This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier: M8dg5hhSkgEREQm+4VjEzya9GHdjW78MgMw3LMKsjsM=
Subject key identifier: D4:3C:55:7E:FA:81:E6:34:E9:3B:34:59:B6:54:57:A9:7A:FF:F8:D0
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial: 01A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number: 019F
Signing time: Mon 29 Dec 2025 02:28:59 +0000
Manifest this update: Mon 29 Dec 2025 02:28:58 +0000
Manifest next update: Mon 05 Jan 2026 02:28:58 +0000
Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: Og0NG11U3C0NPOlNhFebQSeBeFPHamolgBKDCnlPuOw=)
2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 02:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418 (0x1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Validity
Not Before: Dec 29 02:28:58 2025 GMT
Not After : Jan 5 02:28:58 2026 GMT
Subject: CN=6951e76b-00bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:5e:f1:28:b3:e7:97:a3:b0:99:94:6b:61:
25:45:3f:04:f2:0d:d0:87:7b:cd:24:4b:be:27:e6:
81:51:fd:90:e3:c3:01:8c:3d:2d:89:77:84:27:fa:
d9:b6:52:15:81:47:04:7d:13:12:de:f0:db:85:8b:
02:47:0a:a3:b6:7d:d0:28:6b:13:26:d3:c9:ca:78:
77:cc:f5:06:40:b3:8a:d9:9f:b0:7e:7c:14:70:85:
6a:cb:aa:b8:a6:25:6c:6c:c3:6f:1a:72:19:01:62:
68:e8:2d:61:d9:0b:c7:a0:b6:32:38:96:76:d6:46:
a8:b8:dc:fd:9d:18:08:e4:ec:ca:ca:23:b6:b3:8a:
1e:70:86:f6:a0:db:76:bb:1a:1b:c2:10:00:1d:c4:
f9:7b:3a:1f:8f:dc:1c:55:d2:aa:18:81:30:9a:02:
6e:ec:c3:4a:92:bc:1c:c7:b6:17:00:0e:5f:e4:4b:
fe:b4:91:41:7e:f7:48:7a:11:12:d9:f2:25:5a:92:
d1:08:70:b1:20:55:58:2a:ea:79:12:65:53:35:60:
c2:bd:5b:c5:59:93:ce:d3:15:5d:91:03:4e:5f:af:
3b:81:fe:33:fd:44:52:d3:c2:93:8a:80:04:06:93:
91:0b:60:64:68:2e:37:c5:51:77:7b:cd:03:b0:16:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3C:55:7E:FA:81:E6:34:E9:3B:34:59:B6:54:57:A9:7A:FF:F8:D0
X509v3 Authority Key Identifier:
keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:e3:2e:ac:9f:cb:c6:c1:c6:ad:67:9b:55:eb:4c:a6:dd:
75:d1:37:39:a8:ae:40:27:a2:e3:e8:63:6f:b1:de:cd:c7:c6:
89:df:0c:b1:47:8e:9b:cf:36:b8:f1:47:02:ad:e9:91:25:88:
d2:78:b8:63:c9:74:4d:63:04:37:82:b4:cc:8d:d1:7c:94:25:
fd:76:3c:ab:b8:ef:3f:d8:36:b0:c8:2e:c5:15:b0:4f:d7:1a:
d8:5a:ad:86:18:f2:74:0d:13:2a:0e:c3:d8:49:c0:b7:2f:8c:
2c:5a:eb:f3:d5:80:fb:17:2d:7e:b1:ed:c4:4e:fc:1b:1a:3b:
4d:18:f1:70:47:9a:dd:9b:c7:5d:70:04:c6:21:03:ed:e6:a0:
b8:45:45:7e:2a:89:cc:d9:a1:65:ff:e0:d6:da:ce:43:d7:c4:
a3:37:bd:b1:c9:27:45:a2:52:3e:e9:90:43:38:0b:64:4c:59:
b0:cd:ea:ba:23:ef:6d:c4:81:51:0a:28:f8:80:e9:2d:a0:fc:
95:da:fc:48:e2:f3:32:ce:fc:cf:c9:f0:b1:48:9e:e2:b0:c6:
d2:72:07:91:d3:9c:43:9c:29:d6:1c:9d:8a:e9:23:f3:e5:ec:
5e:3f:5e:ac:5d:93:24:c6:cd:4b:e9:57:ac:c8:bb:09:e5:4d:
f0:6c:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:49:56 2025 by rpki-client