This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier: Ask/nhsL211h+gFGTVGEhqKkUBubYStBAGIyAur5v1k=
Subject key identifier: 7C:78:C7:CF:17:97:C0:B0:CA:75:C3:A5:A8:BD:E6:34:FC:4C:65:49
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial: 04BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number: 048E
Signing time: Sat 20 Dec 2025 23:27:24 +0000
Manifest this update: Sat 20 Dec 2025 23:27:24 +0000
Manifest next update: Sat 27 Dec 2025 23:27:24 +0000
Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: 391FdLGc3dNJ8rfWf5YEh5ooYcOuO3j4C18MITpRL2w=)
2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:27:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1211 (0x4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Validity
Not Before: Dec 20 23:27:24 2025 GMT
Not After : Dec 27 23:27:24 2025 GMT
Subject: CN=694730dc-874b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:6a:fd:05:4c:f5:1e:5e:eb:00:cd:86:e8:
06:3c:dd:cf:d2:a0:b4:89:47:30:0f:ca:11:3d:22:
4d:7c:8c:3b:e2:d0:77:36:1c:ff:8b:fd:ff:da:23:
ed:33:04:1d:ba:6a:d2:6c:47:90:f1:2d:6f:72:d5:
2e:32:d6:20:5b:34:31:aa:c4:a2:b8:5d:df:d5:fe:
30:f5:ad:db:ee:4a:59:f9:76:ec:69:28:66:c2:c7:
c3:30:06:6c:75:25:26:7d:58:67:95:8d:ac:6e:15:
06:1a:68:9b:a7:11:96:e3:12:b1:a1:a6:9a:cc:4d:
5b:cf:e6:ee:06:4f:c6:81:b8:1c:12:4f:74:0e:29:
00:5d:5f:e6:9d:bc:a8:78:43:f7:b0:6b:02:a9:e7:
d6:75:cd:5a:b0:38:88:1f:d3:c8:e6:81:ea:03:31:
19:ef:4f:9e:fc:da:d1:23:33:b7:b9:68:87:ff:ab:
00:e4:f8:d1:d5:e4:48:70:aa:0f:17:b9:b0:05:ee:
56:d2:d8:68:89:9e:d6:82:7c:74:9e:97:08:f6:8f:
44:c4:aa:e9:73:f5:fb:93:6b:45:e9:34:d3:6e:b0:
c0:70:1e:11:f0:f4:12:b6:38:c2:e2:3d:00:4f:06:
29:b8:dd:ea:c3:f3:52:a0:c6:62:32:7d:04:09:d4:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:C7:CF:17:97:C0:B0:CA:75:C3:A5:A8:BD:E6:34:FC:4C:65:49
X509v3 Authority Key Identifier:
keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:eb:7d:da:82:16:a8:19:b5:2b:e6:c0:5c:51:d0:0d:56:
84:8c:59:62:e8:5d:98:03:4e:e8:8d:e2:7f:c1:24:54:2a:dc:
0a:a8:51:64:85:08:40:fb:da:3d:a5:ef:9b:6c:b9:7f:42:28:
15:11:35:c8:be:f2:8f:c4:dc:b7:72:69:25:60:03:02:24:1d:
32:aa:18:18:f3:56:78:06:a0:dc:e4:56:ca:49:ce:34:26:bb:
d3:82:54:22:b1:ea:06:0d:f4:7c:a4:f2:6f:55:3d:63:de:b4:
89:6d:36:f1:35:27:0e:8e:14:ec:3d:a2:31:e1:72:f5:e3:e0:
2c:55:03:af:23:36:8b:40:f6:42:54:0e:bd:26:fd:80:42:4f:
bf:24:b9:55:9b:fb:20:fe:2e:ad:e9:3a:c9:58:76:2f:52:2b:
6c:75:61:5f:d4:fa:68:25:5d:31:8a:bf:48:cc:df:8f:1a:c4:
43:75:1d:e2:25:ca:47:a9:28:71:9c:cd:57:69:f8:d7:df:55:
24:04:3d:7f:c2:97:ee:4b:80:cc:1e:0f:2f:15:7c:2c:0a:c6:
8f:b9:6c:27:4b:4f:f8:fd:b3:70:75:2a:60:9d:3b:16:53:17:
4e:d2:54:3d:4b:cd:7d:70:1c:aa:5f:41:b8:e6:78:32:ce:83:
35:a0:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:43:02 2025 by rpki-client