This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
File: K1N18tBgdUbVH2UR9hvEoYl0_eI.mft (raw, json)
Hash identifier: 4G/SSu4U9ZBbvVnUnOxmDv65Xso5NXdJuAwJF2EwWXo=
Subject key identifier: EB:CC:28:E6:38:D9:71:C8:01:01:EA:45:A3:3B:60:9D:39:C1:BC:DE
Authority key identifier: 2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
Certificate issuer: /CN=A91EF19E/serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Certificate serial: 3526
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
Manifest number: 3515
Signing time: Thu 18 Dec 2025 14:23:12 +0000
Manifest this update: Thu 18 Dec 2025 14:23:11 +0000
Manifest next update: Thu 25 Dec 2025 14:23:11 +0000
Files and hashes: 1: K1N18tBgdUbVH2UR9hvEoYl0_eI.crl (hash: FG+Yu7TasbfB40z2OWsI6wNlkHsDCzI3wuy7dzECQ94=)
2: FACC58F855C411E9A0FEF781C4F9AE02.roa (hash: 393XehekPeHbrV2Jp2q+bd44TtCVra3Kkby1+LNFgLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:23:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13606 (0x3526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF19E, serialNumber=2B5375F2D0607546D51F6511F61BC4A18974FDE2
Validity
Not Before: Dec 18 14:23:11 2025 GMT
Not After : Dec 25 14:23:11 2025 GMT
Subject: CN=69440e50-2156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:3f:db:dd:aa:68:93:33:39:cc:68:d5:2a:
11:32:43:4b:ed:b1:c0:5c:42:59:bf:df:40:a8:51:
b6:68:c9:59:5f:d7:e9:bc:0d:1d:84:20:2a:04:f9:
25:16:4d:72:59:8e:03:1d:cb:c2:8e:67:2b:25:ea:
e4:bc:d4:bf:f8:46:be:1b:fa:d4:cd:bb:15:47:cf:
4d:96:37:25:86:6e:5f:d2:6a:24:09:39:61:b7:01:
fe:f4:0c:54:85:ed:c2:a2:de:e3:91:1e:cd:0d:3b:
b4:10:c7:9e:71:f4:4d:c4:8e:28:4b:50:38:c0:61:
b3:a8:7c:1c:cd:b5:4d:c5:0f:34:c8:fd:7e:76:7f:
38:7b:c0:bc:82:d1:fa:e4:97:44:b4:b8:02:18:05:
dd:8d:63:cc:c4:cd:f0:e5:10:d4:5b:cf:4d:d7:71:
06:55:14:46:20:e1:ef:c6:06:91:f5:97:5c:90:54:
71:34:9b:01:d5:8b:b4:89:d8:72:92:85:a7:f7:7e:
6b:c8:5e:89:fc:80:09:71:b1:a8:9d:f2:35:c7:1b:
ee:f8:5b:91:7d:a3:28:b7:83:34:4e:b2:06:bd:a3:
df:e9:2c:01:04:46:94:93:9d:0a:47:e5:c3:ab:b0:
4b:27:2e:35:87:ec:9b:78:45:af:08:b8:f0:b4:14:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CC:28:E6:38:D9:71:C8:01:01:EA:45:A3:3B:60:9D:39:C1:BC:DE
X509v3 Authority Key Identifier:
keyid:2B:53:75:F2:D0:60:75:46:D5:1F:65:11:F6:1B:C4:A1:89:74:FD:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1N18tBgdUbVH2UR9hvEoYl0_eI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/05C4C0A41D8411E2B0C5A3D908B02CD2/K1N18tBgdUbVH2UR9hvEoYl0_eI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f9:49:ba:aa:3b:f6:4c:72:f2:c2:ff:9f:5c:eb:cc:84:08:
e8:40:6a:85:05:3e:ec:48:b7:d9:75:04:e0:ea:1c:4c:42:d7:
e8:f1:90:60:f6:0e:c9:fa:33:42:f4:46:97:ca:68:9a:5a:6f:
28:4e:80:9d:03:ad:2a:24:71:a7:3e:6b:aa:0a:da:e6:cd:88:
b5:d2:dd:27:d5:42:55:38:ac:9f:9f:95:92:3f:b3:24:dd:f4:
4e:e2:05:92:d6:f3:32:15:33:16:c2:a8:17:7f:1c:3d:be:57:
bc:4e:de:64:73:6d:ab:c5:ed:65:c1:a8:f0:9a:8d:5d:8c:c7:
e0:f4:7a:34:53:88:bd:05:91:89:11:65:d7:18:18:cd:da:ef:
b6:06:33:bc:e7:d2:60:98:6c:63:7e:49:1e:e3:9e:6f:92:eb:
f0:53:6b:c7:7e:96:c5:1a:6a:5c:8b:d7:fe:9f:06:44:50:61:
5e:24:c0:3e:0a:3c:aa:35:ac:33:b1:85:a9:89:04:2b:b2:4e:
33:76:87:66:df:1d:60:41:0a:7b:ee:e3:df:cd:9a:52:7e:1c:
4a:41:60:b2:c2:7c:bf:bf:00:60:ef:fb:c7:6f:84:72:a1:04:
af:f8:14:6c:56:87:a9:ac:a8:85:55:5a:5e:11:f6:08:09:89:
b5:15:ed:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:52 2025 by rpki-client