This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json)
Hash identifier: 5Z8jNMLF3xYxt+xLSx/f7Iv4nCF+AyF7W2mPeF5IRo8=
Subject key identifier: DE:53:90:BC:4E:C9:0D:04:CA:97:07:72:83:2E:25:7F:C1:A9:1E:21
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 11BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
Manifest number: 1179
Signing time: Sat 20 Dec 2025 16:59:01 +0000
Manifest this update: Sat 20 Dec 2025 16:59:00 +0000
Manifest next update: Sat 27 Dec 2025 16:59:00 +0000
Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: um3eFbEpUDY6v/M5mF/2Weq04oD+GeX99pRK04BJJW0=)
2: 4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa (hash: ezSFE6z1AfPI1kfaZKGN0eX+4u/ZznyBrlMf93wLFII=)
3: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=)
4: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=)
5: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=)
6: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=)
7: 981DEAC6B1C711F08CEB3C61C4F9AE02.roa (hash: Xd/ha+8Rf40EUcmF2S28Em4xm72VBdQzvds2dDfnPNU=)
8: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4541 (0x11bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Dec 20 16:59:00 2025 GMT
Not After : Dec 27 16:59:00 2025 GMT
Subject: CN=6946d5d5-c9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:60:a7:99:8b:4c:b3:7a:0e:47:28:c9:f7:
d1:17:14:38:3c:13:40:51:0d:e9:3d:9f:10:e1:20:
0b:35:45:68:43:1b:fe:ae:d2:c8:03:79:95:06:08:
92:c4:21:e8:a5:66:5a:d4:cd:6e:55:f9:cf:ea:b1:
2f:a9:dc:62:7c:39:4f:e2:35:6d:5f:22:32:80:89:
ce:4a:6a:64:d8:99:6a:6e:a0:75:b8:0f:d2:98:4f:
14:b6:a1:77:07:78:fa:b0:5f:9a:1f:46:0a:0f:b7:
0c:c8:4d:04:0b:e7:96:c8:fc:4c:bc:d4:cf:b5:b5:
26:b0:d7:f4:6a:45:35:89:67:58:2b:13:38:83:52:
69:d5:e3:a4:0c:3e:d1:30:cc:40:1f:3b:3b:fb:8d:
24:29:52:fa:2c:6b:1e:cb:62:aa:6d:ac:2e:27:be:
74:09:3f:16:af:c9:62:d5:12:31:f5:87:a8:09:09:
a3:2d:4a:0c:06:c0:9b:9c:e3:32:8b:4c:44:c1:2e:
03:58:f0:6f:b2:ff:8c:4d:45:be:9a:a5:b8:af:6e:
92:6b:78:b0:54:ce:0d:33:ec:36:f6:dd:f7:64:24:
64:88:0a:64:2d:30:44:4c:7a:9b:04:32:6d:5c:70:
a9:28:a9:03:cb:4f:5c:45:34:30:3f:69:e1:8c:b5:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:53:90:BC:4E:C9:0D:04:CA:97:07:72:83:2E:25:7F:C1:A9:1E:21
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:b0:f5:fa:37:ec:ef:01:d9:0b:3d:d2:77:4c:8d:b8:0d:
a5:ac:34:27:d3:19:5d:e0:29:da:90:5a:b9:80:68:80:17:57:
6e:d6:27:df:c9:ab:d8:3e:76:8e:5f:72:a0:da:09:31:7d:46:
fa:6c:29:91:75:30:e2:e4:f0:11:f5:da:71:9d:2c:fc:0c:06:
91:33:92:1f:f4:e9:02:d6:c3:9b:3e:13:1e:b3:6e:28:69:ff:
a1:94:c9:4e:46:a2:9b:74:31:db:3f:63:02:98:57:9e:fc:bf:
3a:90:3d:b9:b8:63:66:c4:d4:9f:fa:ec:19:48:06:ca:4b:fd:
ab:e0:0f:6f:2f:46:41:f6:28:35:10:0e:7a:18:82:c2:2d:f0:
4a:f1:ac:74:1d:32:63:70:b9:28:1d:48:8d:35:36:77:4b:2f:
a1:15:ac:83:0a:16:f9:88:88:62:0c:9f:52:96:27:fb:52:e4:
65:19:51:fd:bd:9d:a6:80:ac:0f:55:ce:c8:80:fd:dc:86:c8:
85:b8:2d:f9:26:38:ac:b3:21:35:aa:5c:28:8f:a7:30:10:ef:
b4:d6:c1:7f:35:cd:3b:29:e4:57:f6:5d:44:69:49:63:57:1c:
58:ab:ca:09:af:95:f3:1c:79:bd:27:87:c3:18:66:dd:a9:0d:
46:52:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:28:26 2025 by rpki-client