This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
File: MdxLbDLXteXzqGAXOIWmRfT8AVI.mft (raw, json)
Hash identifier: yP4Q9d0x6MdQd8i0ORsA8lRj6I7hwhWbofedXawke+M=
Subject key identifier: 35:8D:BE:8D:3E:BF:64:3B:8F:67:CD:B7:F8:F6:29:60:BA:35:DE:7D
Authority key identifier: 31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
Certificate issuer: /CN=A91567D5/serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Certificate serial: 010E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
Manifest number: 0325
Signing time: Fri 19 Dec 2025 01:29:35 +0000
Manifest this update: Fri 19 Dec 2025 01:29:35 +0000
Manifest next update: Fri 26 Dec 2025 01:29:35 +0000
Files and hashes: 1: MdxLbDLXteXzqGAXOIWmRfT8AVI.crl (hash: QF1Udej78uAg2qem5Tqpw5Y3Dwyj1PeCvy66ft3bJ7o=)
2: C47523F0509D11EFA81FC32AC4F9AE02.roa (hash: d1kPy/eiI5YE+DwwaFZQ8lzq73y437eEPrtNiOguvKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91567D5, serialNumber=31DC4B6C32D7B5E5F3A860173885A645F4FC0152
Validity
Not Before: Dec 19 01:29:35 2025 GMT
Not After : Dec 26 01:29:35 2025 GMT
Subject: CN=6944aa7f-df50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:ca:f4:f9:d7:a9:f9:53:04:80:b1:12:1d:
7b:9a:8d:b2:9b:44:9a:13:62:e0:49:5f:98:3f:63:
29:7b:1e:9b:c3:fe:2f:bd:44:9b:02:fc:a6:85:64:
7e:14:c7:4d:e9:2c:77:6c:72:9b:c1:6f:85:61:b4:
cc:5c:03:b0:21:20:64:e3:42:0b:d3:a5:e3:5c:b1:
70:d7:fc:00:cc:45:50:fd:11:80:90:92:a0:ae:c5:
ed:d1:ff:93:94:8c:46:a8:6e:62:ea:10:22:c7:ed:
84:d1:1b:39:f6:07:af:5c:dc:33:0b:0e:88:df:94:
f9:c0:ed:9d:49:49:18:c2:e5:cc:f0:8b:b3:eb:c1:
0a:96:4b:b0:9c:05:89:67:5d:2e:9d:66:c2:be:0b:
a5:4f:71:64:22:b4:69:aa:cb:40:6a:19:d4:17:92:
9b:a8:6b:9e:a5:5e:49:2a:f6:88:18:1e:d6:07:6a:
39:6c:04:37:0d:08:90:45:2a:e8:2d:a5:d9:e8:ed:
12:d7:95:71:dd:15:e7:da:89:f7:31:20:03:af:a1:
14:12:00:0d:f6:76:39:e2:5c:80:9f:42:d7:cf:26:
cb:ef:eb:a1:bd:cd:68:75:fc:89:cd:37:e3:c8:fc:
10:ad:da:21:62:69:a9:f1:82:33:cf:3d:d8:91:80:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8D:BE:8D:3E:BF:64:3B:8F:67:CD:B7:F8:F6:29:60:BA:35:DE:7D
X509v3 Authority Key Identifier:
keyid:31:DC:4B:6C:32:D7:B5:E5:F3:A8:60:17:38:85:A6:45:F4:FC:01:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MdxLbDLXteXzqGAXOIWmRfT8AVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/MdxLbDLXteXzqGAXOIWmRfT8AVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:6e:72:53:c6:8b:e8:4b:f9:a0:b2:bb:44:d0:15:b7:b1:c7:
74:1b:09:f6:c2:d8:68:03:6e:65:f4:0d:98:7c:b0:e5:40:60:
bb:08:11:96:13:ec:b5:3f:52:03:43:86:5e:b8:06:4b:69:55:
a9:13:83:a0:9c:44:f1:8f:fc:41:23:cd:98:e8:3b:27:c9:43:
93:06:76:5b:eb:d5:5a:fe:f7:55:81:a4:93:4f:cc:fc:d3:81:
b4:78:36:9e:7e:a4:f9:cd:5c:81:2a:90:fb:4b:65:eb:8f:88:
4e:b3:67:3d:cf:72:1b:5c:f8:6d:d2:26:e7:88:7d:02:13:a4:
b3:9f:23:2c:93:b7:1d:25:60:2d:85:a1:dc:77:bf:a6:47:d4:
7e:f4:91:d3:2d:59:e6:3f:e4:5e:c8:c8:0d:2e:aa:3a:3f:bb:
d2:b3:de:e5:2d:c1:2e:07:3a:bb:48:1c:13:87:ee:a2:d3:4c:
b1:1e:1a:2d:00:56:5b:a3:c1:0f:1f:81:04:6b:65:31:5c:ee:
7b:f9:d9:13:2e:5b:d4:bd:ef:5e:0f:1e:68:d1:66:2f:41:6e:
24:75:44:05:22:9c:2f:57:0f:78:58:fa:a9:6c:25:f1:ac:3d:
19:1a:46:45:30:9a:53:c4:b5:52:9b:0a:96:41:58:72:48:e6:
05:96:55:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:34 2025 by rpki-client