This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json)
Hash identifier: SGilv1bX6QKC0Sa7jzRRFD3yWVJThYqDy/7TIDsTnS0=
Subject key identifier: 69:40:9C:8C:FD:DF:54:72:40:2A:B0:B7:94:46:7A:3D:C4:94:B7:21
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial: 074C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
Manifest number: 073E
Signing time: Sat 20 Dec 2025 21:04:17 +0000
Manifest this update: Sat 20 Dec 2025 21:04:17 +0000
Manifest next update: Sat 27 Dec 2025 21:04:17 +0000
Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 7RF4QkhQQRQ62cgcFj6ujTYt52Dxo4DmOvUS3oENXSI=)
2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=)
3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1868 (0x74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Validity
Not Before: Dec 20 21:04:17 2025 GMT
Not After : Dec 27 21:04:17 2025 GMT
Subject: CN=69470f51-a661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:02:29:61:d8:a6:3f:e0:ac:6e:e3:30:49:
58:3b:29:c4:09:e6:7a:d6:e4:4c:a2:50:68:07:56:
14:e9:f8:3d:de:1d:1c:1a:33:ac:0a:cd:00:dc:67:
35:e5:aa:86:8d:18:69:f9:e8:a4:9f:16:3c:47:b3:
c2:28:b6:5b:bc:ce:81:50:f0:67:a5:2f:b1:1b:fc:
69:80:d6:a6:b1:cb:6e:cd:61:eb:33:8c:81:0f:7d:
a1:7d:02:ff:b0:40:db:5c:ed:8f:0c:9f:d6:60:94:
58:12:13:7d:6a:fd:44:99:a4:da:72:e5:62:a2:8e:
68:cd:d9:12:cb:65:81:26:66:fd:43:14:00:45:50:
3f:d6:81:89:a2:e6:d2:6f:5b:53:75:3a:4f:58:6f:
fd:7d:2e:e8:62:c7:1b:ee:40:68:e5:de:ea:64:ca:
98:c1:01:3f:4b:dc:9d:5c:63:88:9d:4f:f5:42:96:
19:25:49:a3:3d:b4:08:90:f0:11:33:ca:c6:31:dc:
bc:96:98:85:28:0f:31:a1:50:c4:a5:d1:a1:43:20:
98:48:70:d4:59:32:fb:4a:35:2d:5a:ce:a5:8e:2a:
c9:12:b6:9b:9c:05:14:8e:ee:4b:ff:36:8e:32:b0:
54:6b:91:b3:0b:1f:b9:b6:ce:07:2c:18:51:90:99:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:40:9C:8C:FD:DF:54:72:40:2A:B0:B7:94:46:7A:3D:C4:94:B7:21
X509v3 Authority Key Identifier:
keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:4d:89:a4:84:10:7c:1c:fd:ee:7b:99:00:28:ce:90:34:
b9:7d:90:24:65:1c:14:ee:bc:8a:e7:16:75:45:37:10:28:70:
9e:29:1a:08:02:27:ce:cd:d4:08:20:fe:99:74:40:e7:2c:bb:
33:87:e1:46:ae:c4:1d:b3:fd:72:99:b4:19:da:5b:20:bc:e3:
91:53:8d:77:cc:6a:9a:c4:74:70:44:f6:df:48:3b:26:4c:9d:
c4:27:9e:d7:ff:23:fb:1c:75:52:0a:d6:62:db:21:58:e4:b4:
7d:44:2f:36:01:cb:74:84:31:6e:4a:cc:14:60:3d:4b:a3:73:
82:53:b7:0a:d3:e6:52:12:93:fa:57:15:d9:83:31:df:41:f1:
02:d0:a9:d1:cc:b2:ce:9a:d0:0a:16:8a:41:e4:1b:a7:53:54:
af:f2:3e:49:3b:a4:54:6c:75:fd:63:e3:2a:17:a5:2e:03:2e:
36:a2:b2:d9:a9:74:fa:03:bf:e2:13:42:60:36:2b:c8:be:bc:
00:9f:94:5a:ad:b5:ea:86:56:82:3b:42:a5:8b:73:8e:58:f1:
32:f3:b3:b4:af:ea:96:a8:dd:13:96:eb:a1:e1:bc:52:b2:f2:
24:fd:bf:05:0d:52:06:bf:a5:90:f1:bb:f9:44:67:f8:9c:ec:
9e:d0:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:38:51 2025 by rpki-client