This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File: _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier: mCdP+st4C4havdUZe8Qh5qGlKGnyCerGUaJ9vVUV0qQ=
Subject key identifier: 8A:AB:77:50:6A:06:CB:E5:A1:5A:6B:F4:D0:70:49:39:2D:55:04:D1
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer: /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial: 0710
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number: 06EE
Signing time: Fri 26 Dec 2025 21:19:55 +0000
Manifest this update: Fri 26 Dec 2025 21:19:55 +0000
Manifest next update: Fri 02 Jan 2026 21:19:55 +0000
Files and hashes: 1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: inzbsxJYwPjyDwv5p7TwcbHQWiyN3Ky2dVIdsZZdTog=)
2: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=)
3: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=)
4: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=)
5: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 21:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1808 (0x710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Validity
Not Before: Dec 26 21:19:55 2025 GMT
Not After : Jan 2 21:19:55 2026 GMT
Subject: CN=694efbfb-0983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:6f:45:41:c4:9e:57:a4:27:ee:3c:7a:03:
c5:f3:c7:a9:04:83:a7:00:a7:ee:06:8f:d1:7f:01:
09:69:76:89:62:0c:d4:16:25:5d:bb:1e:87:21:a4:
5a:a3:ff:e8:63:3a:f5:7e:79:0c:f5:9a:77:c4:98:
a6:ed:52:a5:ea:f7:d5:d2:29:c3:ad:fd:ab:29:32:
8e:f5:48:b4:32:5c:30:f2:e0:f8:9d:59:f3:ed:28:
f5:b2:b6:1d:0b:c9:b8:3a:65:8b:41:34:48:34:47:
4c:be:d0:8d:23:b6:a6:88:9f:00:2a:76:97:b0:30:
ca:1d:42:fa:70:7a:09:e1:31:61:4d:f6:09:f2:af:
1a:9f:fc:79:2a:99:1e:04:9d:d2:97:f2:97:cb:47:
13:6a:5c:c8:b9:73:bf:c1:70:b1:0a:4c:e1:c0:c8:
6d:7d:57:b5:a1:91:e4:95:a7:67:f8:38:3a:ea:98:
e7:bc:ba:25:c2:c2:48:aa:45:9d:5e:78:1d:03:2e:
93:f9:96:16:fe:47:d1:a9:32:92:50:f4:3e:17:1e:
c9:5c:ad:12:ef:f8:62:af:0a:45:6b:a0:fb:75:02:
bd:ee:1a:63:ec:b7:26:3b:a9:a0:e3:d3:91:a9:d9:
e6:96:a0:eb:a2:03:96:34:76:5f:fb:a5:da:5f:fa:
d1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:77:50:6A:06:CB:E5:A1:5A:6B:F4:D0:70:49:39:2D:55:04:D1
X509v3 Authority Key Identifier:
keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:80:3b:b9:5f:22:8e:0e:a6:40:a7:18:8c:f4:81:ee:4c:
da:1b:f1:69:f0:e8:fb:ad:37:4a:5f:bc:4f:ae:ef:0e:00:6c:
cb:b1:88:8f:b3:a5:04:87:20:1d:45:a3:1b:eb:cc:36:5e:10:
e8:ce:77:e0:19:37:67:9b:03:fc:a1:b5:d2:42:75:27:3e:7e:
ff:2a:8f:00:a3:14:1c:50:fb:78:70:e1:6e:ff:6d:70:7b:dd:
a4:98:a3:c8:dd:f6:07:5e:51:ea:27:68:89:0e:34:ae:b9:b3:
33:00:00:29:9d:76:3f:bd:06:09:06:08:8e:ac:32:e4:9c:98:
38:c3:14:3c:ac:24:1c:c2:87:09:33:47:1c:0b:a6:02:84:2c:
f4:9b:29:51:6e:e5:d9:d7:3e:4f:99:c6:f6:f3:f4:9b:ed:55:
c0:f0:2c:a2:0b:95:c0:58:b6:85:2e:7e:7e:74:1f:36:ac:81:
94:41:cf:c7:b5:b2:88:5d:f9:f4:c0:04:8e:0d:a5:09:b6:c9:
96:a4:e8:17:d5:b5:64:de:4a:82:c5:ff:f9:73:86:14:5e:4d:
ca:69:c8:a9:50:db:91:1e:a1:77:24:ce:dc:f4:c5:cc:ee:d1:
a1:3e:9e:52:14:92:db:40:99:e9:3e:5d:5d:bd:30:25:d8:e5:
73:79:57:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 06:14:34 2025 by rpki-client