This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier: TCpdKA9VlUCgVzspMqMQjuv1JfU1DFYYGAl+2V0tnXg=
Subject key identifier: 3B:46:DE:FF:5A:3A:81:43:F6:E8:F9:9A:AE:9D:95:67:F0:F4:25:88
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number: 01EE
Signing time: Sat 27 Dec 2025 01:45:49 +0000
Manifest this update: Sat 27 Dec 2025 01:45:49 +0000
Manifest next update: Sat 03 Jan 2026 01:45:49 +0000
Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: J67Nu6HLx9SLhFHVA38e30W+BFTBB7jD31DmFB04Nbc=)
2: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ=)
3: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 01:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Validity
Not Before: Dec 27 01:45:49 2025 GMT
Not After : Jan 3 01:45:49 2026 GMT
Subject: CN=694f3a4d-0161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:35:f8:6a:3b:0a:9c:20:91:91:8f:98:cf:
51:5b:8a:a3:57:49:2f:62:1a:47:bc:a2:e0:15:98:
4d:fd:28:59:85:f8:b2:bf:6f:ce:c1:7b:d6:8a:d8:
2f:5b:37:80:86:12:39:ae:43:9b:45:46:bd:f2:42:
29:4c:19:e7:90:db:6a:e5:37:1e:98:2c:a3:27:cd:
81:33:bc:fa:0c:8e:3c:12:86:5c:e1:3f:1b:f2:dd:
ce:fb:69:4d:f5:37:2f:1f:24:64:47:05:7e:ba:15:
32:aa:88:6c:44:f1:75:db:69:fb:ad:8a:e4:c5:12:
8f:99:e0:d1:df:7c:24:c9:7e:22:e4:62:64:a8:fb:
be:80:ad:74:6f:fd:79:d6:6c:97:23:90:27:4b:14:
c8:2b:4f:32:da:a0:86:1b:f7:5c:51:fc:85:77:0e:
1b:97:a6:90:fb:f3:7d:1a:be:01:45:dc:a1:54:c8:
20:b4:7f:b5:a4:e0:d2:c8:6c:bb:84:08:60:7d:2b:
64:ff:c7:49:e0:2d:89:07:87:fb:5d:bf:a9:80:83:
f4:bf:37:5b:92:3e:b5:62:57:bf:6e:9e:00:2e:01:
bb:02:a6:37:8e:5e:fe:ad:6b:9a:a3:85:3b:e1:85:
00:61:0d:7c:ce:13:46:63:60:09:4f:d2:ba:f2:37:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:46:DE:FF:5A:3A:81:43:F6:E8:F9:9A:AE:9D:95:67:F0:F4:25:88
X509v3 Authority Key Identifier:
keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:aa:41:45:29:13:f2:cc:66:3e:ce:2c:18:2b:3f:c5:01:
87:71:3f:17:a9:36:79:48:b6:80:29:33:b7:7e:0c:0d:d9:98:
28:42:81:76:55:a8:74:73:e7:14:b6:f7:1c:47:9f:29:c3:f5:
52:23:da:cc:91:28:ab:c3:00:c9:4a:2e:ae:8a:1e:97:78:2a:
06:97:d1:4b:1d:b7:3d:83:25:74:2a:de:59:48:36:bc:1b:1b:
f8:c3:00:98:da:0c:ab:81:89:38:83:e1:9e:1c:8c:ce:35:a9:
a4:9f:09:50:7a:c9:01:bf:eb:20:84:44:80:98:bf:04:f6:fc:
57:33:51:68:9d:59:fc:58:4c:ce:dc:71:8e:34:50:b9:fa:7b:
02:89:d6:6a:ad:02:b1:f4:15:0c:8c:f5:81:c1:16:07:75:3b:
74:5e:2b:0d:7c:7b:f8:ab:ab:c9:08:d5:87:08:25:56:c7:3d:
5e:e6:d4:7a:09:1b:74:4a:06:a0:9d:94:31:85:1a:8a:9d:6f:
f7:dc:01:50:18:9f:90:23:07:da:48:7c:83:33:ab:d0:1c:c1:
64:19:32:d2:e6:ec:67:59:f8:8c:b1:e6:d6:41:13:2f:2e:44:
1b:1c:50:f7:10:01:17:d5:20:1a:83:4c:a8:14:35:55:0d:f4:
7f:c9:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 05:52:57 2025 by rpki-client