This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json)
Hash identifier: xFppkpR+Vyiu9ZvJ4E8Zwp3gD3a+2LZRLYLGaY2gdtE=
Subject key identifier: 33:62:CC:21:BA:3A:8E:6A:2F:FD:78:6D:5A:25:3D:56:1D:B6:E8:79
Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Certificate serial: 064F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
Manifest number: 0646
Signing time: Thu 18 Dec 2025 22:02:30 +0000
Manifest this update: Thu 18 Dec 2025 22:02:29 +0000
Manifest next update: Thu 25 Dec 2025 22:02:29 +0000
Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: utmGRuMRy7lW4BK5YLQyUs0zX4xoVC+8ojh2qxpc9FA=)
2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1615 (0x64f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9
Validity
Not Before: Dec 18 22:02:29 2025 GMT
Not After : Dec 25 22:02:29 2025 GMT
Subject: CN=694479f5-029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:22:35:44:89:63:62:8a:0a:ce:dc:bb:7d:
e9:26:f1:f4:3e:e2:de:b7:7f:d8:46:0c:fd:7a:b5:
c6:7e:de:ca:19:17:39:e8:d4:1d:01:bd:4d:75:5b:
02:d5:0a:3f:cd:f5:54:55:9a:00:e4:94:e7:c5:43:
62:82:a9:e5:12:46:02:fa:bd:bc:d0:bc:2b:cc:06:
76:83:93:47:29:f7:03:1d:af:b1:69:e2:96:f2:8d:
45:31:1c:47:b7:a1:1f:a4:f9:be:71:cf:a1:35:3e:
5e:63:e4:59:4d:d2:40:b6:54:5b:ce:93:87:a6:3d:
16:93:cb:6f:f8:18:10:5a:a4:31:5e:aa:ad:39:a8:
d4:0e:6f:82:20:9a:b8:a0:c1:de:0c:72:18:63:3d:
59:b7:ef:3c:6f:5a:74:6c:57:cc:8b:da:1f:38:cf:
ad:d3:d8:c4:b8:64:48:fe:ed:28:2d:6a:5c:64:4b:
03:b0:bd:2c:8b:45:f5:29:c2:c8:23:d5:cf:d6:cb:
16:e1:fe:50:29:77:da:bf:7d:b5:cc:fc:26:b4:eb:
bc:34:ce:16:f4:ba:e6:17:8e:e1:9c:a7:c5:37:48:
ca:23:62:0b:ab:92:11:b9:4d:a0:b9:f8:64:ed:bf:
21:cf:e9:63:26:53:ea:60:c1:d0:19:2b:0a:bf:32:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:CC:21:BA:3A:8E:6A:2F:FD:78:6D:5A:25:3D:56:1D:B6:E8:79
X509v3 Authority Key Identifier:
keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:39:92:65:d4:a8:65:5f:2c:e4:8a:ea:68:d3:6b:03:a1:c5:
e5:76:64:c0:39:8f:6a:d5:b1:9a:ea:81:40:9d:02:88:eb:60:
71:3e:1f:58:3b:8b:cf:fe:c4:a5:53:2d:86:6e:b8:a5:49:87:
d9:6b:d8:f4:3b:45:f2:44:49:60:0b:ea:c6:9c:9c:81:71:fb:
97:c0:96:01:c6:9d:10:01:2a:e7:81:20:70:9e:26:77:4f:2f:
c7:cc:86:08:d1:5d:bf:3e:51:dc:be:99:57:69:66:7d:48:d7:
ca:2f:38:6b:15:02:2d:d6:49:8a:4a:83:0b:99:65:cc:06:af:
3a:25:c5:18:08:0f:a3:9c:fc:a6:56:03:c0:69:f1:27:7b:21:
63:c5:de:08:9f:49:f9:db:cc:54:f1:e5:99:fc:85:15:6e:51:
04:96:67:05:05:84:87:36:44:9c:bb:ad:9b:8e:4c:b8:4c:64:
a2:7c:f5:86:07:aa:03:35:93:54:39:b1:ae:3c:15:42:fd:ce:
9c:bc:f0:93:b3:aa:e2:ad:ed:fb:49:63:0e:cd:a6:3a:f7:f9:
77:db:7f:43:cf:14:f4:91:08:43:7e:a3:a6:96:62:e2:ae:77:
7a:4b:08:0e:cc:e4:20:79:d1:d1:0e:d8:13:9b:ca:6b:d2:a3:
6e:77:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:02 2025 by rpki-client