This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
File: 34pOYRe8o2iUDWjphUeYuWZgndQ.mft (raw, json)
Hash identifier: 9Ztp+mwcAMuJSg58rJNR91jnCvRwUWPA0xHfo0MK53Q=
Subject key identifier: 30:A9:DA:CF:73:28:E7:7E:AC:EB:71:6C:25:07:A2:79:B5:6B:E6:78
Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Certificate serial: 093F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
Manifest number: 0937
Signing time: Sat 20 Dec 2025 19:39:30 +0000
Manifest this update: Sat 20 Dec 2025 19:39:29 +0000
Manifest next update: Sat 27 Dec 2025 19:39:29 +0000
Files and hashes: 1: 34pOYRe8o2iUDWjphUeYuWZgndQ.crl (hash: n3MUlQV0QVu2RLDpjCiQ1qWwXAGaV02v719PQ4J3p7E=)
2: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (hash: ASBYl23bkyFf4r9vJSPXkAo/YYzd1cAPrmJW3FNKskU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2367 (0x93f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4
Validity
Not Before: Dec 20 19:39:29 2025 GMT
Not After : Dec 27 19:39:29 2025 GMT
Subject: CN=6946fb71-8eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:2e:b8:18:d1:e3:5e:2a:16:52:a3:16:df:
e9:a0:da:9e:9f:7b:f6:2b:3b:38:51:70:ca:a7:06:
a1:d7:c6:05:e2:39:7b:f8:b3:9e:40:36:9d:1a:a9:
0a:61:b9:ac:53:51:4f:e9:75:d2:4b:fc:16:6a:15:
ab:b5:0e:d9:25:16:ec:71:84:80:13:ec:31:ad:11:
73:44:36:f6:1c:15:ba:68:d5:ad:e4:a4:31:ba:47:
4b:0e:6d:0b:14:1f:14:63:99:87:56:82:0e:87:02:
2e:11:78:65:b8:74:81:a6:4f:e3:08:12:bf:df:98:
60:80:17:bf:37:9f:0c:5d:03:fa:7c:db:7d:d3:6b:
2b:9e:d1:14:a8:95:63:ed:32:43:35:50:a1:a7:41:
2e:6d:7f:00:d6:a2:7d:66:22:88:b3:c8:7b:87:e0:
13:55:69:95:53:7f:cc:a5:c4:a6:bb:64:5d:c3:e3:
e5:88:4f:45:e5:78:5f:35:91:7d:c7:62:83:55:f6:
43:3e:0f:9c:ec:15:ad:97:88:f9:18:d2:d0:c7:82:
1e:89:42:0f:ed:d8:88:7d:ab:d3:11:2a:8a:1b:71:
d0:c6:c4:f8:c2:dd:96:de:d2:e1:87:13:0e:99:63:
4e:03:a8:04:4c:96:4c:34:71:f9:5e:62:ae:c5:34:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A9:DA:CF:73:28:E7:7E:AC:EB:71:6C:25:07:A2:79:B5:6B:E6:78
X509v3 Authority Key Identifier:
keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:5d:37:dd:80:17:af:c4:0e:07:ac:9d:57:eb:cc:a4:06:1e:
78:6d:f9:4c:c1:eb:af:bf:07:59:92:cc:76:c9:26:de:81:30:
2a:9f:aa:dd:31:a4:01:68:aa:a2:90:a3:cd:9e:fb:6a:a0:3c:
06:60:dc:a5:43:27:7a:e9:82:7d:3b:2c:ba:c8:c2:f4:cc:f7:
16:57:3b:e2:cd:78:4f:5b:5a:cf:2a:1e:0d:a3:74:59:5b:f9:
40:b2:d1:fb:bc:df:9f:a6:36:5a:eb:e3:d6:48:19:d9:83:c1:
b5:8e:16:02:57:9e:ab:8b:11:74:de:71:d7:fa:cb:0d:89:b9:
fc:59:e6:92:2b:25:76:2b:7b:e3:4a:15:4c:25:9e:e5:be:0a:
0a:d6:b9:39:2a:84:f9:3d:b2:66:3e:20:b0:dc:d2:56:32:e6:
f1:70:4a:a0:8b:2b:c0:e1:bf:8d:c5:1d:ab:df:fb:f4:a0:19:
29:1b:97:1d:c3:46:d5:13:a3:cb:32:52:00:87:ca:40:60:35:
41:b8:d7:9f:07:4a:66:74:bc:78:df:55:fa:74:69:51:17:72:
b6:a5:9c:e1:4e:cc:37:3d:b1:a5:53:68:ae:a1:5f:6c:c9:97:
da:1a:c3:4e:53:a9:93:ab:00:c9:3a:a6:ba:88:c9:b5:3f:87:
2f:bb:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:58:33 2025 by rpki-client