This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json)
Hash identifier: 38t/YL4IQkTDEXwxCTvQ6obcTh66/Lhma/GxFuVRvVQ=
Subject key identifier: 9F:03:58:E2:8F:98:44:75:3E:85:7D:11:0B:6B:6F:F9:3C:24:D0:2D
Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
Manifest number: F0
Signing time: Fri 19 Dec 2025 04:28:17 +0000
Manifest this update: Fri 19 Dec 2025 04:28:17 +0000
Manifest next update: Fri 26 Dec 2025 04:28:17 +0000
Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: bJi9lw78yu6stcY9oQchoxsgyEpqeiiIElGXO1Av1RQ=)
2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: VymoAbVW0Xjer0qffAdo09mun74sopBFqTSpIfpfxa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E
Validity
Not Before: Dec 19 04:28:17 2025 GMT
Not After : Dec 26 04:28:17 2025 GMT
Subject: CN=6944d461-9654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5e:5a:53:22:38:4a:23:a6:68:44:3e:c2:ec:
89:5f:da:90:1e:fc:cb:e1:bc:24:29:d0:af:02:fd:
83:2f:8b:ba:9f:97:81:36:8c:ad:3e:2b:f4:cb:be:
68:b9:9a:16:06:3c:79:8d:af:48:ed:42:a6:9c:c9:
d6:81:19:a5:79:de:76:05:d6:fd:dd:db:42:1c:57:
9b:27:cb:eb:ad:47:55:3f:90:3b:2a:3a:dc:9c:ff:
7d:5a:93:39:56:c8:57:47:9d:39:38:bd:5b:d2:48:
cb:f1:c0:f6:97:ab:30:37:5d:2d:35:e5:d6:3f:ee:
b0:d2:87:cf:17:bf:4d:c8:84:01:bd:86:f7:ed:eb:
25:a0:33:14:9a:6b:cf:a1:98:bf:e3:ff:4c:03:0a:
a7:5d:11:aa:7a:c0:8b:fb:11:e5:0d:8e:00:15:57:
e0:a2:44:56:72:77:c9:75:9e:46:a5:d3:98:37:bf:
9d:9e:74:98:c4:e6:5d:3a:bb:2b:c1:17:53:9a:00:
26:e3:3e:93:3d:48:32:10:97:3e:b5:72:01:2c:c2:
c4:2c:a8:bf:64:95:18:96:70:29:61:ec:41:bb:13:
2f:2e:59:07:8e:76:a3:69:7f:95:0e:b2:9d:1c:4d:
37:fd:f4:00:52:5e:3f:48:33:27:29:6e:30:b1:e9:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:58:E2:8F:98:44:75:3E:85:7D:11:0B:6B:6F:F9:3C:24:D0:2D
X509v3 Authority Key Identifier:
keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b6:ce:2d:c8:20:08:0b:f1:bc:da:ef:3e:96:c8:24:66:c1:
f4:0d:7d:6d:44:c6:d1:fb:f6:d5:cb:af:35:6c:a6:53:39:ae:
ce:2e:6f:04:a3:74:ac:c8:ab:1d:ec:b6:ee:06:0f:45:74:25:
53:2a:6e:81:01:44:5e:b8:f4:4c:86:eb:fb:ae:c1:4f:51:a8:
40:07:4e:9e:ab:23:e3:50:be:10:3a:51:e4:f2:60:91:26:32:
ea:a7:07:8b:ca:35:92:59:31:3e:1c:20:85:88:45:dc:13:eb:
10:d7:5f:16:09:47:dd:88:b7:3a:bc:2e:f1:7c:43:40:1e:7f:
4a:ec:97:4c:eb:9c:59:04:e8:a5:94:6b:ba:65:aa:b0:55:61:
72:87:9d:69:c4:ca:f7:f6:c3:53:ec:55:05:4d:f8:cc:fd:4b:
70:1b:e4:bd:f2:21:3d:06:8d:2c:1c:07:cd:5c:77:86:5c:a2:
09:84:43:7b:29:a4:dc:ce:5e:4b:fc:d7:20:c9:db:2b:8e:38:
3d:a2:54:ef:4a:eb:d5:d1:64:0a:e7:c3:2f:28:c7:b3:d8:76:
1a:45:c7:72:a8:c0:86:83:bd:6d:90:4f:7a:16:5e:b5:cd:88:
3f:53:93:73:96:43:8d:10:0a:9c:87:07:e8:a1:d5:6d:ee:46:
25:9f:7f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:59 2025 by rpki-client