This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
File: 77aQcOLEAaX3cTPS27G6NB0X5h4.mft (raw, json)
Hash identifier: ZRkhFdgcf5Lb48dmgX00N1vetjlmAkoOcReouA9IJLE=
Subject key identifier: 8D:6A:E1:56:E5:75:55:86:53:C6:FD:C3:94:6A:A1:E5:AB:96:D8:D8
Authority key identifier: EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
Certificate issuer: /CN=A91D359E/serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Certificate serial: 0C84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
Manifest number: 0C7D
Signing time: Mon 22 Dec 2025 18:05:41 +0000
Manifest this update: Mon 22 Dec 2025 18:05:41 +0000
Manifest next update: Mon 29 Dec 2025 18:05:41 +0000
Files and hashes: 1: 77aQcOLEAaX3cTPS27G6NB0X5h4.crl (hash: 5wh3SGRkINbaMaXdYcxru15iV5IcdSRC9WdU4PAjYtk=)
2: 606EE7BC0DED11EA88AC0A29C4F9AE02.roa (hash: WgtMqOXutoCTVgnfA2uL+HiTE6KoWpCNsapDLYeBrco=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3204 (0xc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D359E, serialNumber=EFB69070E2C401A5F77133D2DBB1BA341D17E61E
Validity
Not Before: Dec 22 18:05:41 2025 GMT
Not After : Dec 29 18:05:41 2025 GMT
Subject: CN=69498875-471c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d3:3c:8b:92:47:db:23:9b:e8:81:36:39:91:
e4:89:c9:31:f1:d1:90:ef:47:31:61:e6:e3:05:48:
03:1a:fc:e8:02:3e:9f:e8:b2:18:7b:72:66:df:77:
54:be:ef:7b:30:bf:33:a7:1d:33:9d:b3:c3:42:e7:
b5:89:b7:e5:bf:c9:bb:05:85:45:9a:57:dc:d4:62:
a6:f2:b1:b1:ac:a1:89:4b:a5:98:0f:4b:bf:42:12:
fc:06:6e:65:72:a5:32:a5:b9:2b:1c:50:b0:b4:68:
d7:51:b9:2e:4c:93:c9:d6:45:f1:3c:6b:a3:89:4e:
a9:45:c6:eb:89:a5:93:db:81:bb:6c:b0:be:ee:ed:
e3:94:3b:aa:69:b6:21:b2:57:b3:09:f1:90:da:c4:
c8:c0:8e:ae:66:7e:fe:66:61:0c:36:e9:04:95:88:
2e:77:12:90:f1:49:15:78:89:e9:aa:3a:25:a1:f9:
7d:e8:8d:67:fc:6a:69:eb:4f:16:4e:84:d1:84:c7:
c4:d7:a5:f6:a9:25:e9:89:d7:78:2b:99:1e:0f:83:
d0:b0:08:2d:b9:95:b6:07:aa:26:fb:80:94:7b:b3:
a6:03:dc:1e:ba:95:52:ef:a6:68:70:a3:c2:0a:09:
ca:5c:24:ed:aa:a1:99:79:22:d7:ff:8a:39:09:93:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:E1:56:E5:75:55:86:53:C6:FD:C3:94:6A:A1:E5:AB:96:D8:D8
X509v3 Authority Key Identifier:
keyid:EF:B6:90:70:E2:C4:01:A5:F7:71:33:D2:DB:B1:BA:34:1D:17:E6:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/77aQcOLEAaX3cTPS27G6NB0X5h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D359E/6A4988B60DEB11EAB8E60B25C4F9AE02/77aQcOLEAaX3cTPS27G6NB0X5h4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:52:b3:1a:c2:b3:2c:f6:ed:6e:ba:5d:39:00:e5:20:85:
bb:68:18:c6:3e:de:7b:a5:2c:3a:0d:ee:5b:3a:d8:d7:83:ba:
b3:80:70:83:b1:a9:70:f5:2a:58:0a:34:64:69:2b:42:7f:0b:
f6:c4:e0:0a:bf:15:88:d3:3a:23:fb:f6:49:a5:58:c7:96:e3:
46:89:14:8a:24:d0:c0:17:42:9e:2c:97:83:23:d9:46:03:ae:
7b:d6:12:52:9c:f0:47:02:97:49:36:a3:5f:e4:04:79:73:ea:
59:20:2c:2f:67:72:77:f8:cf:59:42:47:d8:ec:d5:e7:23:2f:
2e:af:e5:2c:00:03:49:3d:f7:a5:89:6c:4f:3a:27:47:0a:ea:
64:f4:19:62:5b:e1:a5:0f:79:39:21:92:62:69:12:13:12:7d:
94:f2:3b:ad:b6:6b:ca:5b:01:79:d4:85:0e:22:b7:46:74:7a:
56:96:ac:71:e4:e6:2b:c2:b5:98:54:0f:4d:24:1b:55:fe:58:
74:0b:af:33:b7:33:22:92:33:44:4c:3e:b1:38:b5:08:bd:16:
6b:18:51:80:94:67:70:a3:52:2b:8f:a9:2f:da:4c:34:86:cc:
c3:d2:88:ee:10:74:a3:7e:74:56:db:25:65:6b:17:8c:64:80:
8e:10:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:42:20 2025 by rpki-client