This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier: lJJ8DU6vjvl8OazMvDfGX0gN07eaGV9IKtYT2fm1jWM=
Subject key identifier: 5D:97:50:02:54:F3:53:AB:FD:8C:E5:E4:17:90:38:91:8E:E9:C1:AD
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial: 075B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number: 073D
Signing time: Sat 20 Dec 2025 21:10:30 +0000
Manifest this update: Sat 20 Dec 2025 21:10:29 +0000
Manifest next update: Sat 27 Dec 2025 21:10:29 +0000
Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: 3SFkjDOYMRPVf2CYZmI4hU87Ddv9F4/iTIGB8RMqwgo=)
2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: KFUQZMe5qLV6EEHqsboBmZ+XKCmzmQL5IdQuKz2/1pM=)
3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: CBAyva7dqI+RQTwKgqBd2Ik2cx8Z7eAggotY6PPN4YM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:10:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Validity
Not Before: Dec 20 21:10:29 2025 GMT
Not After : Dec 27 21:10:29 2025 GMT
Subject: CN=694710c6-29d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:6c:19:41:74:9c:69:5e:05:98:13:61:71:
49:b7:06:26:78:24:2a:41:39:24:a4:41:26:53:bb:
78:b6:05:57:86:a5:bd:a9:93:ca:20:9e:6d:7c:49:
03:d1:0e:0d:0f:ba:61:20:19:95:3b:ac:8f:65:a1:
97:6f:c8:73:6c:3d:fa:5b:fd:9f:0a:52:0b:42:49:
1f:7d:82:ff:5e:91:cc:a9:26:d0:ce:09:54:68:ad:
5a:ce:1b:86:3e:65:f0:c0:b4:dc:83:9f:78:15:1f:
94:bd:f0:cd:30:fb:09:3d:a5:fa:6a:e5:ac:2f:38:
8c:7c:d8:80:f5:f5:30:c5:4d:d1:13:ce:03:f8:fd:
44:71:56:91:09:f4:4f:a4:b4:31:e6:fe:4e:31:60:
07:da:ef:6a:ad:98:2c:0a:d8:c7:36:34:cb:31:52:
7d:f5:94:43:10:9e:e1:61:d2:a2:68:60:75:ed:7e:
c5:6e:9f:9a:f3:f5:95:92:5f:6b:b6:4f:59:89:21:
98:d7:df:23:b9:45:30:81:c6:8a:b8:6c:eb:e7:8f:
60:ce:dc:d6:a8:3e:ba:32:a8:10:4f:6f:67:d1:5f:
61:7a:dc:09:e6:4f:15:95:7b:e3:18:f5:63:f3:3c:
5f:ae:f8:e0:cb:26:05:1f:5e:88:08:59:4e:63:3a:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:97:50:02:54:F3:53:AB:FD:8C:E5:E4:17:90:38:91:8E:E9:C1:AD
X509v3 Authority Key Identifier:
keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e4:2c:db:86:55:67:5f:d4:a3:28:71:81:e2:b8:95:75:fa:
1a:7d:04:b2:0a:77:ff:d8:4e:a5:f1:d9:07:e4:dc:2b:93:1f:
63:50:51:6b:b4:ea:0e:d2:b5:ef:b0:44:25:39:a4:08:dd:fc:
fa:96:34:c4:37:69:cd:97:57:68:ba:42:6c:42:0e:4c:ed:b7:
90:b5:c1:ef:78:50:c4:6d:c1:f4:01:cb:18:52:82:a3:45:ef:
4a:98:b2:0b:2e:12:b8:c0:c9:b0:96:87:f6:c2:85:4d:08:e1:
7d:d4:43:0d:06:5a:88:4c:ef:42:e0:e9:cf:05:e6:3f:28:6e:
77:27:ad:76:6a:34:94:61:ef:f4:3e:bf:7f:89:78:1d:c4:1c:
e3:ef:55:73:b8:f8:d8:97:6b:e3:62:74:2b:0f:7f:af:11:9e:
72:2c:0b:db:5f:b6:97:4a:05:b7:fe:1d:ee:a8:8b:fc:73:e0:
82:72:fe:3a:74:ff:f6:24:88:ca:4a:6b:57:00:69:77:9a:c4:
bf:9e:0a:2a:63:3b:89:91:5b:c1:66:1b:43:2a:51:73:f7:b3:
66:73:2d:72:e1:bb:9e:f4:de:8f:ff:50:47:e8:2c:2b:1b:1e:
0c:b8:b1:15:93:59:79:62:c6:4f:d5:33:c4:cd:1e:9c:1f:a0:
30:b8:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:21:11 2025 by rpki-client