This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
File: _lDDhdnrGeLvoU-jWtpb3qW0VtM.mft (raw, json)
Hash identifier: rwEyoMKM7zdpmqNfy3ref0W7vviApSh6zUQj4Wo2v2M=
Subject key identifier: 5D:87:6E:26:D9:BC:AF:99:E3:F4:75:D7:01:CE:F3:2D:75:06:70:02
Authority key identifier: FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
Certificate issuer: /CN=A91F17B1/serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Certificate serial: 05F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
Manifest number: 05CD
Signing time: Thu 18 Dec 2025 22:32:47 +0000
Manifest this update: Thu 18 Dec 2025 22:32:47 +0000
Manifest next update: Thu 25 Dec 2025 22:32:47 +0000
Files and hashes: 1: _lDDhdnrGeLvoU-jWtpb3qW0VtM.crl (hash: IFHYB2Fod8kyHdxBun6hShIiCa7oul2zA+J1zkYXirw=)
2: 65DFCD4A884D11EE8423C486C4F9AE02.roa (hash: B5qPcRiAPVySXtIwaHqDbWpuZoMlGmhplKL4rpUX3FY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F17B1, serialNumber=FE50C385D9EB19E2EFA14FA35ADA5BDEA5B456D3
Validity
Not Before: Dec 18 22:32:47 2025 GMT
Not After : Dec 25 22:32:47 2025 GMT
Subject: CN=6944810f-ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:b2:e1:eb:14:e4:1e:16:3d:8a:3e:63:f0:
2c:4a:f3:f3:e1:f8:a4:9e:c9:b3:6b:69:0e:1d:51:
9a:8f:11:1c:8b:ee:a8:e4:85:89:92:40:27:08:4a:
30:bc:55:96:4a:40:e4:a9:8c:2d:c4:d3:e7:8d:8f:
b1:4e:33:51:7f:0c:c3:ca:4e:e8:1b:d5:d1:3b:20:
9d:d5:e9:c5:dc:9d:85:78:45:5d:ae:e1:ea:05:33:
b1:da:ac:fd:f4:e9:50:90:ce:f3:46:12:cb:de:48:
b4:80:a2:29:68:37:bb:93:55:3e:86:17:21:30:f5:
9c:e8:f0:2d:71:15:7c:a3:90:65:01:bb:27:8b:d9:
bb:e3:31:14:15:1c:15:db:18:dc:af:e7:76:53:74:
f0:36:db:c8:fd:4d:7a:38:0d:0b:91:29:b2:af:cb:
9e:96:93:b4:b3:48:2c:3a:68:02:ba:43:dc:bd:ff:
ad:7d:0a:7f:57:08:e9:66:19:23:cf:49:00:d7:f6:
20:76:aa:c6:0c:2f:1b:02:35:f9:64:d3:81:8c:0e:
75:39:93:3c:44:88:1b:15:b5:25:d9:fa:5e:47:c3:
87:e3:d6:90:8d:dc:a2:69:46:6a:f4:13:1d:73:7a:
60:38:2d:86:a1:f8:b0:0c:18:97:75:b6:20:2f:f4:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:87:6E:26:D9:BC:AF:99:E3:F4:75:D7:01:CE:F3:2D:75:06:70:02
X509v3 Authority Key Identifier:
keyid:FE:50:C3:85:D9:EB:19:E2:EF:A1:4F:A3:5A:DA:5B:DE:A5:B4:56:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_lDDhdnrGeLvoU-jWtpb3qW0VtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B1/66E4E4F6FB4011EBBAB0DA3BC4F9AE02/_lDDhdnrGeLvoU-jWtpb3qW0VtM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5c:a9:61:eb:f7:1b:f0:f9:45:c0:db:75:09:2c:c8:03:36:
20:05:19:ad:f3:3d:c8:d4:82:82:03:2a:82:1b:54:1d:bc:f0:
da:d7:8c:14:05:0e:6c:97:44:e8:2b:0f:06:c6:e3:68:92:49:
df:ae:3d:b1:62:b4:84:50:2c:9f:47:80:cc:73:48:fb:a0:0f:
ec:71:39:0e:72:95:50:1e:b0:17:8c:9c:bb:92:fc:df:20:68:
03:fe:c1:72:47:5d:19:c8:46:de:ec:88:ac:74:b5:6c:23:75:
0a:aa:90:1f:c1:2e:e0:33:ac:94:1b:3c:d9:de:4a:f1:6a:53:
df:af:11:34:d7:e0:3d:79:c2:d1:1d:87:db:40:76:ea:3f:ea:
70:9a:1b:f9:1d:3c:04:13:59:86:58:bc:af:3c:a1:5b:da:94:
2e:cc:16:2d:ee:fa:4d:fb:7a:4d:a8:91:12:06:18:32:17:96:
62:ec:3f:cf:3c:a3:bf:ed:91:1b:94:c9:67:c6:50:a3:de:c1:
af:04:ce:b8:e2:39:b9:b3:8e:59:a7:55:3c:5a:f3:97:64:7a:
66:ff:38:c8:33:8a:ae:56:27:13:f9:86:80:c0:43:ca:84:07:
dd:59:03:26:54:1d:f4:8f:39:f3:2a:b9:dc:0e:b4:80:22:d4:
21:01:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:44 2025 by rpki-client