This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json)
Hash identifier: rpdyJQefexXIwjKT+W5tLdbU0tAIpCZWzNW4z+IuZAs=
Subject key identifier: 7E:88:71:46:31:A3:49:7D:54:E1:AA:EF:F7:F6:E6:FA:33:5B:26:7A
Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03
Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
Certificate serial: 08A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
Manifest number: 0894
Signing time: Thu 18 Dec 2025 20:04:23 +0000
Manifest this update: Thu 18 Dec 2025 20:04:22 +0000
Manifest next update: Thu 25 Dec 2025 20:04:22 +0000
Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: 9wEazNekyDBRcplSu0IAYPHRmzvc1voraiPsJxUGSsQ=)
2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl
rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2210 (0x8a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503
Validity
Not Before: Dec 18 20:04:22 2025 GMT
Not After : Dec 25 20:04:22 2025 GMT
Subject: CN=69445e47-91f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6d:c3:0a:f8:40:bd:f6:db:5b:92:92:0a:35:
d9:6c:ca:86:a8:99:94:dd:53:78:e8:0e:b5:bf:ec:
a5:f5:7c:3e:c1:96:d1:fd:2f:a8:ec:5e:21:c5:86:
07:35:f3:6f:05:d3:7d:67:b1:49:a2:3f:d4:07:37:
c4:a1:d2:ec:99:f7:93:c8:56:05:95:64:64:56:2e:
07:5a:6d:80:3b:12:b8:3c:7f:84:7f:89:38:a9:29:
89:dd:06:fe:6c:8e:fa:f7:19:35:a2:3b:56:d2:8f:
52:61:61:d6:10:81:5a:50:13:d7:0f:ad:97:a9:07:
8a:7c:ec:13:79:6a:b1:dc:ad:b8:c3:4f:66:4b:fb:
c9:07:f9:80:7a:43:2e:d5:a1:a3:21:7a:61:04:a6:
03:3b:10:f3:8c:7e:6e:f6:bb:9a:60:7b:0c:a0:2c:
46:a2:f9:17:06:fd:6a:34:78:5a:23:46:67:b9:90:
ba:7b:ca:02:7f:de:b6:c2:e1:47:a2:4b:27:2b:48:
a4:25:8a:85:b7:53:f6:8d:97:02:3f:08:08:00:48:
59:d4:39:04:52:d1:30:be:4d:f1:79:6b:43:53:ed:
77:84:e6:cd:c0:76:be:40:c5:29:12:02:c2:d1:04:
89:1b:dd:af:7d:e0:9d:ac:e6:31:0d:a1:74:63:de:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:71:46:31:A3:49:7D:54:E1:AA:EF:F7:F6:E6:FA:33:5B:26:7A
X509v3 Authority Key Identifier:
keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:9c:ed:22:3e:11:dd:94:dd:98:d8:8f:56:d3:70:57:72:
46:2e:b5:5f:75:de:5e:bb:3f:80:20:95:c4:01:04:9f:ba:ae:
5f:5f:a9:b3:b9:63:5b:5b:15:b7:fa:2d:b3:4a:36:60:51:a9:
00:90:64:ce:e0:3b:c4:cf:3a:ce:e8:2c:8d:a8:80:72:d1:4d:
cf:b0:bf:c4:ef:d4:f3:c4:b1:f8:ce:fe:33:a7:4c:36:b0:a0:
68:4b:2a:89:a9:1c:d7:f0:5d:b3:87:52:4a:d2:c1:9b:b2:dd:
36:2d:ad:e3:57:a4:96:25:2d:cd:4a:8d:93:93:49:fc:65:98:
90:82:73:75:86:76:b0:ab:f5:aa:23:ac:f2:cf:e3:bd:e4:52:
a8:bd:61:14:84:d7:17:c2:05:09:c5:4d:37:4a:51:bd:01:68:
bb:d5:06:d5:e2:71:e5:78:03:a4:01:93:e5:c5:18:08:c7:7f:
47:94:f4:40:6b:de:c7:d1:6f:a1:aa:d2:4f:7f:e6:aa:77:f8:
45:d6:d9:73:aa:d4:c1:37:63:3d:0b:3c:ae:70:ce:0d:38:db:
10:1f:b6:48:2a:9a:8f:7d:7c:a1:75:cb:df:e1:aa:d0:e1:4b:
0a:ef:5e:78:00:78:83:ca:f6:98:6d:3c:50:4f:f9:b2:3a:be:
c7:b0:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:40 2025 by rpki-client