This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
File: pWcIHaZpXdN7LCsbF6Abo95ZHss.mft (raw, json)
Hash identifier: lBkzp7tCzzI1mS+lZjCSrNXW/owP6njKFnlZd/Wzx14=
Subject key identifier: D7:3A:69:FE:CD:5A:C7:BE:83:40:7E:75:EE:C7:39:A6:09:8F:E1:37
Authority key identifier: A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
Certificate issuer: /CN=A91A284E/serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Certificate serial: 07E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
Manifest number: 07E1
Signing time: Thu 18 Dec 2025 20:40:19 +0000
Manifest this update: Thu 18 Dec 2025 20:40:18 +0000
Manifest next update: Thu 25 Dec 2025 20:40:18 +0000
Files and hashes: 1: pWcIHaZpXdN7LCsbF6Abo95ZHss.crl (hash: sCn3kZnI8moR/EStXWPpIhtsybKF3QFt+n4KYMCiUhs=)
2: A3205106142511EB8FED0427C4F9AE02.roa (hash: TqVDmXTOpWhB7LjPM5fEs8JCov1/4rLFhY6xqhp627c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2023 (0x7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A284E, serialNumber=A567081DA6695DD37B2C2B1B17A01BA3DE591ECB
Validity
Not Before: Dec 18 20:40:18 2025 GMT
Not After : Dec 25 20:40:18 2025 GMT
Subject: CN=694466b2-d3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:44:b7:dd:68:dc:8a:2c:7e:a4:01:e4:de:
3d:ce:8c:55:b5:c4:25:f9:c4:f3:a6:8f:64:d2:f1:
e5:91:f7:53:86:7e:50:4c:f2:7b:65:d3:fd:2f:dc:
df:09:87:d7:3a:63:52:df:ab:dc:a2:d1:b5:72:10:
8a:36:53:5b:95:6f:45:66:29:34:6a:58:e8:c1:23:
0e:3d:75:1b:06:7d:dc:8d:12:4b:51:5b:33:9f:65:
49:7e:f3:d8:ae:1e:94:f8:e8:e9:a0:9d:3a:20:2c:
e3:35:16:35:06:c6:16:d2:89:6c:7d:b2:bd:02:48:
73:bd:8a:10:5d:e5:06:65:81:59:05:bd:84:87:1e:
fd:67:7c:97:65:64:29:9a:14:11:c2:f0:00:51:19:
2c:41:9c:9a:69:bd:2a:bd:3e:02:0d:95:b8:fd:25:
a9:30:38:3d:b3:44:22:31:66:59:a4:5f:48:9d:44:
9c:d8:c1:a0:02:0b:73:49:be:8f:e4:73:ab:d0:be:
50:27:53:25:92:33:7e:62:7b:90:ce:ab:c4:0a:cc:
37:3f:08:b8:80:e6:2b:dd:64:af:a3:0f:b7:48:bc:
b6:7c:96:d7:d5:56:72:59:86:38:ed:82:0d:c9:7e:
9f:c0:ce:89:93:19:5b:e3:59:41:01:34:c1:7e:0a:
85:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3A:69:FE:CD:5A:C7:BE:83:40:7E:75:EE:C7:39:A6:09:8F:E1:37
X509v3 Authority Key Identifier:
keyid:A5:67:08:1D:A6:69:5D:D3:7B:2C:2B:1B:17:A0:1B:A3:DE:59:1E:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWcIHaZpXdN7LCsbF6Abo95ZHss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A284E/E905DCB0142311EB9FC4C224C4F9AE02/pWcIHaZpXdN7LCsbF6Abo95ZHss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:bd:96:5e:c4:ad:2d:22:ea:04:9b:34:67:85:c0:43:ba:
e0:b1:44:29:2c:7c:cf:ec:f4:26:5b:26:8c:99:93:c8:60:c0:
b1:08:35:32:e7:5b:fa:16:98:f1:8d:30:79:18:a2:51:15:33:
32:53:b0:7a:67:73:a0:0f:d4:01:ad:c2:f7:39:99:97:ff:64:
7e:69:23:34:1f:12:5d:40:18:e3:30:df:f5:3d:58:f6:3e:aa:
9b:b5:51:47:3a:77:fb:27:b4:39:91:ba:e9:57:29:ed:f0:1b:
ee:0a:95:51:7d:9f:2b:f6:6f:5f:2c:da:8b:5a:f4:dc:91:78:
d0:c2:ac:66:50:d3:af:e3:7a:63:7f:e1:58:55:46:35:12:b4:
5b:cb:e4:a5:b1:0b:ec:80:38:75:4a:ad:d8:73:ba:70:52:79:
7c:57:fd:66:e5:22:72:3c:94:77:0c:cf:29:5d:ce:4c:ea:a1:
cf:5e:fb:24:fe:e9:22:81:e3:ec:6c:d3:88:64:a4:7a:d8:14:
ff:53:9d:63:cb:86:c7:1c:26:8a:14:a2:79:0b:1c:86:51:ed:
97:3d:56:5c:f9:b5:21:a0:38:db:db:85:21:0f:c8:45:21:ec:
fd:3e:9f:0f:af:eb:9a:5f:eb:eb:c0:38:b6:a6:c1:a4:e0:6f:
ed:2d:15:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:48:00 2025 by rpki-client