This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
File: iR7Yuqwsc70TrcqhoWqvANIkqHc.mft (raw, json)
Hash identifier: dKvHkvWN6xQDwry0LN61AHvIb/EzXFTxKAzv7KYPIms=
Subject key identifier: 9B:28:42:BB:75:7E:8D:B4:F8:05:29:08:DB:96:DB:37:92:97:1A:E1
Authority key identifier: 89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
Certificate issuer: /CN=A91394E7/serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Certificate serial: D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
Manifest number: CC
Signing time: Fri 19 Dec 2025 04:57:22 +0000
Manifest this update: Fri 19 Dec 2025 04:57:22 +0000
Manifest next update: Fri 26 Dec 2025 04:57:22 +0000
Files and hashes: 1: iR7Yuqwsc70TrcqhoWqvANIkqHc.crl (hash: qe700jTwR/LbQr6HzxRsBWPRG94O00Cqf9yjLjMrYgs=)
2: F7078BC4B73511EF8537DE81C4F9AE02.roa (hash: dHwTXNF7nxQj+usP14EJUs8ePEKM62O1dTyVaEZxO3I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208 (0xd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91394E7, serialNumber=891ED8BAAC2C73BD13ADCAA1A16AAF00D224A877
Validity
Not Before: Dec 19 04:57:22 2025 GMT
Not After : Dec 26 04:57:22 2025 GMT
Subject: CN=6944db32-0ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:96:8a:4c:37:8b:ec:bd:4f:0d:0c:b5:40:
e1:78:fe:02:e8:6e:41:e7:61:64:4c:6d:df:b8:cd:
5d:31:19:24:31:01:a2:ae:87:b4:cc:92:a9:6c:21:
72:d4:07:c9:87:03:fe:57:33:c8:5f:c4:8a:a3:61:
de:7c:60:73:f0:34:73:89:8c:2d:09:7d:f0:bb:4b:
65:bc:46:65:e9:3a:a8:10:07:41:5f:1b:37:d1:aa:
b5:7a:6c:bb:1a:e7:5b:27:1a:e2:d3:e2:0b:20:eb:
9a:6d:22:6d:d9:c9:8f:b9:1b:86:e3:40:ca:0c:30:
61:9c:e3:67:0d:a0:6f:6a:83:f2:e0:7a:3e:6f:0d:
dc:05:f5:d8:5f:fb:ac:27:b3:35:7f:fa:a7:29:32:
ee:cb:00:08:39:96:13:41:23:6b:07:75:3c:d7:8d:
4f:bc:ff:e3:12:8a:38:74:42:c7:18:01:70:45:d2:
00:62:ef:1d:f3:88:0a:31:3d:c0:bf:1b:5f:88:db:
f7:e3:6c:8b:19:ea:ff:29:64:17:be:b3:0b:25:9f:
67:f7:44:91:72:a7:cf:af:f8:e3:ba:c4:6e:30:f8:
2c:e1:b1:03:23:75:97:99:c7:12:d4:9b:ff:0b:7f:
31:01:1f:a8:79:49:4a:c2:47:04:7a:a1:1f:9d:58:
99:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:28:42:BB:75:7E:8D:B4:F8:05:29:08:DB:96:DB:37:92:97:1A:E1
X509v3 Authority Key Identifier:
keyid:89:1E:D8:BA:AC:2C:73:BD:13:AD:CA:A1:A1:6A:AF:00:D2:24:A8:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iR7Yuqwsc70TrcqhoWqvANIkqHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91394E7/F4CFD1DAAC7311EF87FC554CC4F9AE02/iR7Yuqwsc70TrcqhoWqvANIkqHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:68:8f:8c:2e:1c:64:ac:09:18:59:15:ed:59:9c:9d:6b:c2:
de:b6:67:69:91:6a:c2:e4:6e:54:99:91:5e:12:fe:f1:a5:a8:
24:60:61:13:4e:33:d9:98:32:21:b5:5e:90:4b:87:fa:3d:c0:
54:c4:dc:ad:92:bf:9c:c6:75:53:97:f0:50:bc:23:a2:42:c9:
87:ee:a6:62:7c:8a:8d:57:78:04:51:51:fa:d4:78:75:2d:12:
05:1a:ed:90:3f:25:11:31:f5:98:c7:a6:01:cd:2d:4f:82:03:
57:6d:9b:e8:fa:ea:92:54:77:1c:f0:46:57:2f:62:5c:92:4a:
e0:4d:4c:9f:02:40:3f:ad:46:5e:fe:51:41:11:70:2a:3f:f9:
54:a7:00:0a:12:88:b3:f9:4b:38:a1:61:f0:cc:ff:a5:18:7c:
cc:77:62:76:c0:d9:2d:7d:e5:84:6a:d0:3a:9b:73:a1:28:72:
a5:9e:7b:48:cc:5d:32:bd:5d:c0:6e:1a:a7:2f:65:ba:0c:fc:
50:5c:ca:e0:06:2a:29:58:da:ab:54:a8:8a:90:77:85:a8:c2:
f5:9c:68:d1:3e:c7:82:5f:58:e3:e1:ec:33:6b:f7:e5:43:06:
ac:33:7f:62:0d:19:db:a8:d7:c1:2e:46:35:62:e9:d0:dc:f1:
79:68:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:49:43 2025 by rpki-client