This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json)
Hash identifier: u8RIHWMe1J1vxUY/4B2Q5zDLzkzdg1U3Rj8UCRRF6Q4=
Subject key identifier: 42:8E:8D:AB:4D:B7:47:E0:03:2E:34:39:15:DF:5F:C1:E8:17:E3:AF
Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Certificate serial: 2034
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
Manifest number: 2027
Signing time: Thu 18 Dec 2025 15:53:14 +0000
Manifest this update: Thu 18 Dec 2025 15:53:13 +0000
Manifest next update: Thu 25 Dec 2025 15:53:13 +0000
Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: ZVdPu1ISQwWvT9V5eI7rAqJ9AJv/+G4S36lRCkKN3Ng=)
2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: X+fXZ0PrCkpU/Zz2pOrb1G2WQInc8FuVJwsYYh/w08g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8244 (0x2034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Validity
Not Before: Dec 18 15:53:13 2025 GMT
Not After : Dec 25 15:53:13 2025 GMT
Subject: CN=6944236a-2a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:30:1d:83:7f:37:b0:22:aa:65:a4:63:67:
81:ec:36:d4:01:58:56:ee:90:14:74:56:20:d8:4f:
d0:87:44:a0:af:f7:cb:09:f8:b7:6d:3a:28:b2:6d:
27:40:9c:6b:e2:77:6c:8d:48:23:f5:02:4d:7e:bf:
7f:76:a8:c3:0b:11:5d:85:2b:ea:15:58:a9:af:aa:
c0:04:06:0d:1e:85:44:aa:4b:e2:af:33:bc:e9:c8:
3f:db:8a:a7:94:bd:cd:8f:ae:01:56:4a:c6:88:c5:
8d:fa:06:88:f8:b3:1f:d5:07:72:dc:99:ff:de:07:
38:2b:83:72:e4:8d:5d:c3:e5:35:27:cd:8d:48:66:
0f:27:4e:d0:c4:a6:74:ad:e8:db:08:b3:b4:de:7b:
26:62:56:bc:36:39:3d:e0:5f:ac:56:dd:05:fe:ee:
18:ed:a5:d6:56:b0:c9:00:e6:33:c4:4d:25:c2:ba:
2e:f7:4c:33:ff:8c:c0:5a:29:df:58:56:a8:cb:c0:
40:d9:d8:9f:f1:ad:ee:94:fe:94:d0:e5:67:05:21:
6b:58:c3:b2:d8:fd:dc:e7:44:a6:2b:fb:0a:17:89:
0a:18:29:fd:28:3f:e1:a6:cd:1c:c0:dc:ee:29:91:
7d:c4:79:56:39:ed:e2:f3:72:7f:83:cd:ca:b1:1c:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:8D:AB:4D:B7:47:E0:03:2E:34:39:15:DF:5F:C1:E8:17:E3:AF
X509v3 Authority Key Identifier:
keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:e4:7a:00:4e:aa:e6:ef:d2:48:a3:13:82:8d:2e:48:e1:3d:
94:de:da:3a:1a:0d:e6:29:33:2b:ef:b6:c8:99:9c:2f:dd:a2:
71:3d:65:6c:8d:55:7d:a9:8a:ba:e6:5f:b0:f0:ab:1d:db:9b:
a5:15:3a:30:8e:00:d0:38:88:bb:ce:62:dd:b5:17:72:f2:a6:
37:2d:2e:7d:5f:b6:9a:73:9c:8f:e5:c3:2d:a7:78:fa:3d:c7:
4f:40:33:12:fe:bf:b2:90:b0:0c:e1:d3:64:43:91:ec:13:07:
0d:c5:3a:b5:e9:50:2d:6c:9e:b9:ee:c5:dc:87:e9:31:78:61:
22:9a:30:6a:77:d5:0c:43:ea:96:c7:1f:8f:ed:62:5b:b4:97:
2b:a7:28:d9:50:41:ec:29:ec:0d:45:e8:89:92:62:84:1f:20:
6b:8a:f5:c3:70:96:ec:be:f0:c8:7c:c3:f9:b7:5f:c9:89:39:
80:a0:4c:2b:40:d0:95:09:0f:aa:71:48:48:54:e2:f4:ae:7c:
82:cd:62:85:68:4e:3d:0c:3a:9f:74:f6:02:52:a0:d9:0c:dc:
53:13:8f:6d:10:f0:31:4c:06:dd:99:b1:39:77:90:c2:de:09:
74:6d:87:70:0e:20:99:f0:8e:c6:b8:b8:5f:cd:81:06:67:a6:
96:79:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:44 2025 by rpki-client