This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.mft (raw, json)
Hash identifier: 8WrcI4zXDKpsU0x3UpG3yrVLu8mYdRShGgWCUMJxl0M=
Subject key identifier: A9:03:38:89:EA:5F:20:BD:35:90:9C:62:B1:AC:D7:E8:22:2F:FC:F6
Authority key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
Certificate issuer: /CN=A91D0F0F/serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
Manifest number: 54
Signing time: Fri 19 Dec 2025 06:11:18 +0000
Manifest this update: Fri 19 Dec 2025 06:11:17 +0000
Manifest next update: Fri 26 Dec 2025 06:11:17 +0000
Files and hashes: 1: 60yRrrkBmKp9PHgiHY4Ytwdd77k.crl (hash: dP70mFDAn34unVJO2ib/QF6Lr0c53/Zsx2nMIFY4Vyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9
Validity
Not Before: Dec 19 06:11:17 2025 GMT
Not After : Dec 26 06:11:17 2025 GMT
Subject: CN=6944ec86-c1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:cc:71:96:08:7a:8a:bd:3b:84:b3:37:b6:
48:8a:e8:6c:b8:e2:a2:c7:3a:b1:76:32:71:b6:d6:
09:fe:a2:10:9f:3e:df:39:fb:8d:77:c9:1b:81:52:
de:c5:f6:5f:fe:66:e7:00:41:48:fb:10:c9:16:ba:
6b:cf:8a:74:03:fe:5c:26:8e:79:88:09:b7:bd:aa:
ac:d8:2c:ae:3b:9f:28:cb:53:2b:62:3f:62:67:aa:
58:2d:f2:e3:88:c8:b4:53:17:b9:45:5d:0d:0b:35:
ad:a6:90:28:e5:19:7e:3f:24:2c:a9:a0:6e:cc:4d:
16:1b:f1:e6:a1:ef:00:8b:99:03:0e:30:bc:5c:ae:
00:eb:9e:39:46:7a:fd:0b:80:70:af:eb:04:f8:df:
80:dd:38:e5:4f:7a:21:48:0f:66:b2:d6:da:f7:2b:
5f:93:d1:37:86:23:a4:31:62:75:b8:75:fa:13:a8:
8d:19:f8:e0:f0:8c:ff:e8:14:16:aa:f0:2f:b6:2d:
a3:93:6a:35:ef:77:62:14:c0:7a:6c:ff:41:0d:43:
9c:5f:06:6c:be:d4:06:f6:11:5e:9a:72:ec:b1:c2:
0c:3c:34:7c:b6:ee:3c:93:ca:b0:65:ba:dd:8d:e6:
62:b5:62:9f:fe:23:d7:6f:45:03:a1:7c:6b:25:4a:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:03:38:89:EA:5F:20:BD:35:90:9C:62:B1:AC:D7:E8:22:2F:FC:F6
X509v3 Authority Key Identifier:
keyid:EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9a:ad:15:77:8c:e1:01:1f:d4:d8:8d:e5:e6:09:15:d2:5c:
51:dd:1b:f5:07:8d:f3:b9:83:95:2a:f3:87:d0:5f:6a:65:47:
82:14:50:4a:31:79:8b:4b:59:35:c2:74:79:a1:7c:7f:52:80:
96:a8:56:3e:83:29:58:de:4f:64:b8:20:c9:ca:c9:d5:5b:07:
a2:17:9d:52:79:a7:6b:48:fd:3e:b7:84:89:14:ae:24:af:a4:
74:99:5a:82:db:3f:e8:0b:86:83:91:12:ce:f4:4c:09:6a:91:
34:fa:50:f9:d5:62:e2:d7:9c:84:6e:39:b5:56:12:db:b6:57:
7c:07:cd:7b:2a:ea:9b:77:e0:17:25:44:74:5d:a1:d1:98:f6:
96:a1:1a:f4:d3:a2:c6:67:3d:b8:7b:db:09:65:61:76:5c:dc:
e4:1f:4e:58:86:33:be:cf:7a:57:ca:2e:b2:84:ad:dd:76:e9:
7e:4c:2f:57:07:59:1f:8a:bb:66:e3:1f:c1:cf:24:b5:81:45:
b3:c0:da:ed:1b:6a:bf:db:10:43:81:d0:9a:33:da:20:60:17:
fc:bb:f9:1a:57:ca:b1:dd:33:6b:c9:3a:17:92:fb:77:f4:d3:
b7:8f:04:03:85:10:f7:30:e6:96:d6:ea:c4:f4:a7:9d:ef:b5:
13:d5:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:58:51 2025 by rpki-client