This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
File: rKpuJqXy3KoUzfyezI6c9oKaQCE.mft (raw, json)
Hash identifier: KfEs/5qsQn7stZDfx4B/MXSuZFpz+bqly57FUwnWxYk=
Subject key identifier: E0:1A:60:48:EC:A0:09:56:0E:10:E3:3D:24:50:D0:7F:36:2D:B8:5D
Authority key identifier: AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
Certificate issuer: /CN=A91AEF45/serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Certificate serial: 03FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
Manifest number: 03F7
Signing time: Thu 18 Dec 2025 23:47:12 +0000
Manifest this update: Thu 18 Dec 2025 23:47:12 +0000
Manifest next update: Thu 25 Dec 2025 23:47:12 +0000
Files and hashes: 1: rKpuJqXy3KoUzfyezI6c9oKaQCE.crl (hash: fZ2fyjCw5WIIm57mronMYap7sv0Zfg1ba9fSg02tC84=)
2: 1AE323249F2D11EC897FD30CC4F9AE02.roa (hash: n9RCBLHpgjOAFQhIl7OXxEtavy0mL+5/7gM0zNsjfBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020 (0x3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEF45, serialNumber=ACAA6E26A5F2DCAA14CDFC9ECC8E9CF6829A4021
Validity
Not Before: Dec 18 23:47:12 2025 GMT
Not After : Dec 25 23:47:12 2025 GMT
Subject: CN=69449280-1d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:4c:e6:26:6a:4d:74:36:f8:72:85:0d:fe:
78:a5:2a:27:fa:3a:f6:21:2f:e8:d2:e1:b8:48:3d:
68:e4:41:14:0d:a1:22:5e:c4:1b:48:c4:e0:b0:b9:
eb:88:83:bd:03:d5:e3:72:3e:80:34:af:38:6e:5f:
6d:39:a6:68:a4:44:5c:c4:26:52:72:3d:be:80:d1:
7f:c3:3f:fe:ee:97:6d:71:a6:08:4e:0d:8f:91:8f:
d8:03:da:78:23:54:4b:2d:ea:bd:02:dc:32:98:04:
71:46:7a:55:8c:3f:c9:c8:f7:ff:fe:9e:fa:36:ef:
21:d1:24:98:33:28:f9:8d:bc:46:d2:46:46:a8:4d:
53:c1:1c:6d:5b:44:61:11:99:8c:32:ed:57:ad:3f:
03:a5:91:39:c5:9e:99:d2:f0:31:2a:95:5e:d1:03:
2f:4b:1b:6a:45:8a:a7:69:e9:08:6b:c7:19:c5:df:
48:8d:79:6f:f5:91:63:d0:ee:d0:eb:dc:15:a7:76:
8d:42:ff:f0:bc:ee:d7:c2:74:32:e4:73:37:64:54:
fb:bd:1a:e8:4d:40:50:3a:85:84:d6:b0:18:23:aa:
91:ba:05:14:db:73:71:c1:23:8d:f5:35:e7:76:be:
18:7d:1b:d9:b7:e7:27:63:8f:ff:6d:c0:74:14:3b:
d2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:60:48:EC:A0:09:56:0E:10:E3:3D:24:50:D0:7F:36:2D:B8:5D
X509v3 Authority Key Identifier:
keyid:AC:AA:6E:26:A5:F2:DC:AA:14:CD:FC:9E:CC:8E:9C:F6:82:9A:40:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKpuJqXy3KoUzfyezI6c9oKaQCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEF45/5D8B9B829F2A11ECA7CFAD0AC4F9AE02/rKpuJqXy3KoUzfyezI6c9oKaQCE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c4:52:ab:97:4b:f1:95:21:42:1a:eb:20:04:25:52:a7:bd:
38:39:44:0c:c4:65:29:7b:f1:3c:c9:b8:a3:66:94:da:c5:d6:
f3:f1:c1:14:09:d8:8f:54:80:14:50:41:d8:84:a4:f3:fc:cb:
d9:93:13:ab:87:47:59:ea:23:4b:9e:f7:f2:8f:61:84:cb:5d:
a5:07:6e:1c:cd:f0:ff:12:a1:30:88:da:e5:9d:7e:53:16:33:
9c:5c:79:22:45:7b:97:1e:0a:21:7f:0c:98:5f:ea:06:af:0e:
f1:99:7c:61:56:5d:0e:60:88:c9:91:13:6e:9d:31:00:03:5c:
6d:52:a2:c5:39:26:44:3e:da:1d:e6:f6:50:70:e2:f0:71:3b:
34:0b:9c:17:f1:35:bd:86:e9:99:b7:f2:c7:6c:73:6e:bb:2e:
6c:57:25:b1:9b:20:d8:fb:80:b7:19:c1:43:0d:25:fd:0c:3e:
e0:06:3a:d0:1a:9f:6a:d4:f1:ed:97:af:37:61:39:ed:7d:a5:
c1:5e:d6:60:7a:df:a6:58:15:60:56:1d:c4:c7:2b:df:46:f2:
f8:f9:43:65:41:31:72:2c:96:13:38:5c:0e:37:de:69:ab:84:
ee:77:6d:0b:88:3d:3a:52:93:60:44:69:aa:11:df:98:e5:79:
17:30:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:21 2025 by rpki-client