This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: Hezn0/qwxhrAgzlEXDJ1+vUkS4u1ya0tH9s2Ixu0RaY=
Subject key identifier: 02:09:94:41:18:64:FB:BF:72:19:60:82:C7:E9:11:3F:8D:F2:7E:CA
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: 0109
Signing time: Fri 19 Dec 2025 04:07:57 +0000
Manifest this update: Fri 19 Dec 2025 04:07:57 +0000
Manifest next update: Fri 26 Dec 2025 04:07:57 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: PEy6vTojU9+clHKGfdV2CnP79icDIXwONwuP0IyKzcU=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Dec 19 04:07:57 2025 GMT
Not After : Dec 26 04:07:57 2025 GMT
Subject: CN=6944cf9d-4130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:bd:f9:49:28:b6:46:c7:ed:f8:e7:bf:bf:
f1:b4:99:3c:69:2e:8f:62:bd:2b:90:49:7f:88:e5:
0a:cb:8b:81:dd:05:71:be:d7:3b:a4:b0:fd:0c:17:
d1:97:e6:11:a4:21:07:f1:f1:4e:4b:a0:7e:1c:60:
5e:00:c8:53:f0:d3:0a:a3:49:6e:c4:6b:2b:cf:15:
63:92:8b:e5:b2:03:ea:0b:2f:20:2f:ac:5b:12:fd:
d6:41:a1:9b:22:ab:de:19:61:4c:eb:22:e1:1a:27:
c0:e0:02:14:5f:37:c9:4d:b8:4a:5a:28:54:8e:75:
56:16:ad:97:5d:de:8d:33:12:fb:77:6d:e5:53:3d:
70:70:c0:fb:06:df:83:b9:09:13:ed:e1:b9:52:36:
b0:d5:fd:f9:1f:82:04:b7:f0:ec:ca:28:4d:f4:70:
56:47:e5:3f:c1:ab:9b:97:55:ae:4a:d1:43:53:a0:
c7:f3:f7:89:62:ae:62:fa:68:be:64:95:8f:e8:d4:
52:bc:47:4a:4a:68:53:55:5f:05:f9:de:78:e4:b2:
df:c8:c9:37:ce:4f:1e:12:2b:dd:c3:13:7d:45:a1:
bf:87:9e:21:63:ee:71:e3:52:52:55:5a:29:c5:56:
3d:ef:a2:f8:2b:eb:b6:87:45:8f:4e:54:8d:95:40:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:94:41:18:64:FB:BF:72:19:60:82:C7:E9:11:3F:8D:F2:7E:CA
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ab:9d:10:5c:e6:d7:de:34:57:e7:ab:af:f1:9a:4f:18:8f:
84:e1:a6:ba:fe:6b:5f:17:d9:2b:87:ba:0f:5a:73:3a:d9:f8:
2b:cf:9f:d7:28:7a:1b:f0:2d:61:af:4f:ad:24:2b:85:28:41:
1e:8d:49:e6:98:7e:15:eb:15:f1:2b:85:37:08:7d:95:7b:8f:
27:d4:8a:69:24:04:22:e2:d3:dc:24:f2:10:cb:ed:41:d8:e7:
80:8e:34:57:3d:be:cd:33:5d:f4:b8:5b:9e:de:73:98:bb:e3:
fc:d3:9f:13:c2:31:29:47:20:36:ab:56:de:a5:78:0e:af:b9:
00:26:af:68:90:5b:8c:37:94:bc:6d:02:c8:92:e5:91:3b:d6:
de:51:25:a0:02:c9:6f:ba:5a:90:77:90:75:a8:98:ea:f4:f2:
36:2f:d8:03:81:34:dc:5a:a4:85:c8:73:34:c4:46:08:c6:4b:
e7:9a:da:7c:56:da:91:ab:82:76:61:a4:ed:fd:31:f6:a5:82:
c1:47:f6:26:17:49:66:79:0b:33:38:fd:78:18:69:90:77:97:
5f:74:04:07:1f:92:a0:50:a5:a0:9e:fd:77:7f:32:bb:d6:ff:
cd:9c:9f:ca:48:3c:1c:cb:e8:d0:51:9f:e2:86:12:d9:b9:9e:
7a:ea:ee:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5
OEQ0RUJEMUQwHhcNMjUxMjE5MDQwNzU3WhcNMjUxMjI2MDQwNzU3WjAYMRYwFAYD
VQQDDA02OTQ0Y2Y5ZC00MTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh+e9+UkotkbH7fjnv7/xtJk8aS6PYr0rkEl/iOUKy4uB3QVxvtc7pLD9DBfR
l+YRpCEH8fFOS6B+HGBeAMhT8NMKo0luxGsrzxVjkovlsgPqCy8gL6xbEv3WQaGb
IqveGWFM6yLhGifA4AIUXzfJTbhKWihUjnVWFq2XXd6NMxL7d23lUz1wcMD7Bt+D
uQkT7eG5Ujaw1f35H4IEt/DsyihN9HBWR+U/waubl1WuStFDU6DH8/eJYq5i+mi+
ZJWP6NRSvEdKSmhTVV8F+d545LLfyMk3zk8eEivdwxN9RaG/h54hY+5x41JSVVop
xVY976L4K+u2h0WPTlSNlUCezwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIJlEEY
ZPu/chlggsfpET+N8n7KMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1
QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QUNBNy81MTdFNkU0QzQ1QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0Vldv
Wml4ZTVvRFAzd3lZMU92UjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiq50QXObX3jRX56uv8ZpPGI+E4aa6/mtfF9krh7oPWnM62fgrz5/X
KHob8C1hr0+tJCuFKEEejUnmmH4V6xXxK4U3CH2Ve48n1IppJAQi4tPcJPIQy+1B
2OeAjjRXPb7NM130uFue3nOYu+P8058TwjEpRyA2q1bepXgOr7kAJq9okFuMN5S8
bQLIkuWRO9beUSWgAslvulqQd5B1qJjq9PI2L9gDgTTcWqSFyHM0xEYIxkvnmtp8
VtqRq4J2YaTt/TH2pYLBR/YmF0lmeQszOP14GGmQd5dfdAQHH5KgUKWgnv13fzK7
1v/NnJ/KSDwcy+jQUZ/ihhLZuZ566u5q
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:02:13 2025 by rpki-client