This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
File: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft (raw, json)
Hash identifier: q9gMTdqElmUqnrsf9SV2E+m8Y1FqwzNWbWROchZQHOs=
Subject key identifier: E2:A7:6B:57:31:1A:3D:8C:D0:1D:5B:36:5C:5D:ED:F9:A7:C3:2B:CD
Authority key identifier: FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
Certificate issuer: /CN=A91C93EE/serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Certificate serial: 0CF9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
Manifest number: 0CC0
Signing time: Mon 22 Dec 2025 18:05:59 +0000
Manifest this update: Mon 22 Dec 2025 18:05:59 +0000
Manifest next update: Mon 29 Dec 2025 18:05:59 +0000
Files and hashes: 1: _Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl (hash: WIIOd64Wm2VrgboA/iyfUGbb9UKgGVOuFafWOwJQUHw=)
2: 34E6B680511A11F0B256FA65C4F9AE02.roa (hash: DotKGlewQf4vCmtjp0W5XPKIyQK3DWXLsRQy4LfbCHQ=)
3: B256D8FC479711F09A25BE59C4F9AE02.roa (hash: g0SoJEOW6hbapp+G2W5wkFaJTTHS/dc2FgUbvjsjuIM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3321 (0xcf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C93EE, serialNumber=FC56E7E076F7FD0A84BECC9C3E229142A0901FEC
Validity
Not Before: Dec 22 18:05:59 2025 GMT
Not After : Dec 29 18:05:59 2025 GMT
Subject: CN=69498887-04a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:d5:48:52:67:92:c9:07:5f:96:29:38:28:
e8:b9:8d:54:fa:00:14:57:f4:7f:de:a1:40:ac:6e:
59:18:bf:0f:2f:94:48:ce:9b:b3:55:d3:56:43:b1:
c1:4a:37:79:c5:e1:39:b4:ca:8f:c7:01:5b:db:a3:
97:cb:63:aa:85:2f:d9:46:3f:7f:77:26:44:82:4f:
bf:6e:4d:f6:03:37:25:07:18:ea:80:c0:5e:9f:a2:
00:a3:4a:62:ac:67:a6:69:25:e4:af:82:1c:23:b9:
d2:6c:78:cd:9a:17:c1:2d:5c:13:ff:a7:90:b9:b5:
dc:64:47:2d:ea:0b:56:d6:60:e7:84:8f:8e:d9:5a:
dc:22:8a:9a:19:17:1c:1b:01:98:c1:51:f3:17:e5:
01:ac:5b:58:ff:48:f1:1d:f5:51:d6:b5:50:6e:b4:
21:c3:b2:be:1b:b2:31:1f:da:ba:f0:a7:20:f3:76:
99:f1:f8:18:d1:c7:d1:97:17:a9:df:8e:da:bc:5c:
63:32:d6:d8:34:1a:50:33:43:b9:b6:16:3d:c3:5a:
1e:fb:57:c4:f5:1b:ab:19:c0:9a:a4:fd:bd:d9:42:
8d:46:fe:6d:74:82:db:82:2b:c1:14:b5:a5:78:4b:
48:0a:9c:dc:f9:f5:19:f6:dc:c3:ae:0b:45:06:6e:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:6B:57:31:1A:3D:8C:D0:1D:5B:36:5C:5D:ED:F9:A7:C3:2B:CD
X509v3 Authority Key Identifier:
keyid:FC:56:E7:E0:76:F7:FD:0A:84:BE:CC:9C:3E:22:91:42:A0:90:1F:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C93EE/6858F6880E0211EAA9B1DB65C4F9AE02/_Fbn4Hb3_QqEvsycPiKRQqCQH-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ec:5d:22:6f:11:39:cc:eb:7d:75:4e:35:ac:28:9a:7c:75:
f0:9f:e1:6a:2a:c4:76:43:b5:f6:fe:6d:cf:6e:2d:49:51:a0:
cc:62:8b:b6:62:88:d2:ba:2f:11:04:9f:94:bb:08:a4:38:fb:
22:d5:6f:f3:ec:be:12:4e:34:ca:35:59:ad:8e:58:f0:1e:59:
fb:4b:81:b6:48:54:9e:02:42:66:81:ee:6f:c7:95:a8:29:f5:
20:d7:8a:fa:b3:9a:04:03:6e:fc:19:b0:c2:21:fc:6a:21:d1:
a3:1f:bf:ec:4e:22:32:e3:2b:53:b5:46:18:be:cf:a8:ee:33:
6a:0a:29:9a:5d:48:fb:36:64:d1:a1:c5:2d:cb:9a:9f:b7:91:
88:be:1c:84:4f:06:52:ea:d6:2e:7f:61:d3:1f:9d:82:54:1b:
19:ca:dc:bf:7b:29:59:62:75:7b:9e:31:d0:bc:7d:22:11:e9:
8a:20:18:15:0e:60:06:a8:54:e5:1c:6a:a9:4c:e6:f2:62:40:
ad:0c:2c:f3:44:c1:c1:68:26:03:5e:d5:83:cd:fd:72:3e:02:
5b:fc:d4:5e:8f:2e:f6:71:fc:14:b1:b2:55:21:54:72:94:bd:
df:4d:3d:3e:e2:a4:5c:0a:13:a4:cb:75:07:7d:a8:5e:1b:a1:
73:1c:eb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:25:46 2025 by rpki-client