This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: B9H7Z1UpUih/DAGYX+xsfR+Hqa7kLtSLKi5FmIu6Tlo=
Subject key identifier: 36:CB:60:E5:EC:4D:C6:91:5E:2D:A2:D6:90:5C:29:51:EF:5C:7E:10
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 04A9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 04A3
Signing time: Fri 26 Dec 2025 23:05:21 +0000
Manifest this update: Fri 26 Dec 2025 23:05:21 +0000
Manifest next update: Fri 02 Jan 2026 23:05:21 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: 9Go6VMAenpbxeVq4Q8r/HCu+gZ+8fYV5rk4IN8JYR7E=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: mDuBvAb87vc0xqlLuEIwzuSg0BaaCa9nDXGB49E/55o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193 (0x4a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Dec 26 23:05:21 2025 GMT
Not After : Jan 2 23:05:21 2026 GMT
Subject: CN=694f14b1-69f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5a:ad:79:55:db:04:cf:f1:03:80:08:d6:59:
4a:b6:fc:be:90:d4:04:93:20:45:27:34:26:57:75:
f1:9a:9a:0f:e3:44:3a:43:bd:e3:d5:f0:d0:6f:02:
a4:5a:1f:e6:9d:10:cb:03:16:7f:df:58:67:21:c0:
d5:50:82:fa:e2:86:be:3a:7a:ec:42:d9:b7:b3:5f:
a4:d3:c3:4e:d0:df:2d:19:dc:ac:1a:f2:22:e1:e3:
8a:35:83:6f:f5:92:7b:1a:91:48:b0:50:3d:53:dd:
ce:88:0b:7a:d3:26:df:5d:6e:1e:90:ca:02:84:da:
32:a6:26:59:05:6c:f0:01:63:d8:b0:45:74:ee:ca:
33:7e:16:5b:3a:9d:a5:1f:f5:52:6f:10:48:d4:5a:
3e:c0:86:0f:4e:80:ae:eb:f2:42:30:82:77:a8:67:
39:1c:78:61:eb:54:7d:05:9d:7e:93:ca:92:82:e0:
45:b3:80:21:13:41:d2:d2:52:01:bd:fb:3e:98:17:
6f:a7:cd:7a:cd:ff:0a:7b:41:42:a9:37:a6:e3:f8:
75:d1:ac:02:29:77:50:aa:17:ca:72:a0:0a:18:4d:
f6:10:47:2d:00:2c:1a:6e:84:29:09:72:02:94:2c:
e0:b8:b0:1a:9f:87:fb:70:19:7c:ae:3e:0c:f6:7b:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:60:E5:EC:4D:C6:91:5E:2D:A2:D6:90:5C:29:51:EF:5C:7E:10
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:da:71:58:37:f7:b8:88:5e:37:b7:0a:25:b9:36:c1:77:
15:8f:6b:8d:a8:95:f3:3f:f1:4a:8b:d9:e5:b5:90:06:89:fb:
4b:f2:0d:21:18:12:c7:f1:a9:80:d6:e4:f9:7b:f0:ae:84:e9:
85:c7:60:05:7d:02:d8:5c:f4:93:d9:3f:cd:44:52:a6:c5:7d:
1a:ee:f2:34:ce:88:9e:a4:a2:1b:7f:f0:77:da:14:2f:a0:f6:
7f:bc:15:4f:03:ca:74:a7:73:ec:27:63:0a:1a:4a:b6:df:e2:
27:12:c6:eb:a8:08:d2:ab:88:cf:b9:04:41:44:38:7a:92:1f:
eb:15:99:1b:56:c6:6f:c4:ad:6f:6a:47:ec:f0:de:c5:37:64:
60:dd:2c:02:80:df:f4:d5:2e:06:8f:81:df:19:ec:90:77:df:
7b:49:22:53:64:e3:e4:55:a9:eb:2f:eb:6d:90:21:0b:36:2a:
a9:0b:e8:f8:c8:07:b0:24:f9:93:c8:a4:31:8c:cd:44:08:b9:
f2:5c:3b:4f:7d:49:ce:38:c1:03:0d:f2:be:6f:84:e0:00:e4:
f1:0a:3b:bc:11:67:2a:71:df:dd:b6:46:0a:dd:98:09:d3:94:
b4:33:1a:1f:7f:93:13:fb:89:1c:50:52:29:ef:4c:bc:80:70:
34:1e:22:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:46:07 2025 by rpki-client