This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
File: MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json)
Hash identifier: vEjd05fcnC2guerNkw10c1kT1YtB2pQDZHg9ylH1cHA=
Subject key identifier: DB:C4:8B:F2:9E:64:6B:E0:2F:59:29:8F:B7:59:C4:BA:5E:26:FC:57
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Certificate issuer: /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial: 0408
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
Manifest number: 03ED
Signing time: Thu 18 Dec 2025 23:53:47 +0000
Manifest this update: Thu 18 Dec 2025 23:53:47 +0000
Manifest next update: Thu 25 Dec 2025 23:53:47 +0000
Files and hashes: 1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: K/t0+H2W5V17n2QJCfdeK+GmWk9etfnDYiNizD2CRfM=)
2: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (hash: MCYapqJJn25HSBUdIU2//eLRRdVWTHyVws8goqwfwG8=)
3: 3A3E36B6631811F089107C4AC4F9AE02.roa (hash: o4sYy8DACcosKEOscD14T0NGuyOhoqxkHKs6D2ANTmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:53:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1032 (0x408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Validity
Not Before: Dec 18 23:53:47 2025 GMT
Not After : Dec 25 23:53:47 2025 GMT
Subject: CN=6944940b-421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:39:07:c7:3f:8c:28:93:0d:20:05:66:a6:
cd:84:d9:4b:e3:05:e8:0a:92:f8:ee:ea:6c:8b:90:
5e:c8:a1:1c:2e:b8:06:ba:0f:9f:cc:aa:a5:c2:6c:
5b:97:5b:3e:30:68:74:93:fe:6d:c4:ea:48:21:ca:
12:32:81:53:ae:ce:35:6b:0b:07:0a:ff:2a:32:de:
ee:6c:74:86:fa:54:a6:8b:ec:9a:68:7c:ff:fd:b5:
1b:e7:74:b0:2d:52:93:b8:89:25:07:82:74:2a:bd:
f0:1b:fc:7f:7b:22:ad:2d:54:44:13:99:ef:d2:86:
9d:67:55:62:50:2f:8b:d6:93:74:83:df:b1:79:f2:
1e:59:90:dd:47:1d:d8:1d:20:5c:4b:6b:f9:ab:7b:
92:40:55:48:7c:a6:77:68:72:ce:0b:3a:21:a1:1a:
d2:80:d4:71:9c:56:ae:55:75:91:20:02:10:f9:49:
10:76:33:83:8f:f5:ac:91:bd:21:32:57:c1:0e:a6:
36:51:d1:88:db:79:d0:5e:4b:92:28:5b:f0:23:c4:
96:89:67:09:d1:70:08:61:7e:b5:ab:35:df:74:e2:
01:94:b9:67:3d:73:cf:8b:82:e8:20:c8:47:1b:90:
7c:24:90:28:80:17:86:9d:4d:85:4c:08:98:06:17:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C4:8B:F2:9E:64:6B:E0:2F:59:29:8F:B7:59:C4:BA:5E:26:FC:57
X509v3 Authority Key Identifier:
keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:83:f8:d1:3f:04:74:8c:ee:aa:bc:9f:59:17:36:82:2c:
d9:ad:00:1e:66:b6:96:18:1a:2f:42:53:24:43:c2:a7:da:6a:
9b:c7:8a:85:2f:46:b9:71:a7:e6:48:85:c2:11:01:f8:a2:93:
c4:68:15:be:42:bf:5f:e3:cf:78:e5:ae:25:3a:54:8c:b5:17:
6b:21:4c:fc:20:f6:bb:58:a5:4c:3c:7a:f7:8a:fc:b3:e7:ce:
d8:fd:7f:81:ad:73:5b:ba:c0:b6:04:55:4e:47:45:b7:33:0a:
3a:31:e3:9f:e6:dd:41:70:6c:89:ef:36:79:83:44:3c:20:a7:
d3:54:60:fa:03:e0:91:26:85:94:c4:27:63:28:76:e2:22:60:
72:d1:ff:af:09:c8:4c:24:3b:8a:0d:d7:a9:2c:c7:06:c9:b8:
1b:2f:89:20:a8:37:76:b2:f9:09:78:cd:44:6d:01:32:7d:17:
12:13:d5:0b:61:ee:d8:11:22:2a:8e:ea:a9:df:d4:3c:37:48:
41:9f:4b:24:58:d2:cc:04:2b:e5:47:0e:03:bb:94:44:40:6d:
5c:3f:6f:64:20:64:8e:9c:85:36:bb:0d:09:ae:3a:5e:96:25:
c3:51:0c:e8:ef:64:a1:ba:a7:38:99:90:fe:0b:5b:d7:9f:55:
1c:a6:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:31 2025 by rpki-client