This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File: MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier: 27LfKlNtQXYj9dO8JWVkyPA2OLxT6IO+hYDaMFKoUq0=
Subject key identifier: 52:C2:5C:FD:18:5C:01:AD:67:C0:B4:71:A0:64:68:43:DF:52:92:2E
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer: /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial: 0C82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number: 4169
Signing time: Thu 18 Dec 2025 14:59:09 +0000
Manifest this update: Thu 18 Dec 2025 14:59:08 +0000
Manifest next update: Thu 25 Dec 2025 14:59:08 +0000
Files and hashes: 1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: S7ZFIsscc0+VQkssjboSY+jKN6DqG49XZzt6/xYOFsU=)
2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: Uqr4nD/CZBuD2sTlglQJ4RTyydE1vAssru0oXCdlN74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:59:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Validity
Not Before: Dec 18 14:59:08 2025 GMT
Not After : Dec 25 14:59:08 2025 GMT
Subject: CN=694416bd-04fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:dc:bf:a3:38:16:d6:69:21:9b:e9:19:ce:
bc:4f:29:1d:5a:89:dd:c2:c0:8f:6d:27:cd:c7:b8:
2c:35:46:e6:ef:5d:27:31:83:3c:63:1f:81:10:34:
dd:52:1d:1c:eb:3f:54:6e:aa:a3:73:5a:9e:59:42:
9f:4c:c6:01:a8:e0:24:98:64:90:61:bb:c4:95:36:
0c:4f:0a:c8:ac:04:40:29:18:b0:a2:19:4c:f3:ce:
5f:70:9a:34:8f:a5:6b:ba:1f:d5:92:7b:ce:d4:da:
f4:12:2e:f3:aa:06:c8:6a:da:46:fb:7e:9f:7a:4d:
f0:f5:40:9b:4a:af:67:43:70:98:ce:d5:ad:7e:c2:
f6:18:18:ff:3b:ef:84:fa:22:1f:80:20:13:c3:ba:
df:0e:a5:8f:d2:de:42:61:67:4f:4c:8b:d0:7e:01:
e9:3e:ee:4d:50:3f:59:e0:14:da:f4:b4:b1:02:d0:
f2:2e:ac:94:90:50:29:9b:e0:09:01:4a:41:af:15:
7c:a9:15:16:a9:50:6d:d5:06:79:a3:04:53:59:68:
64:c2:e0:66:bb:08:e1:d8:23:80:06:16:d7:5c:9f:
61:de:c8:ef:5b:17:41:1c:85:44:7d:9e:fe:12:00:
fc:6a:69:b4:53:b5:95:f9:f4:32:00:19:89:7c:ed:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:5C:FD:18:5C:01:AD:67:C0:B4:71:A0:64:68:43:DF:52:92:2E
X509v3 Authority Key Identifier:
keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ed:1f:38:3a:84:da:b4:92:4c:a2:01:cb:a6:9e:13:a8:36:
49:e4:f1:94:0a:c8:e0:5c:85:e8:64:5e:24:aa:65:0c:e7:86:
9b:01:7b:b2:86:db:89:b4:f1:88:80:16:bc:90:10:df:27:49:
54:29:33:ad:89:7c:b9:5c:c8:fd:b0:57:92:97:0e:de:aa:18:
8a:55:53:cc:e6:27:a8:10:7d:4a:f4:0c:2b:51:de:f7:09:44:
0c:1b:d9:99:16:2a:dd:d6:98:bb:64:ae:16:bd:03:00:6f:50:
ca:46:2f:39:b1:6d:56:4d:7a:f6:9e:11:44:f5:af:b5:af:a1:
4a:84:42:55:03:98:e8:d9:0c:4a:6c:84:6d:21:5d:2b:b6:99:
ac:5f:f6:fd:7a:1f:8c:58:69:ff:81:37:05:31:91:61:b7:91:
9e:fb:d1:c7:f6:28:a4:a2:6e:4b:6d:65:72:ff:4a:3b:7a:fc:
87:cb:15:8c:f4:50:15:2b:d8:a7:f7:9a:43:f1:48:08:06:f9:
f8:3a:df:ae:39:11:7f:af:c9:cc:07:b3:d0:2f:e3:82:02:1a:
6e:7a:6c:97:c3:52:a4:6f:c6:7e:cc:f6:a9:1f:ba:51:0e:90:
ed:e0:81:31:4c:85:45:3f:b6:30:5c:96:51:8d:67:22:bf:21:
4e:73:bd:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:58:12 2025 by rpki-client