This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
File: C71wWJDyeOHVk-mKdPA0cPeU_lw.mft (raw, json)
Hash identifier: DsSENAoE3IB1f0xUgk46ObroYwchx+LLWeF/LGdmJCY=
Subject key identifier: 3C:7C:08:63:87:E9:5B:9D:7C:A4:4B:44:6A:47:99:D7:2B:5D:21:8D
Authority key identifier: 0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
Certificate issuer: /CN=A91A5E1F/serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Certificate serial: 0B1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
Manifest number: 0B0C
Signing time: Thu 18 Dec 2025 19:00:13 +0000
Manifest this update: Thu 18 Dec 2025 19:00:13 +0000
Manifest next update: Thu 25 Dec 2025 19:00:13 +0000
Files and hashes: 1: C71wWJDyeOHVk-mKdPA0cPeU_lw.crl (hash: W3jzBtsQJKYG2hDj4ttX74iP1sOURsgD6VsywE54RxM=)
2: FF723568A0F311EBA4E4D83CC4F9AE02.roa (hash: mPyJyn/hNgsJM5dLLqcQiKjGiDQ28uU6I1BenfIYNic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2843 (0xb1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5E1F, serialNumber=0BBD705890F278E1D593E98A74F03470F794FE5C
Validity
Not Before: Dec 18 19:00:13 2025 GMT
Not After : Dec 25 19:00:13 2025 GMT
Subject: CN=69444f3d-90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:cf:6b:9d:8d:40:bf:8c:81:0a:21:f0:9d:
43:ba:87:24:be:5a:25:d7:15:fe:eb:90:b0:9d:b3:
c5:8a:bb:77:7c:bc:43:68:4e:e3:e3:37:1c:16:f0:
91:14:2a:3a:54:13:e4:df:65:e4:df:ee:94:17:4d:
6e:09:a7:de:66:3e:e2:d8:ff:51:ea:cc:24:d6:2c:
29:3d:06:de:24:49:05:e3:57:da:ae:0c:90:ba:5f:
31:c1:49:67:fd:90:7d:db:99:2a:da:38:24:7e:9e:
d7:74:72:ae:8e:16:a8:a8:1f:6d:4c:fd:92:58:9f:
5f:ff:61:ea:61:ce:50:fa:c0:0c:8e:5f:b5:21:31:
c3:a9:8d:a7:fb:b4:00:69:39:c1:8c:15:6c:e8:58:
68:5e:eb:43:b2:94:09:00:91:a7:40:b7:7b:72:15:
7a:50:e7:a4:7a:44:c3:8f:f5:f3:7f:26:b1:26:a3:
b0:9c:df:d2:7f:e4:bd:68:6a:78:03:01:4d:c1:cf:
69:54:09:64:85:db:60:f6:5c:05:fc:46:a5:6d:bf:
38:80:6f:42:96:32:4f:90:20:39:16:3d:70:d4:ac:
85:dc:bb:69:0e:be:11:5d:1e:9c:47:08:6c:f6:36:
77:6c:19:f5:6c:99:6f:bc:7e:8f:ce:c8:3b:39:dc:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:08:63:87:E9:5B:9D:7C:A4:4B:44:6A:47:99:D7:2B:5D:21:8D
X509v3 Authority Key Identifier:
keyid:0B:BD:70:58:90:F2:78:E1:D5:93:E9:8A:74:F0:34:70:F7:94:FE:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C71wWJDyeOHVk-mKdPA0cPeU_lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5E1F/01F7D6CA586211EA814D8459C4F9AE02/C71wWJDyeOHVk-mKdPA0cPeU_lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bf:db:4a:36:c4:af:52:69:14:57:d9:b1:42:2b:ed:95:22:
a7:82:94:2c:3c:47:85:30:60:53:ab:cd:35:f1:e0:a9:5d:db:
af:a0:b1:42:a5:cf:a7:e4:3e:b2:c7:1d:06:9f:92:b4:11:97:
64:ea:8e:cd:1d:fa:3e:d9:66:d7:bb:66:cc:85:3d:e9:d8:b5:
9d:a3:30:33:2a:2c:14:8e:96:4f:7d:19:3d:04:23:89:1b:14:
a0:7a:1e:d6:9f:11:2c:ce:72:10:90:f0:10:d2:b7:34:64:61:
e0:d6:b9:e8:0e:09:21:fe:99:aa:e0:c1:62:ef:ca:0b:78:b3:
62:61:26:21:45:1b:17:c5:0e:f2:83:72:90:8f:07:56:ec:01:
8a:70:aa:04:f0:09:2d:f5:ba:36:b0:2f:15:82:19:b4:76:57:
b3:5d:f5:9a:4c:c7:14:58:ac:f0:9a:59:ec:db:60:f6:65:44:
6c:2c:d8:0d:32:83:2d:fd:47:11:59:ac:c6:65:bd:b1:6a:11:
a6:0c:25:f9:1f:1d:1a:98:c0:f9:75:6e:57:54:75:5c:b9:64:
b4:f2:50:9b:f9:9c:d4:36:a0:1f:cc:a6:03:38:4a:d9:8a:8c:
7f:04:84:2b:03:5a:d1:09:2d:c9:77:1a:8d:a0:c5:e1:ba:47:
44:93:de:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:41 2025 by rpki-client