This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier: eXXbqqfDfWRbFbmX5uodPV3S/4yB3CNmY/pS84vAUAU=
Subject key identifier: 5D:E9:A0:87:A7:D4:96:86:C9:43:3D:F2:C7:6C:D9:ED:57:FB:53:6F
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number: 01CC
Signing time: Sun 21 Dec 2025 02:14:21 +0000
Manifest this update: Sun 21 Dec 2025 02:14:21 +0000
Manifest next update: Sun 28 Dec 2025 02:14:21 +0000
Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: vRpyZgvuJEoq075DYsAMCPRhnEvp/Fg4pCCH2fpTer4=)
2: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: JgtSSjMUVF5aYkq/I11EUTsQN2v/Rr6UwtvaYKzNVvk=)
3: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs=)
4: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Validity
Not Before: Dec 21 02:14:21 2025 GMT
Not After : Dec 28 02:14:21 2025 GMT
Subject: CN=694757fd-06db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:34:7a:ec:b5:aa:cd:db:e7:80:dc:e2:cb:ad:
30:e6:b1:d3:68:04:d0:59:a3:1b:6d:5e:9f:de:60:
cd:20:93:f3:f2:c0:cc:0a:ef:c1:8f:32:60:76:c8:
b2:5e:15:72:fd:cf:99:7d:33:c8:d0:a4:84:95:1b:
a4:bf:bc:40:58:fb:41:19:ae:70:b3:65:41:bc:bc:
37:13:a4:27:20:2e:45:9e:f8:d9:aa:31:67:26:65:
c4:69:0b:00:ba:41:cb:99:d7:93:71:91:3c:0d:fd:
ca:d1:9b:18:e3:d3:2f:34:ce:7a:d3:10:6d:e4:19:
6b:12:d7:ca:dd:db:14:66:7e:a5:c8:7b:7a:92:8b:
99:5c:0d:9e:4c:b0:a4:e7:7d:1c:4d:a9:bd:9e:6b:
3c:71:af:90:60:90:82:8d:17:60:9f:ca:7c:91:09:
7e:2a:66:4c:82:fe:af:dc:2a:d3:8c:a9:d7:d0:8e:
a7:ed:a3:42:e8:7e:f8:b4:2d:e8:2e:88:cc:d6:0a:
a5:b1:b7:fd:70:47:13:8e:3d:dc:e4:e1:3f:62:a3:
f1:22:66:da:92:10:50:04:0d:72:64:ed:52:93:1f:
d6:a4:31:88:45:dd:d1:60:d2:c9:49:19:86:8c:3a:
f3:06:6e:a2:bf:81:b8:8a:a2:8d:33:3d:24:fa:41:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:A0:87:A7:D4:96:86:C9:43:3D:F2:C7:6C:D9:ED:57:FB:53:6F
X509v3 Authority Key Identifier:
keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:1f:d4:f7:c2:97:54:5f:65:93:48:79:ec:b3:43:46:c9:98:
a4:d3:f2:81:19:c5:06:4c:a1:45:96:1e:76:5e:14:b6:8f:96:
4c:f7:9b:64:c6:e0:c0:9e:f4:8f:23:2f:11:c2:62:09:21:21:
a2:e5:b5:d4:d2:cf:38:ca:ed:d3:69:61:97:7a:cc:76:63:b9:
9b:04:84:b1:fb:16:ac:93:48:53:86:ba:45:7a:31:ac:3c:b3:
30:ee:8f:6c:ba:30:e4:c4:59:0b:3a:7f:7d:3e:17:4e:61:9a:
35:32:20:01:3e:08:fa:a3:1d:d3:7e:ef:ec:8d:ec:d1:d9:4a:
6b:0c:84:62:0d:64:27:4a:d1:ed:80:9f:38:c6:e1:dc:e7:09:
ad:97:b4:85:31:5e:bd:74:69:eb:98:3c:f3:e9:c6:69:bb:1d:
7a:b0:5c:db:64:46:a1:ab:aa:b0:0d:32:6a:f4:74:8c:83:a7:
da:a6:95:f5:67:f5:95:f9:2d:24:c0:9f:23:84:a4:52:8d:fc:
82:e3:f0:71:88:ed:09:22:4c:2e:55:77:4e:2f:dd:e0:8f:dc:
11:bf:af:ab:ef:93:8e:9d:6d:cf:f0:53:ac:c1:e5:86:57:56:
85:b8:8b:4f:7c:7e:fc:8c:c0:07:63:e9:77:8f:95:9a:7a:d6:
1e:6e:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 03:58:54 2025 by rpki-client