This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json)
Hash identifier: EuFZ0vXgZbcyelpBKgFdbtPoFCS63j/6dt94m09XYlI=
Subject key identifier: AF:B2:1D:DB:E7:75:32:E1:47:54:1B:E8:23:86:3D:C5:E6:9A:43:FB
Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
Manifest number: 0126
Signing time: Wed 31 Dec 2025 03:44:17 +0000
Manifest this update: Wed 31 Dec 2025 03:44:16 +0000
Manifest next update: Wed 07 Jan 2026 03:44:16 +0000
Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: qV9BlM4nL9GPoqkOtB1oh640XvvHxBX5C685f/B4jHs=)
2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl
rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 03:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431
Validity
Not Before: Dec 31 03:44:16 2025 GMT
Not After : Jan 7 03:44:16 2026 GMT
Subject: CN=69549c11-f750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:fa:0f:46:1f:99:04:cb:73:69:30:65:30:
a2:14:c2:0f:b1:a8:5d:9e:dc:29:fc:ad:9e:0c:1b:
05:46:5c:8a:a4:b8:e4:c7:53:65:f3:5c:12:61:37:
0a:12:c2:a4:f9:20:20:25:19:3e:a0:b7:08:8a:12:
2e:40:f6:e6:49:a9:09:c7:6b:4f:9b:4f:24:82:9b:
43:ad:7b:a2:fc:83:46:81:aa:8a:ab:27:86:9b:63:
61:5e:5c:72:6a:6c:5c:96:91:28:38:19:d8:f7:f3:
59:35:d3:94:63:b4:da:42:33:60:4c:2b:d9:ef:e8:
1b:07:45:56:d4:ba:c9:aa:37:9f:49:f4:5d:3b:3c:
65:59:c8:06:77:48:a5:ec:1b:fa:32:43:4b:84:25:
13:37:b3:ba:05:3f:88:76:4a:65:3b:da:4d:af:7e:
d5:0f:84:47:a1:93:40:0c:f0:15:39:9c:af:4d:81:
f2:10:6c:93:a4:cf:f0:c9:68:3e:47:f2:8e:b1:1a:
8f:d2:6e:ad:9d:43:c9:66:b8:66:10:92:3f:ac:e0:
3f:58:4a:24:c6:49:43:24:58:86:e4:36:6c:85:96:
dc:52:d2:f8:7a:ab:d5:61:e1:65:29:cb:45:1b:c6:
86:05:29:06:62:3b:17:6a:20:55:41:7a:42:c1:d6:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:1D:DB:E7:75:32:E1:47:54:1B:E8:23:86:3D:C5:E6:9A:43:FB
X509v3 Authority Key Identifier:
keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:85:c3:3a:f4:78:42:a6:70:09:28:f9:07:99:6d:90:28:49:
52:75:a4:11:51:36:13:f3:3b:06:17:b4:f4:74:a3:1a:ca:6f:
ee:ea:84:fa:01:63:60:a1:8f:ad:46:f7:36:bd:58:88:68:d2:
c9:bf:09:69:d9:66:6d:18:a8:fe:82:bb:5d:d9:ef:e2:65:55:
85:60:40:77:7f:47:00:22:61:8d:80:1e:51:fa:ad:33:de:a7:
2a:04:0d:95:26:36:fc:0f:22:aa:0d:62:88:61:06:07:dc:12:
b8:25:53:34:28:eb:b2:30:56:7b:9d:f2:4f:e2:e0:c7:3e:88:
1e:f0:0e:d6:34:b2:ae:ae:3a:a4:10:db:5c:48:d6:e3:bb:51:
a8:39:8a:ac:8b:23:20:b7:b6:1d:c4:ea:f7:17:6a:c1:03:d0:
af:0b:5d:00:9c:57:f8:f3:c3:be:2f:f3:ab:20:99:67:db:f4:
4c:ad:87:f6:22:77:91:4c:38:fd:e5:2e:a5:bc:55:ba:0e:e4:
89:6f:b7:f9:dc:47:9d:17:94:22:75:70:ec:89:dc:8e:5f:4f:
65:a3:c7:a0:60:b0:18:9d:ee:17:ae:ec:3e:26:11:b8:f8:d0:
de:0f:bd:79:42:2e:53:21:a0:34:4d:69:a3:6b:a2:33:6b:aa:
d0:51:63:02
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC
RTMxRjM0MzEwHhcNMjUxMjMxMDM0NDE2WhcNMjYwMTA3MDM0NDE2WjAYMRYwFAYD
VQQDDA02OTU0OWMxMS1mNzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniP6D0YfmQTLc2kwZTCiFMIPsahdntwp/K2eDBsFRlyKpLjkx1Nl81wSYTcK
EsKk+SAgJRk+oLcIihIuQPbmSakJx2tPm08kgptDrXui/INGgaqKqyeGm2NhXlxy
amxclpEoOBnY9/NZNdOUY7TaQjNgTCvZ7+gbB0VW1LrJqjefSfRdOzxlWcgGd0il
7Bv6MkNLhCUTN7O6BT+IdkplO9pNr37VD4RHoZNADPAVOZyvTYHyEGyTpM/wyWg+
R/KOsRqP0m6tnUPJZrhmEJI/rOA/WEokxklDJFiG5DZshZbcUtL4eqvVYeFlKctF
G8aGBSkGYjsXaiBVQXpCwdbhuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+yHdvn
dTLhR1Qb6COGPcXmmkP7MB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy
MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO
REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx
TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7hcM69HhCpnAJKPkHmW2QKElSdaQRUTYT8zsGF7T0dKMaym/u6oT6
AWNgoY+tRvc2vViIaNLJvwlp2WZtGKj+grtd2e/iZVWFYEB3f0cAImGNgB5R+q0z
3qcqBA2VJjb8DyKqDWKIYQYH3BK4JVM0KOuyMFZ7nfJP4uDHPoge8A7WNLKurjqk
ENtcSNbju1GoOYqsiyMgt7YdxOr3F2rBA9CvC10AnFf488O+L/OrIJln2/RMrYf2
IneRTDj95S6lvFW6DuSJb7f53EedF5QidXDsidyOX09lo8egYLAYne4Xruw+JhG4
+NDeD715Qi5TIaA0TWmja6Iza6rQUWMC
-----END CERTIFICATE-----
Generated at Wed Dec 31 08:00:54 2025 by rpki-client