This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json)
Hash identifier: uiJqsPqe/LWXG8aBq4b64r8MYC6ALYV2qjWPp30HgIE=
Subject key identifier: 0B:DB:39:12:9D:5A:3F:1D:16:32:A4:09:76:58:BC:E4:57:63:2F:D5
Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
Manifest number: 01F7
Signing time: Fri 19 Dec 2025 01:49:18 +0000
Manifest this update: Fri 19 Dec 2025 01:49:17 +0000
Manifest next update: Fri 26 Dec 2025 01:49:17 +0000
Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: vxtHJyODH/hp5z7kj2s9RTzCKrnimc2DYO0HNWv/wUc=)
2: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=)
3: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: 1jcnYgiH1oCe12gdnItbi9E2/n5D/nkIQyDzvjflQcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7
Validity
Not Before: Dec 19 01:49:17 2025 GMT
Not After : Dec 26 01:49:17 2025 GMT
Subject: CN=6944af1e-a847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:69:7c:09:34:65:a2:b2:41:6a:99:eb:30:
83:2d:c4:e5:f2:1a:74:86:69:7d:27:63:63:c4:67:
e1:ee:68:52:1b:a4:3b:e2:e3:0d:40:83:5a:70:a3:
37:ce:79:f0:bc:47:34:ce:12:45:4a:a3:48:f3:ca:
0e:e2:4b:50:ae:b4:75:65:5e:a9:9c:27:42:7b:10:
1c:cb:06:d6:f9:00:e2:cc:11:59:67:9b:cb:04:e2:
78:ad:2e:7d:4d:7b:70:80:61:46:f1:64:35:07:ce:
81:d9:69:f6:a1:47:c1:b2:c7:19:a8:e7:9a:a0:03:
63:8e:0a:97:76:1f:cf:6a:99:81:f9:95:d8:a0:b7:
ef:22:79:a8:a0:39:b6:6d:51:5a:03:f0:4a:9e:67:
c3:c6:e9:f2:99:01:e4:4d:e4:36:06:bf:e2:54:60:
89:e3:8a:a1:4c:20:b1:c0:46:72:43:4b:8b:3d:34:
9f:b9:b9:da:a4:c9:db:87:32:d4:40:05:33:f8:21:
3c:fd:42:82:96:c0:ef:59:b0:f5:78:7b:d8:5e:8c:
f0:af:2d:9e:b9:e8:c7:e3:79:35:c9:60:f2:91:ce:
24:a1:5b:13:5d:dc:f5:81:0a:d9:f1:1d:ab:41:ce:
50:e7:f5:d5:80:9d:fe:6c:b7:76:92:27:d4:1a:21:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:39:12:9D:5A:3F:1D:16:32:A4:09:76:58:BC:E4:57:63:2F:D5
X509v3 Authority Key Identifier:
keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:bd:33:ac:43:c6:62:28:41:65:24:2f:ef:d7:c8:57:fb:
00:78:ed:53:7f:f8:e5:79:a7:a6:ad:cf:8b:9f:cd:c6:c0:41:
b5:8b:e3:a6:f0:24:91:05:f2:03:b1:93:78:60:db:f4:84:fc:
8a:2b:8c:bb:b7:23:95:d1:61:85:31:e4:44:16:51:9e:d8:12:
37:6e:7e:5e:b4:4e:a7:d6:99:27:14:4d:93:c5:61:7c:93:76:
5d:b6:68:ff:0a:47:7e:76:31:4a:64:3d:91:3c:8b:41:14:53:
4b:5b:da:a1:83:e1:0a:95:53:a2:6e:83:47:e0:99:82:51:c0:
07:99:a6:98:8d:5f:2a:c3:b4:9e:d1:1a:a2:01:c9:a0:8b:c1:
59:bb:0b:cc:26:6f:a0:f4:89:bc:d2:78:0e:54:1f:5e:1a:9f:
e8:e7:63:5d:dc:fb:67:72:01:e0:2a:dd:71:c3:e4:df:ca:8f:
c5:b0:cf:de:55:29:5f:e8:52:54:a9:a1:81:e1:65:e8:c9:73:
04:dd:f7:0f:cd:0c:1b:7f:b2:3a:00:5c:79:43:d2:55:8f:5e:
bc:3e:2b:cc:b5:2a:ea:47:8d:75:ce:5c:8c:a1:01:da:5e:e7:
8a:97:14:e8:ce:4d:fd:46:4b:00:71:03:80:e1:67:9a:20:13:
c1:7c:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:53:15 2025 by rpki-client