This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
File: pLh_nflqIHJhuXtMnjjIO1yA1m4.mft (raw, json)
Hash identifier: tVGJ4HvRkivQrYl4NjRLEgHtBwjqKGcXlhYNOsK8RgY=
Subject key identifier: 92:9F:EE:A9:D9:AC:14:33:26:F0:B8:DA:C1:A1:06:DE:E0:A9:DD:98
Authority key identifier: A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
Certificate issuer: /CN=A91BC6A6/serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
Manifest number: FB
Signing time: Fri 19 Dec 2025 04:19:24 +0000
Manifest this update: Fri 19 Dec 2025 04:19:24 +0000
Manifest next update: Fri 26 Dec 2025 04:19:24 +0000
Files and hashes: 1: pLh_nflqIHJhuXtMnjjIO1yA1m4.crl (hash: DCnHOUvMbKcqq3KviPx7xdlp9TRjxKHAmRbdGBMnuwY=)
2: E2FE5F1C5F3911EF9C33492EC4F9AE02.roa (hash: eos5oAESK8a0e0dRgljYu7jznUQ84s3rgDiZ/8AXfOA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:19:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC6A6, serialNumber=A4B87F9DF96A207261B97B4C9E38C83B5C80D66E
Validity
Not Before: Dec 19 04:19:24 2025 GMT
Not After : Dec 26 04:19:24 2025 GMT
Subject: CN=6944d24c-52ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:69:70:c5:3b:31:99:d6:43:47:5d:c6:86:
63:d0:71:cd:7e:45:f2:e4:f1:fb:d8:37:cb:45:8b:
3c:09:2d:29:9c:51:9c:c6:82:aa:b4:ee:a1:dd:9a:
c4:e8:2c:8d:b3:ef:84:2b:58:75:a1:81:66:61:43:
38:4c:e4:a2:a6:90:7c:df:71:fd:b1:af:0e:bf:6f:
13:1a:db:28:72:4b:b0:d2:76:5c:7f:cf:1d:a4:1d:
a7:26:6c:02:4e:8e:50:01:f1:19:21:37:01:b4:9e:
fa:35:38:db:ce:be:bb:b4:46:ce:6e:7d:04:fd:c4:
7f:0a:4b:8c:7c:56:0d:07:35:b1:62:86:8e:a9:94:
e1:45:7b:bd:72:fd:dc:13:61:f8:32:d2:5f:68:8e:
62:8b:76:02:07:91:e4:37:13:a6:6e:c8:46:8d:25:
38:42:79:bd:99:40:ef:0e:a9:75:89:7a:50:f6:49:
d5:73:d0:36:0e:d2:1d:26:b6:60:d8:64:19:c9:51:
8e:60:98:d9:6e:78:47:45:06:29:ba:ac:5a:25:85:
b8:12:44:9f:fa:7b:1e:90:26:64:3e:36:05:2f:42:
a9:25:9b:c2:1a:79:c5:ed:63:cf:64:71:05:6d:ba:
1d:6f:a5:73:fa:ca:c6:53:b2:f5:66:85:91:c9:f8:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9F:EE:A9:D9:AC:14:33:26:F0:B8:DA:C1:A1:06:DE:E0:A9:DD:98
X509v3 Authority Key Identifier:
keyid:A4:B8:7F:9D:F9:6A:20:72:61:B9:7B:4C:9E:38:C8:3B:5C:80:D6:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLh_nflqIHJhuXtMnjjIO1yA1m4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6A6/A2C621A05F3911EF85DC8E2DC4F9AE02/pLh_nflqIHJhuXtMnjjIO1yA1m4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:05:f4:2d:63:d6:83:4d:d8:b7:b9:3d:72:fb:db:2b:c4:
6b:4d:df:84:d6:fd:02:2d:87:19:b3:09:cc:bd:1b:62:5d:6e:
4f:96:e9:2c:bb:90:0a:df:5a:ef:26:b8:92:d6:c5:52:18:a6:
be:3c:c6:e5:f9:3d:b5:af:b1:3e:3e:4c:74:0b:84:42:a3:c4:
86:af:e1:4e:ce:a6:c5:a8:fb:4b:55:f9:d7:be:f0:75:8e:86:
06:70:a5:0c:86:56:fa:80:b5:4a:bd:1e:e3:72:9c:ac:35:bb:
98:51:55:95:5c:e9:d4:38:f6:c5:65:6c:d4:2c:1a:ce:03:85:
ea:56:39:3f:7b:a2:d4:5f:9f:60:1e:d7:e1:29:7c:ad:ea:31:
e8:9f:02:84:60:e8:3b:ff:de:3f:50:19:7e:78:9e:7e:c3:df:
2d:a8:08:4c:99:e3:3c:67:ee:54:74:5e:1c:38:a7:99:29:72:
63:96:56:40:86:06:9d:6f:d5:42:6e:1e:9b:71:ee:7b:bf:26:
62:3b:d4:d5:ae:c1:fa:eb:9a:fd:e9:c0:b8:a5:9b:35:c6:b7:
4f:82:61:f8:e4:29:a9:9b:4a:12:8e:55:57:33:1e:de:a4:dc:
8a:c6:ab:e0:90:c2:83:b8:03:7f:01:62:ec:36:80:0e:e1:00:
1e:8c:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:17 2025 by rpki-client