This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
File: mnPxqRn79GyHLjiAWxZQtfiCdtM.mft (raw, json)
Hash identifier: mZbBl2ZiRWn5E11ZDItxaKi4H5XaGHEI1l5nVmUvVk4=
Subject key identifier: FD:1B:1C:FF:D8:6B:2E:0C:2A:10:A1:A4:8F:DE:B2:C1:34:59:11:8A
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 11A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
Manifest number: 0D48
Signing time: Thu 18 Dec 2025 19:56:08 +0000
Manifest this update: Thu 18 Dec 2025 19:56:08 +0000
Manifest next update: Thu 25 Dec 2025 19:56:08 +0000
Files and hashes: 1: mnPxqRn79GyHLjiAWxZQtfiCdtM.crl (hash: 9bghpRadQ29cOw49otLmdde/yaIWnWHEQ0wANsQM/w0=)
2: 6BE346006D1A11F0B1F1074DC4F9AE02.roa (hash: F+kwWb5yikRsOK2zoJFU1MWIPMWRYvJswNdoIKQaUNo=)
3: DC334248DA5211F08B25A6E192D3641D.roa (hash: /gJXXPVQq9vG3NP0QoCvMYsQ1wpCCayu68y1jEAQEA4=)
4: 5C2A5AE670FD11F08583BE3AC4F9AE02.roa (hash: NAdbZTtzlwtewbjTfuMORoVz4S6lpr350iCxdpAhbLc=)
5: 8BAE1FFA6D1A11F0A4E9404DC4F9AE02.roa (hash: LcfL6WlPDAVnfVe8FVQ0PTDxHLr1cQFF1C/EotpyU7g=)
6: F7E266FEDA5211F09C836FE292D3641D.roa (hash: hcgazntWPxUxy2imzUBIxMsOW8zlFh5dhFp9AKH3xwU=)
7: 24B754BA9B7911EFBA9A2A42C4F9AE02.roa (hash: y4nldf+8SF0UXyvc5ZFdPynmdfFfU94WXlTR6JoprTg=)
8: A173B894112711F0845DF16FC4F9AE02.roa (hash: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4518 (0x11a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Validity
Not Before: Dec 18 19:56:08 2025 GMT
Not After : Dec 25 19:56:08 2025 GMT
Subject: CN=69445c58-4d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:9b:b1:16:43:a6:83:9e:23:9a:f8:e1:26:
23:ac:92:29:19:e2:01:9a:91:8f:8c:9c:9a:bf:73:
a9:9b:2c:04:24:96:7a:1a:36:a7:7e:07:d4:b1:c7:
d2:ea:93:0e:84:69:14:b9:8e:ec:3d:f9:6e:5d:42:
6f:0f:bf:5e:30:a8:fd:29:73:76:a8:43:58:25:49:
e2:ae:6b:b2:49:b4:7d:a9:e2:b7:56:07:eb:8d:58:
fc:7a:a0:79:ab:c4:55:24:c4:62:b5:ef:e7:87:98:
20:20:4a:a9:a1:5f:c7:bd:a1:44:72:e1:b2:9f:96:
db:91:91:7c:20:fe:9a:c9:f3:c3:52:72:23:89:9b:
06:f2:5d:26:44:ed:53:a8:ab:52:71:1f:17:e4:1a:
69:fb:de:25:ee:a7:f7:94:79:1d:2b:78:3c:dd:51:
53:54:1e:27:0d:22:54:75:19:ec:47:e4:24:bc:13:
1f:79:37:54:04:52:0c:cd:df:bb:99:a8:f1:0a:d3:
d0:36:a2:2d:29:13:a2:24:e9:3b:19:31:24:b8:51:
4f:83:77:1d:a1:bb:9b:42:dc:9b:8e:87:65:fb:4e:
75:ab:c5:54:0a:66:27:d7:c1:35:80:e4:b1:b6:01:
9b:0d:0b:92:86:69:df:c7:b4:95:59:d9:e2:12:cc:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1B:1C:FF:D8:6B:2E:0C:2A:10:A1:A4:8F:DE:B2:C1:34:59:11:8A
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:26:b4:51:a5:5d:27:d8:51:04:7b:78:c3:79:e6:2b:92:c2:
dd:62:77:a1:a0:33:96:1d:3a:28:9f:1d:9a:94:7c:9f:d7:65:
55:b0:d4:63:fa:a4:d0:4e:62:17:69:80:a7:07:29:ee:98:0e:
6b:02:cf:0a:6c:05:48:46:ea:35:38:13:21:8e:2f:be:d5:eb:
27:4c:bd:7e:03:8e:9e:4c:bb:c2:68:98:ae:d0:7c:6b:b9:90:
6c:9b:1f:1a:7e:01:61:69:63:f0:4c:8f:22:de:8b:23:97:ec:
dc:9b:67:87:29:0e:4a:19:6d:fb:68:ea:f4:90:88:0a:4e:fe:
14:76:2e:7a:19:51:d4:30:e7:41:11:6a:87:b8:f8:e9:88:52:
2d:a3:92:6b:25:62:d1:fc:af:2d:16:0f:bf:84:2c:5b:2b:f8:
c4:1a:a3:79:98:a1:69:0d:9f:6a:77:68:1a:6a:b8:12:02:d3:
f8:2f:53:62:d5:ce:2b:ff:bf:8d:1f:79:9a:a3:8d:78:71:9c:
75:b4:b2:b4:e8:b3:27:20:fc:09:3c:02:08:11:c0:bf:d2:ba:
42:8c:68:33:79:88:d0:64:5b:63:5a:b8:32:70:4b:ee:7b:d4:
e0:f0:7c:64:42:cd:79:8e:d7:df:29:11:c2:5c:0e:71:e5:55:
d0:df:95:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:01 2025 by rpki-client