This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File: -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier: qHjk5rm6rBytfdXsp4FdXkjtast9Sk01e8sIN3cXc5o=
Subject key identifier: 40:21:27:AF:E4:54:8D:19:26:40:40:2A:49:61:58:89:5C:BC:14:B7
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer: /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number: 6F
Signing time: Fri 19 Dec 2025 05:52:31 +0000
Manifest this update: Fri 19 Dec 2025 05:52:30 +0000
Manifest next update: Fri 26 Dec 2025 05:52:30 +0000
Files and hashes: 1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: isqR0OzEy2IYYmLwMWxDeo61gwv4SSlktJbPXnw5XdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Validity
Not Before: Dec 19 05:52:30 2025 GMT
Not After : Dec 26 05:52:30 2025 GMT
Subject: CN=6944e81e-93a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:d7:a5:67:08:e1:d4:fd:96:fd:92:36:a5:
dd:f3:8f:06:8c:db:c9:0e:72:08:d9:67:3d:3f:4b:
e7:7e:dd:be:ef:c5:2c:42:07:89:77:0f:f5:dd:d3:
a3:9e:1c:a7:1e:d8:bd:b2:45:a8:81:54:cb:ad:1b:
ec:ae:01:23:0b:25:4d:a3:33:ea:9b:fb:96:3a:ed:
cb:28:81:8b:34:d8:7e:5a:21:48:21:f5:aa:96:e7:
4d:89:55:54:00:8a:90:63:9f:2a:e2:97:31:c7:9a:
58:3e:08:20:cf:d9:8e:5b:20:b9:1d:f4:00:39:4a:
d7:e3:2e:22:02:36:97:ac:7a:9e:ef:d3:af:c1:31:
06:db:70:e9:3c:c2:54:19:e5:2a:ae:f2:62:9b:7e:
e4:89:09:51:eb:e7:e0:be:68:d7:66:2b:51:90:7c:
52:11:75:4d:14:76:19:a9:1b:c2:57:da:9b:ec:b5:
b9:03:0d:24:c3:ed:5d:c8:a4:82:d6:6c:35:af:02:
5e:13:a6:d1:21:52:7a:f5:da:0a:d2:47:39:39:54:
f5:0d:5e:31:2c:bc:1f:a9:76:4e:60:de:34:27:36:
a5:59:de:35:0d:41:38:3c:ad:02:63:02:80:cc:b3:
d5:84:b4:db:27:ad:49:d4:f7:2d:af:1a:b9:53:0c:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:27:AF:E4:54:8D:19:26:40:40:2A:49:61:58:89:5C:BC:14:B7
X509v3 Authority Key Identifier:
keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:63:f1:84:d8:09:2d:8c:b1:e5:4e:39:dc:46:b6:5b:ff:
5c:4b:22:f8:e9:4e:bf:b3:16:1c:aa:76:ba:b6:30:a6:7c:4e:
94:8c:41:4c:52:c2:b9:ed:74:de:5a:2c:0b:25:71:b9:61:71:
35:c9:6e:db:66:71:0f:46:cc:72:d1:36:ae:25:de:11:df:8d:
61:0a:ce:58:be:69:f9:f3:bf:cd:58:05:99:71:6c:85:c1:c6:
76:fa:29:c1:1f:27:14:92:44:55:5f:0e:35:d3:43:3e:49:94:
e3:20:7d:ee:cf:fc:f3:1a:e1:2e:cf:b7:3e:30:80:11:54:c2:
40:f5:9c:2b:9c:68:78:7d:1b:e7:e6:13:3b:4f:d3:6a:bc:b5:
76:c3:35:f0:bd:af:ee:8c:f7:f3:ff:30:5e:23:c8:e3:c0:3a:
91:f6:2e:2c:f0:e6:76:63:6f:44:c4:93:fc:8d:2c:05:03:37:
48:44:ab:db:47:17:41:d7:66:86:6e:9b:da:7d:d8:fb:60:a2:
d5:10:08:d0:46:f2:5b:70:1a:5b:61:2f:30:d1:e0:f7:bd:15:
87:6c:34:35:c6:cb:e5:6c:a0:35:6b:17:0a:d6:83:4d:c2:db:
23:f3:b2:cd:ce:a7:21:41:13:02:16:96:23:bb:88:0d:0a:ad:
45:ee:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:52 2025 by rpki-client