This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: jkeZuQVCmj4QygyBPEwGyAp+UlnENfnbNCQlBkav2a4=
Subject key identifier: B0:19:2D:C7:A1:DB:46:F9:3A:EB:75:76:F8:68:C6:9E:72:B9:75:A9
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 024A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 0243
Signing time: Sun 21 Dec 2025 01:02:55 +0000
Manifest this update: Sun 21 Dec 2025 01:02:55 +0000
Manifest next update: Sun 28 Dec 2025 01:02:55 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: hNUn6vvHxDBkBDKjBaNvuSX9Rg1TOz2H/qsxuukM46A=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Dec 21 01:02:55 2025 GMT
Not After : Dec 28 01:02:55 2025 GMT
Subject: CN=6947473f-5bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6a:19:37:91:87:8e:6d:65:4f:59:29:45:85:
0d:b2:04:ee:cf:93:d1:79:60:c2:41:f9:69:f1:52:
82:d2:cc:9f:9d:1d:a3:dc:86:50:c3:b9:bb:bc:a7:
a7:d8:f6:87:cb:6e:dc:ac:f8:6b:87:9c:e7:43:8d:
e1:10:b8:fa:d9:6a:12:15:0e:f3:9b:fa:29:0c:f4:
64:c4:19:84:50:2a:1a:ed:8e:ca:6a:b4:b5:61:fb:
9d:48:71:16:17:cc:bd:be:1d:08:6f:4e:7d:95:dd:
05:a5:13:8a:21:b8:e5:fa:d2:0d:31:fa:0b:e6:8b:
11:b2:cb:3a:50:46:76:47:c8:7d:80:fd:54:2d:81:
da:f1:27:a1:fa:36:72:d9:3f:05:8a:c3:fb:4a:ac:
0a:da:a1:06:ec:09:a1:6e:7a:d1:72:59:b6:b4:63:
cc:d1:83:be:50:95:7e:bd:ba:5a:61:88:6d:b8:d1:
ac:f3:31:cf:e0:7f:67:0a:8e:75:c7:b2:5a:66:e2:
cf:b7:0f:58:8b:03:4f:ca:f8:68:c3:ae:54:3b:a4:
eb:a2:01:40:75:58:e2:e5:2d:72:5a:28:b1:21:33:
5b:e2:39:62:0a:5f:9a:69:93:73:74:6a:df:00:35:
19:e4:c7:93:ac:71:1d:18:c0:28:3a:35:07:50:2b:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:2D:C7:A1:DB:46:F9:3A:EB:75:76:F8:68:C6:9E:72:B9:75:A9
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:6e:7c:31:f4:f0:d5:3f:db:a8:7e:73:f3:92:71:af:bd:84:
31:83:ed:52:33:e3:45:02:1c:e7:11:38:16:6c:05:5e:ba:ee:
69:a3:b2:b0:38:ca:e1:a7:2f:cc:65:f6:9d:09:c4:89:51:81:
da:04:73:c3:3a:ab:f3:bb:50:3d:fc:89:fc:cd:17:14:57:c3:
14:e2:0d:f8:63:4c:dc:69:43:01:32:e7:22:55:de:e7:29:58:
0f:9b:18:ad:08:8f:81:b1:67:4c:47:6f:7c:a8:ee:01:0f:23:
26:26:5b:d0:a5:e5:d0:80:11:84:9b:3f:64:9d:1f:5c:f9:8b:
d0:44:26:df:1d:7a:b2:46:c7:37:df:19:25:2b:ad:68:b4:46:
df:b8:f0:4b:1a:a5:5f:fa:31:28:5e:c0:d6:b3:55:39:ab:12:
79:89:7e:a9:74:41:66:47:e6:93:70:a6:25:4e:d8:51:ec:48:
9f:1c:12:10:7c:03:11:1c:3f:fc:1b:73:d0:7f:77:89:90:33:
08:de:f1:13:91:13:24:7e:6a:ca:2c:14:73:cf:f9:ed:da:2d:
1c:81:0a:fd:de:9b:88:9e:41:e5:e6:a2:af:1c:e7:9c:b4:60:
78:f1:a3:b8:6d:8d:d4:9a:93:fa:76:8a:f3:93:01:03:8f:f9:
c3:84:19:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 16:03:02 2025 by rpki-client