This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json)
Hash identifier: ajdDWuw/JFYHjgHZozI3s8gVzPp34B/7chZHp/t/kVw=
Subject key identifier: 06:52:41:93:09:00:14:F8:0C:07:82:66:A0:E7:86:D6:48:14:59:37
Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Certificate serial: 1CCF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
Manifest number: 1C7A
Signing time: Sat 20 Dec 2025 16:02:07 +0000
Manifest this update: Sat 20 Dec 2025 16:02:07 +0000
Manifest next update: Sat 27 Dec 2025 16:02:07 +0000
Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: eXI49IXw8e/plpy/9djmtxkq6wYUz6cfZDxjn9N1YFo=)
2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: jFhmcGLcWRMJb2NQjPMrP9b0nQzmycMaQ535WZNL3p0=)
3: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: T9+Dc0WSoJhtGdsfkrH1jqSLtL2q8TNFDLOAk1Ci3QY=)
4: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: uUULoxpQYQYmKQJvZhToS8NEpAyyIoYOFguK8s9wAW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7375 (0x1ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B
Validity
Not Before: Dec 20 16:02:07 2025 GMT
Not After : Dec 27 16:02:07 2025 GMT
Subject: CN=6946c87f-a9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:05:a4:d1:f7:3f:4b:07:c0:d5:7b:d4:7a:
58:8e:a3:f8:7d:b2:db:43:0a:48:0d:5b:5d:fd:f0:
77:97:c2:16:70:7b:e4:15:b2:ad:71:07:40:56:6b:
a7:34:e9:29:47:8c:47:eb:dd:43:09:66:c9:99:fa:
d0:9c:d0:7d:9c:0b:7b:83:26:5f:83:f7:b4:b9:c2:
1f:95:35:80:93:ca:71:f4:e6:3f:e3:6d:cd:97:61:
32:f3:17:64:0e:35:a5:94:8c:60:71:45:ce:c6:9f:
fb:30:21:9f:a4:a7:00:af:ea:56:d9:0d:b9:45:40:
63:28:6f:ba:5e:ec:88:b2:3c:b7:27:ec:f7:21:3d:
9c:d1:10:e7:a1:80:06:ae:20:b5:16:ee:6e:61:2d:
e8:2d:aa:d2:e9:2b:78:55:42:c5:3c:4e:c4:3f:0a:
ba:86:cb:da:a3:e8:30:44:82:2f:d5:4c:15:20:a2:
28:4a:f0:9b:af:98:43:4c:fe:ed:76:14:8e:fa:a3:
8b:67:ae:0d:21:a1:cd:44:c4:22:3a:d5:be:d1:a4:
8e:67:3b:f6:a1:6c:3b:2a:af:2f:bc:c1:55:34:dc:
1c:ed:bb:45:0b:7d:97:bf:49:51:48:ca:58:cb:71:
b4:06:fd:e5:3b:7b:fa:29:d4:93:97:3e:41:11:ec:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:52:41:93:09:00:14:F8:0C:07:82:66:A0:E7:86:D6:48:14:59:37
X509v3 Authority Key Identifier:
keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:f9:74:3e:03:e1:ed:6c:77:d7:3d:f9:f1:55:82:b4:f5:d6:
56:a2:d5:6e:de:b6:43:a0:24:c5:bc:21:4c:9e:53:7f:c8:1a:
3d:1b:ed:5a:3c:cf:4b:a6:43:59:46:b1:63:5f:f6:ea:af:8b:
5e:3d:0d:93:90:df:20:2e:75:38:76:e1:ab:85:19:9e:bc:23:
21:07:e1:c2:1f:65:ff:3e:e6:76:3d:e8:16:c1:72:a6:c2:59:
c0:08:9b:cc:35:b5:d6:91:66:af:e9:e4:77:a0:ca:93:58:da:
ed:20:b0:4a:26:66:47:5c:cd:c0:b1:e7:b6:b7:d2:e2:c8:c8:
90:1c:07:31:ed:47:9f:e1:00:bd:07:11:3d:d5:50:8b:9b:80:
b5:8b:f5:90:89:0a:74:92:93:61:25:30:d1:09:a0:e4:1e:97:
45:25:98:0a:b9:6d:03:48:cd:d4:97:84:e3:48:f6:f9:90:b8:
64:d0:0e:0b:4f:14:b9:8b:e3:2e:de:7a:7b:f9:54:a3:e2:b1:
93:ce:1b:e7:41:5a:31:7e:7b:8d:59:ef:a0:43:11:13:8c:5c:
3e:1e:9a:73:40:91:0b:1a:ed:dc:03:13:6a:32:29:d8:38:2e:
9e:45:97:99:e4:fd:80:57:06:4b:eb:59:01:3a:6d:9f:d6:40:
2c:10:33:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:46:14 2025 by rpki-client