This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
File: aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft (raw, json)
Hash identifier: NX5/ezXyF7T2hCEIxF+qwc0YHyJG9hCl7eNWdTAgDTM=
Subject key identifier: F0:8C:2B:E1:19:4D:B5:B6:68:E5:42:56:D2:CA:1A:5F:0D:03:E7:C6
Authority key identifier: 68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
Certificate issuer: /CN=A91549ED/serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
Manifest number: 0802
Signing time: Wed 24 Dec 2025 20:26:39 +0000
Manifest this update: Wed 24 Dec 2025 20:26:38 +0000
Manifest next update: Wed 31 Dec 2025 20:26:38 +0000
Files and hashes: 1: aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl (hash: Ow4rbgfiLjrvptKuJlRugfzkWYz7bxk/VxEvyOsgKj0=)
2: 89B3D06E0F9111EBA9B90727C4F9AE02.roa (hash: nNeDg/wlklIxGFoighizLl95GENL1V1dEvF0FUrVfns=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 20:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91549ED, serialNumber=688BB0595F595B711E02450ACEE3B26C113B792F
Validity
Not Before: Dec 24 20:26:38 2025 GMT
Not After : Dec 31 20:26:38 2025 GMT
Subject: CN=694c4c7e-08cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:e8:23:87:91:0f:59:e9:08:23:52:c2:44:
17:a7:de:11:e7:83:87:4d:91:08:19:77:ce:a1:f3:
48:8f:58:aa:69:64:8a:73:8f:fb:59:d0:52:c2:9e:
2e:a0:c1:c1:51:8d:d6:24:66:d8:71:8a:a5:a4:4c:
7e:c8:51:ac:f8:98:f7:d9:1a:13:ba:59:db:02:b7:
2c:da:1f:d9:10:9a:2b:9d:b8:02:d6:75:f4:cb:09:
d0:f0:39:24:35:4a:4e:62:dc:38:d0:cc:66:eb:8f:
19:28:89:04:17:7c:51:c6:e6:d8:da:b0:cf:bb:bd:
59:14:64:ca:e6:16:26:24:99:bb:fb:a3:aa:8a:2e:
45:fa:b7:7b:04:9b:39:32:84:5c:0d:4b:44:f0:f7:
9e:27:c7:87:37:b5:06:d9:c2:c7:84:5d:8c:3e:96:
f0:14:1d:73:dc:a8:88:09:f9:cc:50:d6:ad:42:d7:
84:a8:34:0b:5d:27:7b:91:a2:31:ad:e4:8c:bb:45:
bd:52:8d:60:b9:d8:79:fa:ea:66:32:de:f1:a2:a1:
1a:55:9b:ba:1b:fe:43:b9:cc:ca:c4:4c:56:30:4e:
75:cb:47:d4:52:62:d4:2f:35:9c:a5:95:fc:8c:bc:
c6:ad:f3:78:9f:c4:04:a4:6c:20:2a:f4:80:02:54:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8C:2B:E1:19:4D:B5:B6:68:E5:42:56:D2:CA:1A:5F:0D:03:E7:C6
X509v3 Authority Key Identifier:
keyid:68:8B:B0:59:5F:59:5B:71:1E:02:45:0A:CE:E3:B2:6C:11:3B:79:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIuwWV9ZW3EeAkUKzuOybBE7eS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549ED/B7714B96091811EB95FA2737C4F9AE02/aIuwWV9ZW3EeAkUKzuOybBE7eS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:18:17:21:f5:c7:c6:4d:da:18:15:6e:c4:ee:00:34:a2:c7:
2e:2e:39:34:a9:0d:da:9d:0b:e1:27:3a:7a:24:54:9c:c7:fe:
fe:3e:50:db:93:1b:d6:92:93:fe:fc:09:7d:e2:cf:08:4e:c3:
50:db:d2:e2:98:8c:8b:12:2a:e9:45:f2:91:63:87:6a:c3:c6:
0f:01:8b:3a:39:a5:2c:e2:a4:4a:4f:88:c0:91:b8:57:25:fe:
f2:f6:46:10:1c:72:5a:c5:4b:d4:b4:ac:4e:2c:0a:8a:29:78:
83:01:a8:cc:c7:90:9b:7e:a6:59:b9:87:54:19:1e:52:63:3a:
71:22:16:f8:72:0b:e7:be:a3:e4:b1:94:02:e8:a6:85:dc:6e:
f7:c8:bf:27:af:ab:ac:c2:5a:1f:17:c5:1c:dc:0a:10:7c:7a:
71:dc:8a:e4:8b:e3:2a:15:b5:25:c2:1a:25:1c:04:0f:2a:fb:
b1:ee:3a:dc:f6:e3:20:8f:77:f2:4c:b5:35:6b:42:06:a0:04:
b6:7b:21:d9:4a:7a:7c:5c:6b:51:16:be:c6:5e:01:f9:c7:e5:
98:92:27:3d:36:8d:55:49:de:57:8e:bf:ec:cc:a0:b1:10:41:
9c:f5:b0:9a:e7:f7:10:c3:e4:9f:a1:ef:75:a8:9b:81:71:9d:
28:c1:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:14:41 2025 by rpki-client