This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
File: xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json)
Hash identifier: EzxNXmwORyWkhyVZPgrmm4hfWJa6EVGf7jWgZFf+bJY=
Subject key identifier: AC:8F:30:4F:EF:78:BD:4A:7B:77:67:55:BA:91:FA:B6:9B:C9:D5:7B
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Certificate issuer: /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial: 0509
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
Manifest number: 0504
Signing time: Sun 28 Dec 2025 22:49:14 +0000
Manifest this update: Sun 28 Dec 2025 22:49:13 +0000
Manifest next update: Sun 04 Jan 2026 22:49:13 +0000
Files and hashes: 1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: rPMBEBObCTPILgLSoOyQv+vq88PD9lJHYRiewChO8jo=)
2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: DMlimdEM70tJoVk9wmrJUFu8IwTQ/ffrCAdf/ZcjEXY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 22:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Validity
Not Before: Dec 28 22:49:13 2025 GMT
Not After : Jan 4 22:49:13 2026 GMT
Subject: CN=6951b3e9-59f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:06:53:07:c1:c3:f0:08:c4:2c:73:8d:16:
78:01:01:65:08:2f:4b:5e:42:9d:5b:2c:c8:14:d7:
dc:1f:ad:b4:f9:2f:56:f7:32:03:7d:fc:1f:1d:8a:
50:18:92:3b:f6:c0:cd:3d:9b:bf:9a:34:35:98:11:
26:3a:48:12:ff:10:04:78:22:52:79:c0:cc:15:bb:
1a:69:16:6d:d8:fa:71:20:db:73:aa:8d:d9:a8:c1:
06:9d:1c:27:9c:ca:1b:45:9b:7f:c0:1b:8c:33:55:
be:99:de:f2:43:da:72:cf:60:30:7c:f4:7f:2e:0a:
89:25:59:83:42:cb:dc:b5:81:bd:87:82:bb:19:cc:
a5:e8:b8:48:bd:9a:96:69:66:e3:1d:bc:be:03:5a:
53:66:53:ca:89:29:d1:d9:93:c1:89:e9:7a:60:e3:
a3:62:6c:db:5a:1c:7e:f4:aa:3f:c9:53:9c:c1:da:
11:4f:b6:ef:9c:b0:98:e8:bf:59:78:82:02:f2:a3:
a7:e1:fd:18:f9:e3:33:0f:b8:ad:79:88:d1:15:e6:
70:77:40:4c:04:a7:06:81:91:68:5a:23:1b:6a:1d:
63:22:7c:75:81:e9:60:b2:11:fa:84:69:21:8d:15:
b1:cd:3b:0b:99:cc:47:c3:b9:d5:30:ad:41:d9:65:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:30:4F:EF:78:BD:4A:7B:77:67:55:BA:91:FA:B6:9B:C9:D5:7B
X509v3 Authority Key Identifier:
keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0c:49:ea:f9:2f:55:b7:98:d3:21:1a:a1:a7:46:0f:e8:a5:
ad:b7:5d:17:1f:7d:2a:5f:9d:7f:32:0f:9d:32:ba:d6:2c:3e:
c9:01:71:b3:85:cf:36:23:bc:9d:0a:0f:98:61:e4:2a:fb:e8:
d1:29:29:65:5c:31:26:a8:08:ee:1d:64:7c:2c:fd:d1:25:63:
cc:d1:7d:f8:a1:33:c6:f1:d4:b2:e0:c2:ef:42:de:cf:3f:1a:
4a:9c:5c:06:f0:b3:90:64:d6:7b:87:2b:a1:0d:e7:a1:9d:95:
84:12:ea:8f:e1:7f:ea:7f:bd:82:c0:8f:7f:f3:a2:ae:47:59:
83:81:42:5c:cf:3f:da:0c:ff:8e:1d:5d:52:92:88:59:6e:19:
5e:32:f9:7c:47:a2:63:23:56:04:7c:49:d6:3d:8f:1a:14:c3:
a1:3b:22:3e:dd:a0:71:a2:36:79:7c:67:ab:ac:81:18:96:8d:
f3:7a:ef:5b:ae:f9:e3:5d:93:63:0f:69:bb:a3:05:48:5c:7a:
b1:ce:2b:fe:fe:39:b9:55:c1:87:af:dc:7b:85:52:9d:8d:f6:
65:e0:12:2c:28:db:c9:a9:38:d4:9f:23:c3:fa:60:ef:f8:c3:
b9:6e:a2:62:f9:90:eb:37:3c:0b:ea:76:62:c3:3e:c9:02:2f:
a4:75:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:30:44 2025 by rpki-client