This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: 0wz7//1IbdKthRjQdj4vxVOzxNNj56M0mw0Piqr/oK8=
Subject key identifier: CC:F0:85:68:20:D9:52:E3:5E:12:85:EA:07:6D:A6:60:41:23:82:4E
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 01B3
Signing time: Fri 19 Dec 2025 02:19:16 +0000
Manifest this update: Fri 19 Dec 2025 02:19:16 +0000
Manifest next update: Fri 26 Dec 2025 02:19:16 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: z52wRONW62+fgmnEaz0SDXeAArQL63BvjwQ8L0xJ7G0=)
2: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=)
3: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Dec 19 02:19:16 2025 GMT
Not After : Dec 26 02:19:16 2025 GMT
Subject: CN=6944b624-e151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:bc:61:2d:23:64:f1:69:27:fd:96:62:1f:
02:5f:f1:60:f4:68:61:2f:9c:79:bc:8b:d7:e8:0a:
e6:88:d8:66:89:82:d8:26:5c:f3:f5:ca:39:91:39:
25:7f:71:22:04:4b:e1:a4:de:5b:ac:61:ee:f4:69:
db:01:d6:05:4e:0a:97:7d:3f:0c:e5:d1:f5:b9:42:
f4:72:bf:89:15:12:03:13:24:ce:ab:95:62:e0:75:
61:9b:05:0f:bf:88:65:80:e3:13:15:b3:a8:79:65:
e4:68:45:31:7a:30:c2:7c:25:13:ab:5e:d4:bb:a4:
23:aa:29:05:a4:e0:45:99:8b:2c:da:be:ba:75:d8:
6d:d8:18:98:5e:2e:fa:27:99:3d:9c:d5:a9:b7:e8:
34:2f:e6:5a:84:68:47:07:70:0c:08:02:12:f3:72:
9e:43:fc:74:54:b1:f0:85:db:d7:5c:d2:9c:18:5b:
14:f5:08:28:8f:56:50:47:4c:8b:cf:98:a0:45:75:
19:7e:c9:a8:a9:cd:c5:ad:bc:8e:65:ab:3f:ce:65:
42:b4:f5:53:63:97:e0:f8:89:a9:43:26:2c:31:9e:
da:c7:1d:b7:2f:4d:66:c3:20:34:17:6d:9c:d3:a8:
c4:f7:05:a3:a8:a7:5f:8a:7c:07:d0:c7:95:47:19:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:85:68:20:D9:52:E3:5E:12:85:EA:07:6D:A6:60:41:23:82:4E
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:a0:01:b8:1c:5e:60:bb:eb:40:b8:46:ca:c4:32:04:48:34:
e5:d7:97:91:48:da:ab:95:6d:a8:95:a4:22:2a:8e:b6:bd:4b:
29:5d:1f:85:14:f3:0b:59:cd:dd:16:4f:b8:58:5c:b4:5f:2a:
d9:5b:ae:47:5c:4e:be:dd:92:7e:7e:03:08:f5:23:ac:8e:73:
be:c1:95:ae:23:bf:c5:7c:a9:b2:10:3c:fa:27:33:40:b6:96:
d3:73:3d:50:a0:84:84:c4:aa:7a:8c:9d:c0:16:cb:54:26:fc:
9b:a0:f3:9c:84:96:c0:f1:ea:83:14:8a:c7:42:dd:12:e9:28:
5b:d1:da:aa:4b:9d:b1:f4:fb:a5:31:d3:25:3b:f7:26:17:b4:
a9:35:5d:05:6b:3f:4a:9a:4e:6e:44:b0:8f:3e:e1:16:69:d3:
97:3d:2e:18:8a:b6:c5:fa:7a:22:56:ce:f4:52:ca:56:ce:00:
fc:6b:97:22:ce:82:7f:b0:26:0f:6e:67:54:e0:81:8d:42:b3:
99:59:82:0d:7a:c7:97:54:58:6a:29:e9:1a:6e:d3:61:91:46:
cf:e6:3b:77:42:17:39:6e:b5:d6:e1:62:89:e1:cf:40:e7:a7:
81:6f:c9:62:f0:7b:94:89:ce:79:83:df:56:9d:3b:74:4b:bb:
52:06:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:58 2025 by rpki-client