This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier: MAjgPOjJ+/zOfv3gZEEe3bj2NieeHQmGcU/hEIViShE=
Subject key identifier: AF:96:9D:8C:A6:36:91:85:52:D8:B0:1C:12:0B:63:F6:63:52:0B:FC
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial: 031A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number: 0303
Signing time: Fri 19 Dec 2025 00:29:23 +0000
Manifest this update: Fri 19 Dec 2025 00:29:23 +0000
Manifest next update: Fri 26 Dec 2025 00:29:23 +0000
Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: 5lCth4XhJxbU++dq/dXxgvUNeC+Lp+Hw/ah3RbTk5eo=)
2: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=)
3: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=)
4: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: 3CgCTp3bzKYZXfeq4ZljTed0rolq+eWipeXPCnowOi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 794 (0x31a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Validity
Not Before: Dec 19 00:29:23 2025 GMT
Not After : Dec 26 00:29:23 2025 GMT
Subject: CN=69449c63-ad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a2:93:b7:c0:3b:09:e3:bb:de:56:d6:3d:c5:
ca:56:a0:96:f6:3a:34:fb:1b:10:1b:04:a5:10:b1:
0a:c9:31:37:ba:50:30:18:be:24:e2:84:cb:94:33:
4d:ff:b7:9d:eb:91:8d:f5:38:ca:c3:f0:c1:12:93:
52:dd:95:96:b5:d5:28:fd:b3:9d:37:13:83:3d:ce:
f7:b2:4f:4d:f6:28:ff:a8:f1:38:68:fe:39:6c:ad:
ea:e2:69:ff:34:67:42:19:d5:2e:6b:be:b9:c2:59:
dc:75:8a:f5:2a:9e:f2:ae:ee:ae:8b:ad:62:77:01:
50:e3:ed:62:1d:f8:ce:31:1d:32:cd:d9:fd:2c:c6:
f7:85:49:24:84:10:be:6b:9a:b4:ff:e2:fc:9b:53:
5b:ca:50:d9:68:f0:f0:28:36:5a:8e:a5:bc:e2:17:
d0:a6:92:bf:ca:3a:27:b0:f4:0a:32:6f:53:14:f4:
da:56:63:da:1b:54:86:4b:8c:bc:8a:21:08:9f:10:
6c:3c:e6:5b:37:a7:1a:c3:37:db:cf:cd:8a:88:5b:
05:2a:b6:a9:b1:1e:e5:1c:fd:90:a1:6d:94:fc:3b:
86:c7:6d:fd:ee:3c:bb:a1:ef:45:40:69:65:60:72:
df:d8:80:65:d6:83:43:c7:7b:77:ea:7b:aa:98:f1:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:96:9D:8C:A6:36:91:85:52:D8:B0:1C:12:0B:63:F6:63:52:0B:FC
X509v3 Authority Key Identifier:
keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c1:b5:19:5c:44:1e:de:c6:8b:0a:be:b3:0e:f0:0f:b3:27:
f8:ee:84:30:c9:ca:d0:46:50:5f:a0:94:45:0a:ef:18:94:1f:
33:68:f7:30:35:5f:e6:ba:8e:2c:66:5c:2f:54:da:3c:58:eb:
d5:29:80:14:18:4d:ce:a0:e2:dc:31:cf:f9:e0:71:0b:b1:4d:
6d:c1:eb:57:f6:c4:c4:7d:9e:7b:23:b8:75:79:87:e5:6f:8c:
1b:af:06:60:cc:d1:6e:8e:12:50:3c:28:17:af:9d:88:ec:34:
85:e2:af:0c:0e:b9:f4:78:04:2d:59:db:e3:a0:3b:ea:88:b1:
48:db:0f:ef:a3:b8:4c:7a:cb:a1:5e:18:53:93:00:f5:a1:1d:
73:0c:0a:14:5f:f2:c9:15:42:a7:fa:3e:cd:74:58:40:db:1f:
22:f7:58:4f:ce:8a:86:e9:0f:28:87:16:69:dd:3e:91:1f:04:
5f:3d:99:15:77:04:fc:32:0c:25:e1:1a:ee:75:f4:46:25:e4:
9f:a1:87:54:4d:cc:84:ae:2a:07:88:ae:5d:8b:21:75:62:06:
d0:32:71:af:41:05:c6:06:dc:95:a8:5a:8e:8a:8d:e5:c3:75:
72:1d:ba:dc:64:34:76:d1:ad:38:d5:fd:5e:c9:9d:2c:33:d5:
11:43:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 04:58:28 2025 by rpki-client