This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
File: bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft (raw, json)
Hash identifier: zYulVc6EJr0oPBH0NYpb+I5uU6im4NAhQlUDpxUyx4c=
Subject key identifier: 9D:DD:7A:F5:1F:4C:BA:74:C3:95:36:80:AE:6E:65:A0:AC:7E:42:A1
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial: 36DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
Manifest number: 3602
Signing time: Thu 18 Dec 2025 14:17:35 +0000
Manifest this update: Thu 18 Dec 2025 14:17:34 +0000
Manifest next update: Thu 25 Dec 2025 14:17:34 +0000
Files and hashes: 1: bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl (hash: Ia0fpv+DWLmva0AkSLOl+/WQ+1Ra/3z75Eh9fxa+I4o=)
2: 89A73D46772311EBB972032EC4F9AE02.roa (hash: ENYLfShbh18F4DkP0j/X7mK87WIoKIhUNMFfz+VNeYQ=)
3: 119B023E80A111EFAC559545C4F9AE02.roa (hash: zYkOqurzCzToKjFWw1JFREq9sP5L0Ox+j8SjAIM1s0g=)
4: 2F5B31D0BCA611F0B376E573C4F9AE02.roa (hash: BvejEattAcy9aqIdljj+2Bpa82xzLaxBzAPGSp/2yg8=)
5: 318FB51A383611E6B2282B5DC4F9AE02.roa (hash: I6jxZTqpjwiUfJAwpZoNi2Gm52AIuuh+evMbf0QauW8=)
6: 3204348A383611E6B2282B5DC4F9AE02.roa (hash: aOSpyI8MZjB7JifoHMKo83Bhs4V52OgvV8PHhV/cS3k=)
7: 88978730772311EBB972032EC4F9AE02.roa (hash: HjKqHMfxVfYxTOl9WdJ4/LY87H7R42UxSxjcHgvm5bI=)
8: 4703352E2BC311EEA3EEFA66C4F9AE02.roa (hash: LQ3/AcCd8+g9svWnyDnStsxL1BbV2fc4t0Zl6g4PL/A=)
9: 328EDB76383611E6B2282B5DC4F9AE02.roa (hash: LVPfSpZ0kKMp22v4SWIIQyCCry6IBJmlcWqFISdxj5A=)
10: FCBF1666677C11EBB2A3F00CC4F9AE02.roa (hash: mbhuy04A8zuqh2VQYoyVQz/nubKm5uM/LXn3ihnguHc=)
11: 331F345A383611E6B2282B5DC4F9AE02.roa (hash: BOms9OY6+UIB6aMBGACYroj4QGSk/YT0f0983Woe8qE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14044 (0x36dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Validity
Not Before: Dec 18 14:17:34 2025 GMT
Not After : Dec 25 14:17:34 2025 GMT
Subject: CN=69440cff-f834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:77:3f:59:37:3e:76:25:8b:57:0d:41:2d:
06:fb:20:ad:e7:3e:60:79:e6:be:ca:41:c6:43:63:
1b:b7:79:2e:cd:36:2d:3c:64:62:e4:59:06:39:95:
3c:42:56:21:90:13:f7:a0:77:99:32:c5:31:02:5b:
95:4d:10:27:82:9b:8d:2b:10:30:78:c5:1b:00:59:
d9:06:39:84:77:1d:ae:14:2c:3e:6b:a4:8e:4f:ab:
44:8c:78:a0:cf:db:28:11:28:37:ab:1b:4c:6c:93:
f4:b1:91:e8:e0:4e:c2:be:c5:c7:0b:29:5b:71:5c:
13:ee:2b:29:f2:71:1b:cd:3d:40:1a:8b:86:d6:af:
bd:b1:d3:cc:c5:89:48:1d:09:1f:3f:6d:86:52:ec:
f9:f0:26:ad:72:71:ae:fa:0a:e3:d4:8a:ca:5f:60:
bd:f5:27:83:a2:52:35:67:a5:bf:36:d5:43:1d:ec:
09:01:7f:cb:a3:dd:71:a6:a3:ea:7f:fe:fa:04:b6:
96:c2:4e:7b:13:1d:ae:d0:10:6a:57:2c:d7:8f:08:
b4:f0:78:62:fb:81:7a:a7:c6:f6:d4:e3:bb:ed:56:
12:a7:05:67:02:c4:a1:1f:74:d6:20:bc:1c:69:67:
77:fd:3e:d6:0d:6f:f8:90:4c:8c:63:43:40:db:30:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:7A:F5:1F:4C:BA:74:C3:95:36:80:AE:6E:65:A0:AC:7E:42:A1
X509v3 Authority Key Identifier:
keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:77:10:3d:dd:93:4f:b4:a5:55:ee:d9:21:c9:ee:6a:32:
4d:75:84:87:bf:f8:b8:ca:10:49:bc:12:0a:d5:34:48:5f:a3:
b9:33:5a:7a:fa:86:bd:eb:db:83:3f:6e:07:d6:27:39:b8:54:
92:92:3a:7a:20:61:72:7d:d4:3d:39:c6:0b:90:05:3e:02:db:
37:22:e9:01:0b:dd:08:07:5a:2c:c4:28:cd:ff:21:1f:67:14:
2e:4d:ba:bf:46:58:01:fe:9c:17:a7:a2:22:9f:7a:32:f6:fb:
85:df:95:2c:9b:b7:3b:4f:6f:96:51:50:3a:23:12:89:6a:72:
16:00:12:3d:55:3d:17:9b:cb:3e:a2:82:d0:46:95:9d:01:d3:
90:e0:3f:b8:ba:26:62:a0:3a:ae:16:5f:36:a1:7f:76:b5:34:
6a:9a:92:e7:01:7d:9d:81:f3:e5:65:48:95:9d:8e:64:26:2a:
79:01:a5:90:41:17:0f:ba:77:27:4f:ce:08:6f:4b:51:93:c3:
56:a2:a3:0b:1f:c9:b9:d7:39:a2:40:e8:a1:6b:54:5a:70:51:
4f:b2:10:b9:a2:87:c1:60:86:de:4e:2d:27:38:37:f6:ca:34:
59:f3:83:72:99:86:bb:48:cb:18:97:d4:b2:4a:5b:13:96:0b:
3d:85:e8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:49 2025 by rpki-client