This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
File: phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft (raw, json)
Hash identifier: CEXlbLZmzBz6dlbW0Y6qk70gTV5Q5a+JFJWruunx9wc=
Subject key identifier: 71:63:9E:B6:E4:65:70:92:B6:34:44:8E:CC:3A:C6:36:87:F1:17:2A
Authority key identifier: A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
Certificate issuer: /CN=A91D1623/serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
Manifest number: 01DA
Signing time: Sun 21 Dec 2025 02:04:31 +0000
Manifest this update: Sun 21 Dec 2025 02:04:30 +0000
Manifest next update: Sun 28 Dec 2025 02:04:30 +0000
Files and hashes: 1: phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl (hash: zpjKHy6gltztAgalPEwW/xgzZYOm/SsOMnoz6BUGn+k=)
2: 939530627B6311F0BF7B4936C4F9AE02.roa (hash: 3WTSm0ARO6OxYTvyrfdEmxZEWxigI2p51l76SgzYhn8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1623, serialNumber=A6150780E0BA11EA0ADC434AED383C8B82A8961D
Validity
Not Before: Dec 21 02:04:30 2025 GMT
Not After : Dec 28 02:04:30 2025 GMT
Subject: CN=694755ae-2201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:b3:70:a6:bc:7c:f1:f2:e6:05:31:83:3d:
c6:8a:2c:73:93:89:0d:a6:ae:de:d0:4d:d2:f5:eb:
57:72:f2:05:32:28:fb:85:21:82:48:e1:c8:0d:33:
08:32:c4:d2:15:66:0d:75:44:22:33:17:39:3a:40:
fb:96:67:74:d3:c2:7d:dd:26:4c:1f:25:f8:de:f0:
21:0d:7b:2e:fe:9d:7a:be:2c:0d:90:18:7b:b6:95:
92:d6:b2:0e:01:74:39:5f:a3:b6:a1:dc:9c:40:30:
2a:68:69:c8:6e:05:5f:fc:15:9e:07:70:37:80:5b:
23:5a:88:43:0a:6f:5f:1e:7f:51:c1:0d:0b:7d:b1:
21:c2:59:65:49:40:85:e6:20:61:1c:d7:9a:41:a1:
c3:12:5f:d1:b4:fc:17:d0:81:e6:d8:9c:67:6e:26:
de:31:60:9d:7b:4b:63:5e:c9:a3:25:92:fa:ed:99:
9f:24:e8:03:9a:50:84:9f:17:63:17:45:c5:a8:c7:
9d:e5:3e:c1:c9:a7:4b:6e:9e:28:4e:d1:c1:fa:a0:
58:93:1b:e7:a3:50:cf:db:49:21:f9:1b:ed:3d:b1:
1f:db:07:20:e2:11:d3:75:c4:23:81:a3:41:1a:eb:
34:55:d7:76:0d:ac:31:24:5c:ea:42:68:f1:15:f6:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:9E:B6:E4:65:70:92:B6:34:44:8E:CC:3A:C6:36:87:F1:17:2A
X509v3 Authority Key Identifier:
keyid:A6:15:07:80:E0:BA:11:EA:0A:DC:43:4A:ED:38:3C:8B:82:A8:96:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phUHgOC6EeoK3ENK7Tg8i4Kolh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1623/410735CA149A11EEADF1C610C4F9AE02/phUHgOC6EeoK3ENK7Tg8i4Kolh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:81:7e:f0:2a:74:f0:79:7d:34:b1:10:5f:d4:23:9f:ed:2c:
ea:4b:85:eb:2c:39:0d:03:fd:b1:33:f2:61:e2:68:89:2b:90:
7c:8e:4a:59:f4:3c:f6:a1:7d:7f:69:56:28:39:66:56:45:80:
44:60:ff:e1:05:54:f6:c4:d2:8b:f1:19:d2:60:72:31:d7:50:
12:de:47:18:94:08:f6:6f:2e:60:b8:3c:dc:1a:c3:1e:fa:e9:
ae:cb:c6:4c:3a:84:d5:26:a2:61:63:ec:d5:58:75:cf:8b:9e:
4b:bc:59:dd:11:1e:f7:22:82:3f:c7:74:f6:12:24:63:a7:43:
84:6d:c1:bf:ef:23:46:60:e9:7e:43:13:fa:47:1e:a9:2a:26:
41:79:9f:ff:2e:c1:db:30:0c:ec:ff:e1:e9:b9:9c:80:cb:02:
ce:d9:0d:49:23:fd:1c:6a:1e:e9:bc:b8:fa:9d:90:3e:d0:69:
e7:23:94:91:2b:4d:7b:dc:e0:c2:ae:cb:57:a9:2c:b2:93:3c:
ca:5d:36:98:62:69:70:03:9d:ff:53:13:f4:d0:58:4e:a9:11:
f6:ee:b2:07:d6:80:6b:f5:b5:f2:15:f4:be:a0:41:48:d1:37:
8b:8f:d9:81:b3:be:ee:89:eb:31:fc:54:2c:9d:82:ea:16:6e:
73:04:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:42:01 2025 by rpki-client