This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
File: PtImrpJ_g5gXgFRs42LzNp7bJLM.mft (raw, json)
Hash identifier: UMQk7IEmp0LNt8yPCKG5PieZfr/oAybjFhhc4AzbbDM=
Subject key identifier: C1:60:30:40:5B:51:8E:50:A8:2F:34:1A:8E:8B:9C:C2:D3:E0:00:0A
Authority key identifier: 3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
Certificate issuer: /CN=A91B92DC/serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
Manifest number: 0230
Signing time: Fri 19 Dec 2025 01:14:56 +0000
Manifest this update: Fri 19 Dec 2025 01:14:56 +0000
Manifest next update: Fri 26 Dec 2025 01:14:56 +0000
Files and hashes: 1: PtImrpJ_g5gXgFRs42LzNp7bJLM.crl (hash: hLziVcnfTlNxmNRvzmllF+AjswWzVLsxwA5vc/qEzic=)
2: 3CD61DC8812D11ED9C04940EC4F9AE02.roa (hash: cOiY+eFyn2JhrTs/7WoKVeEfi4A0VW9I3AIS/bx3zYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:14:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B92DC, serialNumber=3ED226AE927F83981780546CE362F3369EDB24B3
Validity
Not Before: Dec 19 01:14:56 2025 GMT
Not After : Dec 26 01:14:56 2025 GMT
Subject: CN=6944a710-61be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:ad:07:d4:23:09:7a:4f:98:0e:ad:e4:b2:
d5:8d:69:20:f3:b9:59:95:06:6b:7d:aa:2c:e3:8d:
0f:b8:9b:af:fc:4a:d4:40:56:ca:c6:00:9b:77:5b:
fa:40:b1:89:ad:65:9e:8c:7f:4e:fd:38:b9:bc:a7:
d2:20:f1:a3:af:2a:3f:e3:a9:27:1c:0c:e7:58:ca:
0f:99:61:da:72:03:58:8f:bb:50:17:92:00:a8:88:
1c:b2:c2:c9:2e:dc:19:2c:36:68:7f:5a:c7:80:40:
87:7f:09:2f:82:34:14:bc:55:39:88:4b:af:cd:c6:
92:55:c4:6e:95:f5:2f:3d:ef:92:df:a8:4e:0d:79:
42:20:d5:e1:d0:28:5d:a8:62:6a:45:4d:12:13:b0:
08:a0:32:1b:0e:21:20:27:2d:20:85:de:7a:52:73:
5c:7b:9a:07:ed:4e:6f:71:87:66:36:2e:b3:e1:ef:
f2:d0:e0:f8:75:3d:b2:d9:ba:60:86:17:21:7c:dd:
cc:14:58:03:0a:60:b4:80:5a:dc:f4:98:6c:9f:bd:
e3:6e:e5:cd:f4:fb:5a:e1:a1:23:4b:35:da:e7:99:
b1:f3:8b:23:9a:e9:42:49:35:52:ef:a7:06:1a:78:
ce:f9:98:35:5b:3f:a4:39:09:a9:65:93:ed:6b:d1:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:30:40:5B:51:8E:50:A8:2F:34:1A:8E:8B:9C:C2:D3:E0:00:0A
X509v3 Authority Key Identifier:
keyid:3E:D2:26:AE:92:7F:83:98:17:80:54:6C:E3:62:F3:36:9E:DB:24:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PtImrpJ_g5gXgFRs42LzNp7bJLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B92DC/563287F6812911EDA5B15073C4F9AE02/PtImrpJ_g5gXgFRs42LzNp7bJLM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:13:2a:3c:d1:0a:f2:38:3a:c3:b6:a6:7b:8f:5a:5b:01:86:
b8:36:16:ea:cf:98:5a:58:5f:b3:62:16:c7:83:64:cb:5f:72:
85:48:2b:88:ae:40:be:73:42:4f:9c:13:e7:ec:f3:fa:91:40:
51:d1:a0:07:79:90:45:e8:e2:86:52:0d:16:e5:fd:dd:b4:70:
88:df:44:5b:0a:fc:14:cf:4b:fd:ef:d8:b3:13:93:f6:55:0c:
2c:d7:a7:d2:d8:15:c8:25:b6:24:df:ff:57:13:46:27:04:91:
fa:0c:44:6f:b6:e1:0c:be:36:8d:df:40:34:ce:42:94:9b:4f:
99:2c:46:27:13:e0:93:31:1a:f2:61:0a:63:37:9c:44:29:e2:
a6:0c:3a:44:00:51:f9:7c:3d:6d:75:ef:03:cc:8d:c1:8c:20:
b9:f7:22:36:4f:eb:d7:51:cb:e6:f1:e2:59:2f:e9:46:55:6d:
6f:1b:7e:8a:1d:66:ca:b0:e5:67:15:1b:ed:19:68:df:4b:7a:
b1:7f:19:4e:e0:a9:b6:76:ae:0c:96:22:a8:d6:a0:a5:b2:82:
55:d5:1d:d6:fb:60:60:cf:16:9b:94:6a:e0:04:6f:71:fd:79:
d9:5b:0d:27:7d:7b:9a:a6:c7:ea:2c:b4:e7:ff:ff:19:cc:d0:
04:07:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:20 2025 by rpki-client