:54:3c:8f:89:dc:f6:bf:26:09:9f:4d:a6:b3:9b:59:97:aa:
98:3e:84:c4:cb:34:a3:a3:ae:47:78:ed:6b:cf:6b:3a:ad:0d:
27:82:41:b2:20:3c:79:32:a2:4d:a1:16:5a:4d:1b:aa:4a:99:
1f:69:05:35:e8:6c:db:8b:ad:4f:dd:a0:b5:70:b2:87:6f:7d:
a0:ac:5b:e3:cf:05:35:2b:17:4b:da:9d:46:66:d1:6d:7d:e5:
3e:84:e3:35:c2:8b:59:83:43:2b:32:a8:e7:f9:58:f0:9f:93:
34:a6:f0:6b:6b:e3:25:e1:6e:e4:db:30:fa:94:f7:a8:5d:f9:
93:88:43:98:fb:27:17:49:f4:1c:66:87:02:a1:f9:b1:17:e8:
1f:e3:5f:b3:2c:4e:30:ff:3b:d5:e4:e3:34:3e:99:ef:fb:92:
ba:87:9f:18:95:9b:f6:57:4c:fb:80:13:5c:ee:fd:1c:cf:9e:
b9:d4:13:25:54:32:66:46:79:e7:c8:fa:53:41:c3:fd:2a:5c:
2e:ad:70:81:7d:3f:23:39:1b:3f:b0:5e:a6:3e:91:a4:66:4e:
72:7f:a6:6e:c6:9c:65:c0:69:95:73:e5:39:bb:63:eb:f1:47:
b9:d4:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:24:45 2025 by rpki-client