This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
File: PQaSnY1eH2juI-yj-UjP96LklbM.mft (raw, json)
Hash identifier: W6zw90Csa5HqivqroHIOvurSfjE9nsQL3W1IhrZF1C4=
Subject key identifier: EE:77:C7:35:9D:7E:3E:32:0F:FF:C5:38:18:B2:F8:82:03:6D:43:8A
Authority key identifier: 3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
Certificate issuer: /CN=A91DDCD9/serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
Manifest number: 0B65
Signing time: Sat 20 Dec 2025 18:47:46 +0000
Manifest this update: Sat 20 Dec 2025 18:47:46 +0000
Manifest next update: Sat 27 Dec 2025 18:47:46 +0000
Files and hashes: 1: PQaSnY1eH2juI-yj-UjP96LklbM.crl (hash: OBmmv++J7aKgydMnaX/AppX4XW0VHhyqzrOk48wOFLc=)
2: 41D7A1D4AB0511F0AD64C814C4F9AE02.roa (hash: rmQtPBzLnmMnKWqEbpn/ZFyPKybx/x0dYiK1HD1kfdo=)
3: 4140D222AB0511F0AD64C814C4F9AE02.roa (hash: OQA1xcKI/hiAbUi76rdd20yEjY2R6araSSWLUXcKQG8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DDCD9, serialNumber=3D06929D8D5E1F68EE23ECA3F948CFF7A2E495B3
Validity
Not Before: Dec 20 18:47:46 2025 GMT
Not After : Dec 27 18:47:46 2025 GMT
Subject: CN=6946ef52-7aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:c6:85:04:66:1b:03:d3:0f:d0:5d:01:94:
39:d0:8c:17:1b:a5:50:d2:4c:68:21:33:40:dc:e1:
1b:23:67:0b:19:d1:69:09:f2:9d:6a:d0:4f:42:a9:
01:34:79:fd:f9:af:f8:da:ac:9b:28:c7:65:5a:a7:
d7:54:46:c1:57:31:01:b7:5b:0d:5b:25:25:68:88:
0d:88:64:ef:71:08:6c:8d:27:b1:6e:aa:a2:21:24:
51:32:1d:b4:ad:69:d7:ca:4c:29:65:01:e9:b4:20:
b7:87:ee:54:42:13:ff:12:14:aa:25:54:3b:a7:d0:
e9:b9:1b:c4:67:d2:40:c6:ce:9b:cc:e0:7c:74:0c:
a5:72:29:e9:49:57:92:95:7f:33:0b:a8:f4:bf:06:
3a:d6:2e:70:86:2a:f9:43:61:be:1d:12:66:41:d9:
1d:39:70:b0:fb:57:7c:7a:f1:01:e1:ed:66:d0:2f:
c8:e4:02:1f:5d:a2:1c:2a:b8:89:a9:7e:37:24:be:
ad:1f:4d:4d:1e:ee:82:c4:6d:94:ef:26:8c:44:ad:
be:e6:ec:e0:ce:0e:87:78:56:16:bd:48:0f:1f:cc:
63:52:ce:58:d2:b7:f6:d8:12:39:dd:ca:6c:af:b6:
d0:55:2d:ef:71:22:a7:3b:a1:e0:52:bf:d5:77:a1:
c1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:77:C7:35:9D:7E:3E:32:0F:FF:C5:38:18:B2:F8:82:03:6D:43:8A
X509v3 Authority Key Identifier:
keyid:3D:06:92:9D:8D:5E:1F:68:EE:23:EC:A3:F9:48:CF:F7:A2:E4:95:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQaSnY1eH2juI-yj-UjP96LklbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/PQaSnY1eH2juI-yj-UjP96LklbM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:33:f6:85:ec:9f:f3:a7:b7:39:e2:e9:65:fe:26:b8:b9:f7:
e2:65:7e:07:47:4d:cb:a8:22:34:55:2f:ee:8a:42:58:2e:5b:
77:6f:af:67:b8:10:d0:6c:bf:fe:bb:16:c8:6c:fa:6d:55:41:
ba:a6:9d:ea:32:c3:07:8a:d6:3f:72:bd:39:0c:39:f2:1e:cb:
f4:93:09:52:eb:03:f3:8b:06:69:1c:48:93:d7:a2:de:53:16:
6a:4c:80:32:f8:d4:48:63:0c:d2:6e:d0:4f:4f:c7:90:77:de:
ce:17:fb:82:0d:5e:2a:13:31:45:35:62:8b:4e:44:6c:d7:18:
ca:1f:4d:04:34:29:00:0f:b1:91:84:18:52:a8:5f:e6:32:78:
bd:23:61:2e:1a:5f:3c:b8:7d:c4:45:fa:f9:4c:b2:70:17:7e:
3e:82:da:ca:14:c7:9e:ad:d3:94:75:e0:c8:ae:aa:26:52:0d:
04:69:ce:74:59:dd:8e:cc:3b:63:b1:e6:c2:3a:59:72:29:8c:
77:23:63:be:72:b7:be:b0:f2:0d:ed:4e:89:7e:9f:f0:f9:32:
26:c9:9a:27:44:a5:2d:ea:ee:d1:45:e2:22:b9:dc:8f:3a:e8:
98:f3:c5:49:21:2b:b1:4c:1e:46:d5:36:26:2a:b7:19:86:47:
47:52:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:56:52 2025 by rpki-client