This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json)
Hash identifier: dtC93gOoMJWqdCqFSoSXTq2QGsa7tL3aus4svP09D2Q=
Subject key identifier: 0A:FB:45:65:0F:7F:EF:42:74:80:C3:95:0E:E2:58:84:19:FE:4D:33
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
Manifest number: 0255
Signing time: Mon 29 Dec 2025 00:46:41 +0000
Manifest this update: Mon 29 Dec 2025 00:46:41 +0000
Manifest next update: Mon 05 Jan 2026 00:46:41 +0000
Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: Zy/xE16pEBZ01yCwJIXYw9OBy2uInqdqYceaTCD9ujg=)
2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 00:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Validity
Not Before: Dec 29 00:46:41 2025 GMT
Not After : Jan 5 00:46:41 2026 GMT
Subject: CN=6951cf71-60e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:67:07:42:23:50:58:b3:0e:83:a8:46:8c:
dd:d6:07:55:ee:36:f6:7c:3d:e9:c5:53:2c:34:2e:
8b:2f:e0:91:6a:12:c0:41:84:ec:d7:de:c3:4c:9c:
04:b1:bc:47:49:84:4a:c2:01:69:ee:d1:a6:ad:20:
8c:2f:20:aa:0b:88:35:02:dd:69:b3:28:07:25:9c:
50:0b:3a:9d:f5:b0:75:ab:56:cf:14:d1:a2:19:fb:
ea:3d:23:52:73:7a:7f:57:75:3c:10:4d:20:01:22:
b7:95:8a:b9:90:a9:92:7a:e0:97:60:03:50:9e:c4:
79:b9:23:94:56:da:11:2c:90:9b:5e:ce:0f:a5:5a:
a0:37:d8:bd:90:76:a4:76:4f:2b:2f:4e:d8:9f:c1:
f5:7a:5f:f0:27:57:17:65:9f:ee:73:92:b4:6e:5b:
a0:0c:c3:67:6c:7c:e7:5b:54:c6:e5:36:b6:a1:9e:
07:4d:63:e2:94:86:9d:a6:e1:b3:76:95:81:cc:ef:
36:1d:e9:be:ab:26:32:ae:d2:90:2b:24:ad:ab:79:
7e:60:78:ca:96:9d:d3:bb:c0:4b:8f:87:d6:60:e2:
4c:88:45:63:8e:8b:88:8e:08:53:c3:10:0e:2a:8d:
1b:49:2e:a0:06:ab:48:b6:21:cd:4a:5f:7a:04:b3:
b5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:45:65:0F:7F:EF:42:74:80:C3:95:0E:E2:58:84:19:FE:4D:33
X509v3 Authority Key Identifier:
keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:8b:77:15:0e:08:ea:df:6a:06:18:39:7f:82:52:72:e8:a1:
9b:cf:4f:a4:d7:a4:76:98:6a:53:20:0a:47:cb:ed:ad:5b:36:
ea:1b:95:57:79:23:fa:c1:d2:67:bd:25:13:81:de:95:52:10:
6d:47:27:48:79:1e:82:92:9c:f4:0c:44:1d:2e:77:94:48:89:
15:43:00:a8:84:f9:43:fe:fa:28:6a:14:df:a1:aa:bd:72:42:
fa:13:59:50:3a:9c:04:81:92:24:e0:ae:22:a5:96:b7:5e:14:
30:02:b3:3b:2d:3a:c3:46:38:fb:8a:a2:a1:77:ba:82:bb:75:
1c:d9:28:ab:13:67:8d:7c:51:3f:cd:21:46:e4:f2:7e:64:58:
80:a2:14:4a:33:27:7b:6f:a3:f2:cd:7d:bf:40:84:70:b4:fd:
b6:59:94:6e:c6:c2:f5:e8:22:f6:f6:8c:f9:7a:8b:d2:52:dc:
35:2b:ab:ff:95:d6:bd:ed:79:f6:20:b3:5a:e6:58:e0:e5:82:
5b:d7:83:6e:bb:95:ac:54:79:4b:fe:49:1b:e4:03:79:1b:65:
8d:eb:9e:1d:cb:bb:7b:7f:91:97:e6:e8:81:0d:d7:ea:03:c5:
d0:6a:f2:98:d7:c6:e6:a9:2a:3e:63:20:88:4d:43:85:37:f1:
89:15:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:02:33 2025 by rpki-client