This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
File: -TCCkkNtEKqYcmtG_Py-oHkZT08.mft (raw, json)
Hash identifier: rtN+Tw8QsEKUObZe7ha7a1XOuLLlKrV0/Dg7J/817e8=
Subject key identifier: BD:FE:44:5A:9A:D2:50:80:50:6C:B6:4F:B5:FC:17:02:D8:F4:7C:3F
Authority key identifier: F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
Certificate issuer: /CN=A91EFBEA/serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
Certificate serial: 0CC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
Manifest number: 0CBC
Signing time: Thu 18 Dec 2025 17:59:46 +0000
Manifest this update: Thu 18 Dec 2025 17:59:46 +0000
Manifest next update: Thu 25 Dec 2025 17:59:46 +0000
Files and hashes: 1: -TCCkkNtEKqYcmtG_Py-oHkZT08.crl (hash: HhdVfTlM0DF6qYG8oZICyV8FKmC4rdr8onIarUE4x88=)
2: C7A9FD140A1811EABA1D8360C4F9AE02.roa (hash: Uknlu+cVOx+/Wfd55Xm8q9rrjIfJZmgZBP6NACfQzcs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl
rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3268 (0xcc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFBEA, serialNumber=F9308292436D10AA98726B46FCFCBEA079194F4F
Validity
Not Before: Dec 18 17:59:46 2025 GMT
Not After : Dec 25 17:59:46 2025 GMT
Subject: CN=69444112-938c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:a1:28:d4:89:5c:4b:69:04:da:39:af:6f:
4d:c7:4d:1c:49:b1:56:23:ad:9c:61:69:c1:15:18:
f3:05:a0:e7:ab:2f:1e:7c:c2:b6:f1:44:a1:4e:c2:
87:c2:bf:2c:26:0f:33:61:ef:57:8d:82:7f:08:8e:
ae:f7:dd:b3:57:0d:5c:f5:46:57:08:a2:53:b6:43:
62:f4:aa:87:c6:ad:5e:30:11:46:fc:fd:50:d6:93:
7e:68:8a:2d:09:4d:08:65:79:5b:57:cf:09:b9:54:
4b:7e:6b:42:cc:a3:c4:0b:f8:a5:4f:bd:d1:a5:42:
85:f5:b7:ac:91:75:fc:41:92:63:eb:51:92:0f:84:
24:42:ea:b2:98:8d:53:a0:4b:5c:d1:a2:d9:ae:14:
41:59:80:86:d1:74:85:5c:91:d7:d6:0a:f3:49:62:
1c:5d:00:ea:78:6d:1f:f6:35:99:e5:f6:0d:1a:bb:
5a:7e:d9:72:9d:2c:be:db:db:f0:82:3c:62:c2:ae:
f8:d0:b7:a6:28:fe:3c:8b:17:97:72:87:e9:66:55:
6c:64:97:13:46:d5:73:05:84:44:2a:9c:c2:86:f0:
0a:2f:a4:9a:3f:40:e4:97:e8:fd:fb:84:ca:39:dc:
46:a5:c2:74:41:fe:d0:f0:d2:ee:2a:2f:7b:4c:fd:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FE:44:5A:9A:D2:50:80:50:6C:B6:4F:B5:FC:17:02:D8:F4:7C:3F
X509v3 Authority Key Identifier:
keyid:F9:30:82:92:43:6D:10:AA:98:72:6B:46:FC:FC:BE:A0:79:19:4F:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-TCCkkNtEKqYcmtG_Py-oHkZT08.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBEA/7C9C591801D811EAB7D7B444C4F9AE02/-TCCkkNtEKqYcmtG_Py-oHkZT08.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3f:43:ee:97:62:d9:b0:68:99:00:1b:45:70:0e:a8:4c:cb:
cc:03:46:54:8b:d0:e9:6e:0f:8a:d4:f9:ef:19:77:c1:2b:76:
36:25:df:13:a3:6a:79:48:66:eb:d1:fd:47:93:26:af:7b:ac:
bc:b0:f1:54:4e:20:be:72:83:fd:40:f5:c6:f9:49:3a:76:3c:
42:63:f5:e3:bd:34:0b:7b:d3:f5:79:52:3f:2f:d7:30:29:79:
68:4e:e1:25:0e:14:ae:9f:4a:e1:b7:dd:c6:bd:e6:d4:06:df:
b8:90:e5:d5:60:c3:22:d7:c7:e9:0e:b0:c9:e9:14:6b:d1:87:
09:5e:dd:32:49:03:78:9c:97:3c:d6:b5:74:c0:02:aa:59:64:
34:51:ec:d4:3c:93:0a:23:76:32:a3:d3:df:40:3a:47:50:1a:
f2:be:95:ee:ed:3e:37:10:f1:fd:0f:13:c3:f2:fc:09:c1:e5:
8c:40:02:7a:fa:8a:f2:8e:57:82:d7:ff:be:d6:54:e8:c2:40:
40:5a:51:1e:a6:cb:39:0b:aa:c0:6b:74:89:35:ec:38:12:29:
45:2c:57:4f:2a:cb:6a:d4:4f:e1:47:73:58:47:ef:a9:cd:4b:
39:56:2e:43:66:ed:fe:dc:72:f1:18:b5:57:30:41:73:eb:ac:
e8:45:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:54:41 2025 by rpki-client