This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
File: rdlBjw-bVfO3N2oJPbEdutOu_sg.mft (raw, json)
Hash identifier: J2YF65WWSKdQvY7Z7NpTLlciPQvDaAKzDJ5IsKSiqKc=
Subject key identifier: 32:4C:AB:73:D4:58:C4:7F:11:7E:69:FF:1F:1D:17:44:81:4B:6B:B2
Authority key identifier: AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
Certificate issuer: /CN=A91CFFA0/serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Certificate serial: 0F8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
Manifest number: 0E7B
Signing time: Thu 18 Dec 2025 17:43:33 +0000
Manifest this update: Thu 18 Dec 2025 17:43:32 +0000
Manifest next update: Thu 25 Dec 2025 17:43:32 +0000
Files and hashes: 1: rdlBjw-bVfO3N2oJPbEdutOu_sg.crl (hash: r2SN1n4BHEV5Wz3ld0SPN1/e0hhBAS7JxhIJcKAl5qQ=)
2: AB2FDD4CA56911EA8F159D7BC4F9AE02.roa (hash: 5W1NfRExr5L2qQL5H136NrVKGoHwAdTpjf3o+jUw4fM=)
3: 6ACBF170CC4C11ED8B54A36FC4F9AE02.roa (hash: PNn4hloLWsO3US5KtLsv/gJGCuFiAV7h2ZsPkySZuPM=)
4: AE9742429B5711EB8E3BEB19C4F9AE02.roa (hash: IgmSu1xooZkjMSIy5UaMn0KJuSc5PeG/UAY2iz4v00A=)
5: 5A4C001A77CC11EAB764ED34C4F9AE02.roa (hash: ynz+ZXVYon6qCCwSg68HnlbJgsz7oHMRryvXyKUGv9g=)
6: 27F85F401B0811EEA3313C43C4F9AE02.roa (hash: lKd14RCSyU2vrCrtMJxPKeMYKMqLc77HXu+4PUEXtJI=)
7: B3B97C46510311EDA562C34DC4F9AE02.roa (hash: jtYt/pU+ooAIkmhjTmjyuCh451/edjbb8L7BPLMNm/A=)
8: 54AB633219D211F09C581262C4F9AE02.roa (hash: TW7LWSWDjilmokwKD8PcTDpey43GdF1QSznkCaq0KaE=)
9: 849EBBA60CCA11ED97820077C4F9AE02.roa (hash: GSV2og2vZfzpYKFvoDWTGBKAz8dr3rumZNKGGO3jHY0=)
10: 5D364EA2C5DC11F0B2B11B60C4F9AE02.roa (hash: Q+N7nkL63v9ZAWNH18H4yXxeNCEcfWDs/nxX6jo0OvQ=)
11: 624A8CB0A75211EDB46F8967C4F9AE02.roa (hash: H2lEK0K0kQYeTrVqMlmr1093uk7p/5P20OC6SGdaiQI=)
12: 7FBDDAE21A9411F087D4BC86C4F9AE02.roa (hash: +Ezz1sJmRvUn7ofcNz6zucevlAunQnc+pNOTGGaRXs4=)
13: 0134DE8CC77211EC9B377B2DC4F9AE02.roa (hash: ZJYPWa1zVWtxLs6YCjscQz9YmQ7dtlau1Mnxy99zbcE=)
14: 8B0EC9621D0611EDBAB65333C4F9AE02.roa (hash: hncV0VkKM0GHDpxNiR5xutYPqnkMPO9a8qqBVzFUIdw=)
15: 3949DB48056711F09B0C9329C4F9AE02.roa (hash: U4MBST0cKb6RFa7OBRmsAZWClvdETmVq86pgqwAZx3A=)
16: 1B88FC66823D11EC8E3CB427C4F9AE02.roa (hash: mn3sE8XpKvVWd9UbJMQ1OKNZuj9ls9xZNaLI7yAeig4=)
17: 59C7E67C77CC11EAB764ED34C4F9AE02.roa (hash: EzmlYDIYm1xOfkY9Xnj3Z3SdpIMp5IBIa3y1OFN4eK4=)
18: E79C4936420D11EC89D7C163C4F9AE02.roa (hash: GZEHbZPKjeuR0ecqQm5rnrjDlAtA7+UPoWqGJrdoIkc=)
19: B86FBE4A2E3611EB84E66039C4F9AE02.roa (hash: sLEtAwDgKICVdyB7EW9vv5iaJ4c0aSu+tPvZcmtVPKg=)
20: C735E33E1CB511EAB25B4768C4F9AE02.roa (hash: gyfd8yfpcrsdUm362X9/UdNM3mZBfttbTMqza0Depgs=)
21: DA05FC5C58A311EC952D4D56C4F9AE02.roa (hash: FQj+ZVLFAzitzpiwqDx7ibMG/ct51yOTa3qwsRqg/wY=)
22: 598351E2476011F097E14360C4F9AE02.roa (hash: Z9kiwDBj6+SjMsFsgY7gi9FIlXbv7JHD5bPoLzc5FlA=)
23: 2C3F5F0C1CB711EAAA03506DC4F9AE02.roa (hash: bNiaBxLSaec5WOSjMopZEcGaxVMAzUvwIFjDNwtzIXo=)
24: 706D3EA4140211EB87D7320FC4F9AE02.roa (hash: a/CArtNqj+X7FLzknDiVLBMQF895RFRrNOFXjFmjzNk=)
25: 8C9FFE4C0F2F11EE85C26C11C4F9AE02.roa (hash: j4EoNG6mPHnfhB1j42qxfNdNciMiEtrw2eJw4okWk0c=)
26: 640C18A214AD11EEAA685687C4F9AE02.roa (hash: rUC7HAYZSDdTVk9lHvd/Wl7kYoqQUYqgnEKO2kEnvDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3983 (0xf8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFA0, serialNumber=ADD9418F0F9B55F3B7376A093DB11DBAD3AEFEC8
Validity
Not Before: Dec 18 17:43:32 2025 GMT
Not After : Dec 25 17:43:32 2025 GMT
Subject: CN=69443d44-ff6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:9a:0a:b9:d8:7d:51:8a:0d:f8:b6:08:18:
a3:09:47:dc:20:97:8a:5c:a3:44:ac:7c:17:84:c6:
23:46:0b:a6:cb:d0:c1:41:73:99:79:aa:e2:58:89:
58:17:68:48:51:87:c4:59:4d:0c:41:c3:a7:d4:2c:
a8:56:b8:fc:86:da:cc:6b:02:08:56:b7:09:47:72:
32:e7:3e:d7:24:87:c2:10:48:ff:e1:ee:47:60:60:
91:0a:dc:6c:12:55:43:4b:3d:fb:6f:dc:e1:66:33:
a8:ff:f2:03:12:dd:3c:4a:8a:a6:87:a7:94:5e:5f:
05:ae:7c:65:2e:d8:4c:c1:64:6f:c0:64:04:76:a1:
dc:6b:12:90:6c:22:a3:08:49:8b:50:15:dd:dd:71:
d0:6b:a8:f3:b6:9a:d0:0c:29:72:ee:ec:a7:9a:87:
0b:cb:d5:f3:dd:9c:66:98:e7:13:19:20:29:45:71:
a2:9a:87:46:07:e3:d2:8b:ca:88:68:8e:10:84:93:
65:a1:2d:36:b7:94:a4:0d:eb:14:75:eb:a5:94:2d:
fc:e8:35:15:1d:8e:19:b9:84:fa:5e:1d:04:d3:55:
b2:8e:ab:44:72:42:de:de:cc:c5:a3:32:ee:f4:7b:
39:dc:5e:bb:e1:80:7b:e1:2e:83:42:c2:df:d8:b1:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4C:AB:73:D4:58:C4:7F:11:7E:69:FF:1F:1D:17:44:81:4B:6B:B2
X509v3 Authority Key Identifier:
keyid:AD:D9:41:8F:0F:9B:55:F3:B7:37:6A:09:3D:B1:1D:BA:D3:AE:FE:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdlBjw-bVfO3N2oJPbEdutOu_sg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/1D66D486D8CB11E9BAE24D21C4F9AE02/rdlBjw-bVfO3N2oJPbEdutOu_sg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:b8:7f:58:2f:ac:e0:0b:bb:ae:63:16:f0:5f:1b:f6:6c:
e3:65:0e:b1:08:89:77:f5:a9:3b:1a:47:bb:87:0f:7a:1a:87:
bc:76:af:ac:5c:bc:be:8a:31:62:14:cf:08:01:76:4a:3d:52:
99:0c:ef:f7:5c:02:c2:b2:3b:1b:b5:fe:eb:5e:f8:74:02:80:
b9:fd:fc:d0:f8:06:e0:95:51:02:3a:f0:15:4f:f4:fb:4b:b9:
48:65:f5:c1:fc:6f:a0:69:1b:3b:9b:82:f7:55:49:65:a7:86:
08:d1:10:e3:8d:86:55:8c:54:4e:91:0b:72:8f:d6:7c:5c:12:
68:8e:c6:99:da:83:e0:b6:6b:11:d3:c1:55:71:21:47:56:ef:
cf:2c:58:3f:e8:0d:a8:fa:dc:77:ca:0e:46:a9:44:c2:d8:03:
18:ad:36:87:78:45:30:9d:a0:cd:86:4c:7f:c9:e1:a4:3f:d6:
dc:fc:87:57:5b:5b:60:6b:3d:c0:83:b2:c1:0d:60:d3:ac:20:
f0:d2:43:25:c5:78:f8:b6:b1:31:8d:43:47:4f:44:48:e3:88:
c2:99:b8:c3:04:ea:b7:9a:4d:ed:68:97:ce:86:08:cb:de:3d:
d2:19:65:42:00:3d:ef:46:d6:84:cd:e3:fd:a6:fd:d2:40:4e:
41:fd:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:59:34 2025 by rpki-client