This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json)
Hash identifier: mykWmIahdVori6cRze0oRbbc8EuMiayxMDyNcKGQjHo=
Subject key identifier: 35:68:AD:B6:65:BA:BE:5C:8B:CF:21:C1:14:88:51:DE:BD:F0:F4:08
Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
Manifest number: 06D4
Signing time: Sat 20 Dec 2025 21:24:41 +0000
Manifest this update: Sat 20 Dec 2025 21:24:40 +0000
Manifest next update: Sat 27 Dec 2025 21:24:40 +0000
Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: dYWKbjJevStj0Pr4htMyBfppPzTds0e0vV1cGNdrmGI=)
2: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: Hr3eqEAtIPRi0Gbgk6nGIIh7VqbumXAU2t+2EOfBUjg=)
3: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: nOK4DMRRD7EMHW1vygJSaZC/Q2N8Vn6fopdd1X9izD0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Validity
Not Before: Dec 20 21:24:40 2025 GMT
Not After : Dec 27 21:24:40 2025 GMT
Subject: CN=69471419-c8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:e9:84:1a:d0:ed:ef:30:68:69:9b:f8:63:
0a:a3:d4:fd:62:6b:d8:12:2a:8a:43:30:80:e2:3d:
bf:b0:24:33:6e:0a:cd:4d:11:b5:a1:1f:e9:bb:9b:
3b:9a:89:b2:99:42:ee:13:8d:e3:fa:11:6f:a9:a4:
3b:f1:cd:7f:fe:ac:9c:0f:8d:bc:eb:79:3d:46:12:
4f:e0:0c:5b:c3:3a:55:68:06:05:73:bd:f4:b2:3b:
56:bb:7c:96:03:77:be:39:07:0d:a0:3e:0e:b8:21:
0c:ca:fe:07:1f:ec:4b:6b:2e:c3:d5:96:cf:dc:55:
45:4f:a0:c0:96:20:a7:d7:8f:bd:c9:a2:06:38:1b:
15:3d:d8:80:d4:4d:17:2b:38:eb:af:ad:7e:34:8e:
9c:46:60:33:97:1f:b3:7e:97:da:85:0a:b3:16:13:
84:97:39:b5:90:45:2c:7b:b1:c8:a8:f5:83:9d:22:
df:65:64:7c:b3:33:08:f1:fb:53:1c:b7:1f:8d:da:
c2:77:26:f8:b7:4c:ad:39:a7:7d:dd:7d:46:73:3a:
79:56:f2:41:a7:c7:9a:82:46:c6:60:e5:a9:59:8c:
7c:c4:ed:dd:1e:03:bb:a5:f6:22:69:49:6f:21:bd:
65:27:12:79:fe:39:f1:12:81:24:03:13:8a:72:49:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:AD:B6:65:BA:BE:5C:8B:CF:21:C1:14:88:51:DE:BD:F0:F4:08
X509v3 Authority Key Identifier:
keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ae:86:97:c3:45:61:91:c2:de:2b:1d:83:2f:9f:5b:75:87:
8c:d4:85:70:76:81:f2:85:bf:54:fb:9c:c4:72:c8:bd:bc:b8:
78:b8:8e:b8:c0:3f:53:24:1b:d3:65:7e:cd:5a:94:1a:89:d3:
d9:a3:02:72:30:51:40:63:5a:cc:ea:62:30:8e:98:0a:26:9f:
ad:05:2f:b7:9f:23:07:77:76:07:5c:77:26:a7:45:d8:25:8d:
5b:bf:62:7d:34:b6:54:88:d7:32:1a:d6:1f:1e:9c:d2:d9:2b:
58:27:0f:52:51:67:b0:f6:5c:ca:35:96:eb:84:f6:11:2e:f4:
61:d9:ba:6e:2d:4d:2d:eb:97:0d:b3:c1:67:59:e4:00:10:fe:
62:93:bd:1d:fa:e1:51:8d:f2:a0:ff:98:c0:26:a9:87:38:e7:
ad:6a:52:f0:c2:93:54:54:7a:3f:5d:aa:73:81:87:6a:0a:46:
42:1f:12:03:47:fa:29:48:83:80:12:03:dc:82:ab:01:03:bd:
c0:2b:b5:cd:8d:c5:66:c7:d5:cb:7f:c4:6d:89:5a:86:41:c9:
b1:e7:2d:dd:ad:ec:62:c1:f1:4b:6a:1f:13:40:49:eb:1f:17:
0e:c9:94:9f:96:e2:85:90:a5:65:fc:c8:26:db:11:32:a9:ff:
f5:3b:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:58:09 2025 by rpki-client