This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
File: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft (raw, json)
Hash identifier: wPNN81ZH1yZBNphVHVk4O0ZrCLlAfTPh31jQGgsvW1o=
Subject key identifier: B7:50:7A:37:8B:55:38:43:B7:45:89:EC:58:3E:BA:56:37:97:B6:F1
Authority key identifier: B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
Certificate issuer: /CN=A91F3099/serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Certificate serial: 0527
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
Manifest number: 051E
Signing time: Fri 26 Dec 2025 22:44:34 +0000
Manifest this update: Fri 26 Dec 2025 22:44:34 +0000
Manifest next update: Fri 02 Jan 2026 22:44:34 +0000
Files and hashes: 1: sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl (hash: LFNUEgrCnNvgpD8d1A8LFiuwzXK68NJ/AHhMublykeM=)
2: 99961F74315E11EC953A8215C4F9AE02.roa (hash: OEZzXzknZfZ5+s266LCfZPiCa3g7F7GJ2hmeU6hbgO0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 22:44:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1319 (0x527)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3099, serialNumber=B0F47A696ACD77C74A3473C4CD171DA3721CECD0
Validity
Not Before: Dec 26 22:44:34 2025 GMT
Not After : Jan 2 22:44:34 2026 GMT
Subject: CN=694f0fd2-ba31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:12:e1:72:1f:32:2d:46:ff:08:81:97:6a:51:
9f:5f:6b:e5:db:e6:88:49:ad:0c:0f:dd:3a:71:62:
c9:ed:d5:68:4a:2c:dc:ce:90:44:43:5d:3d:6e:95:
3a:f2:9a:7f:a2:dd:6e:f8:9e:84:ef:d3:f7:4a:2f:
72:8a:ee:f3:7c:e5:60:02:f5:50:d6:94:b6:aa:b7:
41:b6:3b:80:56:31:7e:82:95:04:ee:70:77:7a:1d:
6b:47:54:40:78:2a:71:91:e8:cf:4d:e5:ca:19:35:
aa:01:23:01:01:b0:24:fd:46:83:7f:c1:48:99:bf:
39:02:10:01:a0:c6:8e:bc:f1:39:82:fb:01:fd:a3:
1e:2d:e2:45:1e:e6:31:ac:30:a7:80:27:2d:27:15:
19:b4:98:71:8d:bc:8f:2c:eb:b6:c3:db:1c:d3:e7:
32:a3:44:cd:8a:62:63:c2:00:a6:4f:2c:ee:ec:7a:
ab:d1:fe:c4:8b:7c:8c:d7:fc:e1:80:45:2c:29:be:
22:45:1b:00:69:c3:ec:cb:a3:63:0f:b4:c8:12:d2:
4f:3b:4d:13:d2:79:a1:42:d5:fc:e5:3c:7d:cc:e9:
22:3f:f8:7b:9d:bc:10:80:32:de:09:8f:d9:07:f6:
83:6d:4c:66:bd:a9:51:8b:a6:45:80:67:84:b9:43:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:7A:37:8B:55:38:43:B7:45:89:EC:58:3E:BA:56:37:97:B6:F1
X509v3 Authority Key Identifier:
keyid:B0:F4:7A:69:6A:CD:77:C7:4A:34:73:C4:CD:17:1D:A3:72:1C:EC:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3099/EB4EFBC6315C11ECA9B73D15C4F9AE02/sPR6aWrNd8dKNHPEzRcdo3Ic7NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c4:ab:1e:07:07:7d:b8:69:52:8a:1d:8e:5f:bf:4b:39:60:
5b:04:04:22:7e:e7:f6:49:4e:a4:01:4d:b5:86:a9:8c:22:b9:
8e:6c:61:42:b5:43:96:a8:2d:60:c9:be:d9:bb:d0:e1:cb:77:
20:70:7b:1b:59:6f:2b:11:a0:14:c3:f7:fe:62:26:4b:55:f8:
5d:36:15:1e:0b:4c:f9:cb:33:49:60:ae:45:c0:cc:66:c6:33:
d4:e7:e8:e9:2e:ba:b8:e9:a3:14:9e:50:c5:aa:32:b7:3f:00:
d2:1b:29:0c:64:e4:82:75:66:7c:6f:f3:f6:08:74:54:02:ef:
d6:66:c4:d6:c4:7a:82:b6:14:92:d8:30:dc:0f:46:3b:7f:2c:
c0:b3:34:72:93:2b:fd:67:6b:05:d3:2c:4d:cc:d6:d7:9e:20:
d6:3c:97:e1:33:2a:99:0c:2c:e4:6e:42:40:f9:63:d2:21:84:
5e:5e:0c:e4:ed:37:11:8e:9d:94:4a:df:09:40:b7:8d:8e:bc:
8b:98:71:bb:d4:23:15:be:64:29:db:a2:86:d9:2b:a1:a3:58:
b0:00:a6:0e:b6:06:fe:df:3d:bb:1e:8a:1d:0e:70:b9:9c:a1:
58:9a:07:c9:cd:4e:ec:6b:7e:81:6d:0b:3e:b2:7e:26:53:f0:
45:65:10:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 04:37:06 2025 by rpki-client