This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
File: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft (raw, json)
Hash identifier: duy5A1wt0KB5qV6m3EmesaCkq+wts2r9kj2uGi8yeig=
Subject key identifier: 99:57:7C:5C:32:9D:64:47:46:E3:3E:F9:CD:B4:AC:1D:90:30:37:73
Authority key identifier: 91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
Certificate issuer: /CN=A91C779D/serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
Manifest number: 014C
Signing time: Mon 29 Dec 2025 03:21:13 +0000
Manifest this update: Mon 29 Dec 2025 03:21:12 +0000
Manifest next update: Mon 05 Jan 2026 03:21:12 +0000
Files and hashes: 1: kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl (hash: w/XNFtaE8NcEUihHeAX+BGfx5ytOhCahZDf+CNJPWms=)
2: 1BC8D5FCE2B211EE946C6541C4F9AE02.roa (hash: iCp30dussETMXyoeph6Ol3mQ5L5KpmSd4EZLSV4J5eE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 03:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C779D, serialNumber=912FB5F7351CF98FB967451FEEDAF49F148E1A3A
Validity
Not Before: Dec 29 03:21:12 2025 GMT
Not After : Jan 5 03:21:12 2026 GMT
Subject: CN=6951f3a9-75bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:2b:30:d8:e9:3f:ba:36:22:10:a3:01:ed:
a3:ee:f3:f3:6d:f3:0a:ac:4d:70:a0:c7:cc:a0:83:
9a:39:d8:79:2d:04:34:d8:71:3d:1f:ac:a7:00:f6:
d9:fa:ff:60:11:1c:a0:5a:7a:e3:f5:26:34:a1:87:
d8:30:77:b0:18:76:fd:4c:5c:38:17:80:da:01:56:
01:97:bb:9b:8a:58:ac:4e:99:46:a0:35:64:f3:51:
24:58:c8:e9:f8:82:ae:ec:cd:f8:ec:85:b9:89:cd:
ef:32:1a:29:b3:b0:c4:14:c8:b2:d1:87:49:ed:87:
9c:3b:94:52:0a:f8:06:75:8a:8a:f1:b7:c0:47:14:
b3:e5:57:9f:56:b6:d3:0b:2e:68:60:74:32:e6:f8:
47:ee:16:c3:8a:66:0d:ae:8f:af:11:8d:58:ff:02:
2c:cc:8d:bc:89:52:53:b8:9e:9c:93:ff:8b:03:4e:
86:8c:8f:af:0c:c2:e9:06:5e:a9:1c:03:8e:3d:d2:
a8:ae:53:be:d9:66:a9:3c:ad:e7:47:67:43:d8:f5:
02:ea:23:9e:28:37:52:d3:ed:66:0e:68:4f:7b:11:
fc:34:bc:1f:5a:58:0f:eb:5b:06:65:1d:a1:48:48:
5c:35:25:23:08:04:83:e2:fc:96:c6:b4:94:0c:33:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:7C:5C:32:9D:64:47:46:E3:3E:F9:CD:B4:AC:1D:90:30:37:73
X509v3 Authority Key Identifier:
keyid:91:2F:B5:F7:35:1C:F9:8F:B9:67:45:1F:EE:DA:F4:9F:14:8E:1A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C779D/4FD59424E2AE11EE86F33C1EC4F9AE02/kS-19zUc-Y-5Z0Uf7tr0nxSOGjo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:6d:a2:8c:b6:82:1e:99:5e:8c:ae:b2:73:5c:50:35:04:
e9:16:4e:0b:42:71:c4:02:99:3a:f1:d2:0e:3f:a6:dd:78:62:
ea:39:57:ef:69:ab:86:7d:c9:6a:60:c4:c4:08:46:2b:f2:9d:
1e:d2:f4:d0:e8:2f:14:f3:5c:84:bf:55:69:e4:9b:38:9a:10:
4a:2a:55:07:54:17:9c:a3:a6:26:03:89:b2:8a:e5:86:eb:3b:
d1:61:de:3d:2f:d2:70:40:33:9c:dc:32:94:db:7f:78:99:5b:
76:20:5b:eb:67:2a:42:88:10:ad:29:e2:60:bb:b4:08:a6:5e:
bd:71:e2:42:da:fe:05:23:0f:db:6c:9a:27:50:77:56:dd:19:
83:22:e0:29:a6:0a:b5:c0:83:b6:96:3e:96:cc:6d:1b:66:f8:
cc:0a:a1:ed:04:49:79:62:4a:f4:2a:f3:56:90:91:a0:fe:a9:
78:16:d2:e7:46:57:0b:03:e5:86:f3:08:d6:83:bc:92:bc:54:
f6:e6:ff:da:bb:fd:a7:99:d5:8d:7b:a3:32:f3:90:6c:f7:31:
47:11:7e:1d:02:20:93:34:1e:4f:2d:b2:69:e1:f1:3f:ef:b9:
ae:40:71:b2:a4:3a:66:3a:b8:d3:b3:48:8e:bd:03:bd:8d:e9:
56:08:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 04:15:48 2025 by rpki-client