This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
File: saGMIGd1j-jJIZgeixH6MI5iaTs.mft (raw, json)
Hash identifier: KdyEVbf256zsClDUBqVnSJ+2EZse8pMUCidwV/4ciRA=
Subject key identifier: 86:C9:2C:98:19:FC:75:9D:57:55:EF:09:EE:27:E6:5D:7F:33:98:35
Authority key identifier: B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
Certificate issuer: /CN=A91AAAF2/serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Certificate serial: 0836
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
Manifest number: 082F
Signing time: Sun 28 Dec 2025 20:12:17 +0000
Manifest this update: Sun 28 Dec 2025 20:12:17 +0000
Manifest next update: Sun 04 Jan 2026 20:12:17 +0000
Files and hashes: 1: saGMIGd1j-jJIZgeixH6MI5iaTs.crl (hash: ydVk9yiIt/WQsrgV8nmmsW84lGtcnCXhgVk97c81AD4=)
2: 73D3A6E0F72011EA8776EC28C4F9AE02.roa (hash: EgzF4RdbUeBvjesKc59wR9UVO4rx0k2Sq5JHzQFu9tU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 20:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2102 (0x836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAAF2, serialNumber=B1A18C2067758FE8C921981E8B11FA308E62693B
Validity
Not Before: Dec 28 20:12:17 2025 GMT
Not After : Jan 4 20:12:17 2026 GMT
Subject: CN=69518f21-9a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:7c:41:a3:89:e7:87:83:5a:cf:df:05:c5:
32:91:57:e9:fd:c9:27:d0:d2:3c:aa:69:12:81:ae:
5e:60:e2:59:89:7f:0f:7b:1f:75:f5:e3:c1:c3:5c:
30:a4:d0:89:42:c5:47:7f:8c:42:c9:9a:d8:bf:cf:
1f:17:0d:a6:52:bd:b7:87:9a:95:cc:0e:ed:8d:1a:
8b:4c:17:60:5e:bd:21:fe:7f:22:99:26:44:67:5f:
30:fe:0a:67:a4:cd:bd:95:39:b9:c8:f9:ee:72:7f:
c5:23:22:9d:ec:89:c0:0d:9e:73:0b:1a:10:1b:73:
50:c7:d6:51:d8:c9:7f:fd:85:47:0e:a1:8e:97:c6:
45:e0:7c:1a:e1:c7:ed:77:cf:76:07:fa:f4:5f:98:
0f:a1:cb:02:e8:92:a1:71:cc:8a:81:a7:58:85:6f:
f8:5f:0a:50:b5:7f:9c:b8:e1:52:01:a7:1e:a9:ca:
ee:97:90:95:44:c5:55:80:6f:90:ef:52:1d:d6:9e:
a1:dc:1f:d1:18:03:64:78:33:4f:a6:2d:1d:0d:45:
96:97:1d:21:1d:ce:54:f2:0c:99:9d:63:13:61:2c:
65:07:2a:1b:c8:87:cd:37:6a:c4:b6:13:0b:84:f9:
a6:9d:31:4e:dd:b8:6d:c3:0c:99:70:86:da:e0:df:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C9:2C:98:19:FC:75:9D:57:55:EF:09:EE:27:E6:5D:7F:33:98:35
X509v3 Authority Key Identifier:
keyid:B1:A1:8C:20:67:75:8F:E8:C9:21:98:1E:8B:11:FA:30:8E:62:69:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saGMIGd1j-jJIZgeixH6MI5iaTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAAF2/8226AB72F71E11EAB6994123C4F9AE02/saGMIGd1j-jJIZgeixH6MI5iaTs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:eb:52:af:7b:64:4b:5e:4f:44:68:30:8d:64:7e:79:40:40:
42:4d:98:98:08:59:1b:60:0e:4b:34:7d:51:63:9e:45:46:e9:
b2:5e:90:28:98:25:8e:21:e7:b0:5a:a4:e1:15:3f:b9:9f:fb:
b5:81:b4:ea:25:6b:fd:55:42:02:84:3f:32:3a:d5:6a:a7:1a:
99:7b:90:66:b2:65:80:46:93:2b:aa:6c:9b:f4:d3:c3:a7:17:
d9:27:1d:ae:64:25:28:b9:e0:22:b3:07:f8:2e:48:a3:a9:e0:
4d:24:0f:a9:57:85:3c:d1:fc:8f:dd:59:3b:66:de:c9:74:d3:
2b:7a:80:17:ee:ae:0f:5c:b4:6f:ff:3c:87:db:90:a4:a7:dc:
76:27:f9:cf:13:6e:e1:b3:16:8a:93:2a:d0:f8:e0:fd:ac:f3:
7a:67:56:14:54:c7:9b:3a:57:60:46:e5:1f:b0:fb:80:83:39:
e1:55:b5:f8:8d:e4:1c:ca:63:c8:78:38:4a:db:91:ee:da:9f:
59:1e:a6:77:34:64:8c:86:0a:be:e0:07:48:ef:d3:be:58:e2:
49:b1:7d:fa:eb:79:fc:2b:d9:4f:7c:9e:ae:db:fc:b9:81:e0:
33:c3:9a:ae:7c:08:aa:23:f9:da:f2:93:c6:b8:3d:aa:a6:f7:
71:6a:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 03:29:39 2025 by rpki-client