This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
File: -APDcY8OgSDUPrA0gJ9qiziE15s.mft (raw, json)
Hash identifier: okre/5l6+iiw4LxlqvsNGV3Vhl1jLIz35cD7WDfnotY=
Subject key identifier: 31:46:59:A3:16:4C:E7:AB:88:BA:E8:AB:C7:D8:93:66:D9:3B:CB:CD
Authority key identifier: F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
Certificate issuer: /CN=A91A36B8/serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Certificate serial: 029D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
Manifest number: 0298
Signing time: Fri 19 Dec 2025 00:45:03 +0000
Manifest this update: Fri 19 Dec 2025 00:45:02 +0000
Manifest next update: Fri 26 Dec 2025 00:45:02 +0000
Files and hashes: 1: -APDcY8OgSDUPrA0gJ9qiziE15s.crl (hash: YBsMugh+vBifYYpy2LGOjAcOllqWJ1Fa4OIjUUqgzpo=)
2: 0C04EFB43C9811EDB6A25D4FC4F9AE02.roa (hash: qFfisBxRiCqfGUur/S/I0P4ucD2aKemCvw2qjb/eV4k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669 (0x29d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A36B8, serialNumber=F803C3718F0E8120D43EB034809F6A8B3884D79B
Validity
Not Before: Dec 19 00:45:02 2025 GMT
Not After : Dec 26 00:45:02 2025 GMT
Subject: CN=6944a00e-31a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:bc:28:4c:b9:68:b9:eb:5a:1d:58:00:1c:
74:60:c9:74:28:da:98:34:0c:74:4c:59:6b:b6:bc:
86:2c:1a:04:ab:b8:91:06:f0:4a:16:19:8d:4c:5c:
e4:03:48:e1:3b:9a:47:13:41:34:d4:85:00:c5:8d:
43:d4:71:74:ac:34:06:67:a1:b9:0b:ad:aa:03:79:
7c:87:66:40:85:bb:8f:f8:7d:54:be:af:aa:0d:ea:
c8:e6:ae:54:c8:b0:7d:26:d5:4b:0b:5d:71:23:4b:
c3:37:c8:d5:f3:5c:ba:c0:ff:5c:26:a4:08:d4:d8:
8b:49:c5:8d:b2:ad:d5:75:09:c1:47:57:6a:96:bb:
70:da:f3:0d:10:44:9f:89:17:40:40:6b:dd:ed:44:
9b:76:9a:69:85:bf:8e:d7:6f:77:b7:c0:04:fb:94:
62:6c:55:c2:8f:65:11:9a:04:d4:4e:b9:85:6b:8d:
2f:1f:86:ee:d8:86:d8:01:ef:0f:c7:b0:69:7b:6d:
f0:bc:ef:76:5d:7b:cd:39:6a:17:d7:55:19:d4:f2:
20:80:22:42:6a:04:86:e1:f3:cf:2f:e2:d8:05:ff:
42:6d:e3:5b:8c:b4:37:cd:ba:44:fd:ca:3c:5d:e8:
89:66:b1:11:6b:54:bd:f0:69:eb:f1:c0:04:7f:7b:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:59:A3:16:4C:E7:AB:88:BA:E8:AB:C7:D8:93:66:D9:3B:CB:CD
X509v3 Authority Key Identifier:
keyid:F8:03:C3:71:8F:0E:81:20:D4:3E:B0:34:80:9F:6A:8B:38:84:D7:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-APDcY8OgSDUPrA0gJ9qiziE15s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A36B8/388413182A6311EDA127203FC4F9AE02/-APDcY8OgSDUPrA0gJ9qiziE15s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a3:3b:13:1e:ba:ea:66:dc:63:bd:ef:0e:98:70:93:c9:2d:
0b:77:ac:0f:ea:9c:12:f3:d4:42:68:9a:a7:d5:4b:c8:96:58:
25:07:74:7b:0b:c6:57:1f:d2:87:d1:86:52:fa:61:c1:5f:36:
85:12:ab:a0:f3:0d:bf:aa:ab:3a:e2:89:45:3b:1f:14:46:a9:
57:35:d4:fb:c3:2a:89:43:27:a9:79:64:b6:85:39:d3:e5:cf:
ab:13:48:91:b1:4e:13:6c:ba:2f:90:33:5b:0f:0d:3a:b3:ee:
2c:3c:59:e4:78:02:db:68:65:40:eb:42:31:a8:05:5b:cd:7b:
0c:30:77:95:3a:0f:91:90:a4:0f:4c:9d:2d:51:da:e5:1a:9a:
4d:2c:ce:3b:e6:74:a4:60:c5:ef:72:ff:17:74:18:b6:79:c4:
7a:28:e1:0e:b0:9d:3c:71:67:df:54:88:ba:80:09:e9:87:d5:
c3:69:e7:f1:8a:0e:af:93:bb:d9:48:b4:04:e5:96:6d:7a:5f:
92:a4:75:bc:cf:d6:dd:d4:99:bb:ec:74:21:64:65:9c:4c:2e:
34:49:a2:52:87:e2:92:19:bd:4b:61:f7:ee:63:79:5b:79:38:
4b:fd:a2:e0:65:6b:97:12:b7:03:97:ff:94:e1:de:75:50:4d:
47:96:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:57 2025 by rpki-client