This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json)
Hash identifier: RZgq8Sg0zY0U3sTEydBjljrbrvGCz+hltiCuThaNZmE=
Subject key identifier: 7C:32:7F:C8:E5:48:BA:21:73:80:52:C2:C3:6B:95:DB:86:E3:55:8F
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial: 101D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
Manifest number: 0FE7
Signing time: Thu 18 Dec 2025 17:18:18 +0000
Manifest this update: Thu 18 Dec 2025 17:18:17 +0000
Manifest next update: Thu 25 Dec 2025 17:18:17 +0000
Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: VoVDxuOifkxuO3v00zp1fImBFO3Y2N0Q9oZOuLr0auk=)
2: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: XWm8GaGIPPLP9AKtaT6KRszth65jZeSEF8vfSa7oAA0=)
3: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: QtpDimKOHqXsxnqa4q87zCBuPpMrfxyNN2d7cp4WlrA=)
4: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: Jk6V50ct0NhfCUNeq2rSB6SPY6PZ86y8Zd5FDESJ7kI=)
5: B3876B1821C911EB991D562EC4F9AE02.roa (hash: 6uU1bRzcclFeMC/RnwQZxh3s9UKuJJHVwL7cdGjMFOc=)
6: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: PNhMIJG2WqhTSsHQs6Q3B5W+HPqAu/8Af4Ot4nkDDLQ=)
7: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WNk4We2Ht/Om3rf3IbH7SVRsK901hQ7kL7sR1ONDJ8A=)
8: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: t18G/jUeuq8lptvTyxkqs2wnq4jb4g41EOSptQznrUs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4125 (0x101d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Validity
Not Before: Dec 18 17:18:17 2025 GMT
Not After : Dec 25 17:18:17 2025 GMT
Subject: CN=6944375a-6f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:7e:ac:34:5b:d2:3b:49:18:9c:fa:37:3d:
d9:91:1a:c5:ab:ea:b7:64:89:f7:d9:f7:d6:5c:22:
69:4f:8e:f6:f1:99:7b:c6:c6:63:e0:d9:5f:2e:9a:
c9:2c:54:5b:30:2c:86:ba:eb:a6:43:09:43:99:a1:
2d:c3:6e:b1:1f:26:3d:52:40:cd:b2:38:2a:ad:c8:
db:0f:92:c5:de:76:1c:fd:39:33:a0:78:f4:d5:66:
6c:ae:d1:c6:97:0d:07:d5:db:ae:aa:62:1d:69:39:
92:f9:e9:27:a9:d2:ff:28:5e:d2:8e:15:94:87:69:
22:0e:48:95:e8:cb:7b:fb:86:12:ef:6f:48:ae:96:
37:4e:94:2e:13:dc:64:4f:d8:e9:51:fe:4a:56:0f:
fb:b1:ef:7e:50:33:49:2b:1f:34:a6:67:8b:06:58:
5c:7e:f9:3c:ec:59:59:46:5b:b5:39:8c:09:71:78:
50:94:54:3c:3f:49:4c:c2:37:21:db:3d:c3:9a:ec:
a6:9e:49:a0:5b:ee:20:71:6a:f9:1c:1a:17:3c:8c:
a0:12:2a:f2:6f:00:61:66:94:aa:19:8b:70:ff:1a:
f5:6e:50:50:82:50:71:db:0a:46:f2:27:2b:de:85:
05:0b:04:0b:61:a6:de:7e:36:ad:2f:31:39:03:ca:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:7F:C8:E5:48:BA:21:73:80:52:C2:C3:6B:95:DB:86:E3:55:8F
X509v3 Authority Key Identifier:
keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:22:12:9b:1a:cd:c9:1b:07:8c:f5:42:8e:01:38:07:d0:
e7:00:8b:b5:9a:21:5a:2c:81:03:c6:e0:9a:a8:a1:b1:03:13:
16:df:01:21:be:60:98:23:80:b1:0c:ac:11:50:6b:2e:c7:f5:
9a:7d:b4:15:79:e3:b5:0b:01:3e:6b:e6:e9:10:4c:f7:99:1d:
a9:01:61:f9:0f:a3:79:d6:df:f4:b2:6c:38:31:28:23:a8:9f:
e1:34:c7:c5:e5:67:a1:58:d2:94:7c:1d:40:9c:9e:eb:37:38:
fb:47:0b:86:83:45:84:b2:b5:9e:00:e7:c1:44:b5:ea:f4:ae:
10:44:bd:d9:49:aa:bd:f7:76:61:5a:36:79:14:8e:a1:d2:90:
f0:83:de:38:8d:ca:4d:c6:b3:30:5b:1f:e3:e7:48:4d:61:8b:
a3:0c:b2:c9:34:e7:64:4e:df:32:f8:c2:9f:48:24:aa:ea:6b:
4f:0c:69:4a:7e:1d:46:09:f0:c3:02:95:51:39:4e:d4:8f:4d:
2a:2c:18:2b:70:5f:6b:b2:3d:f0:5d:0a:ef:44:08:1e:9d:e6:
c4:4c:90:e0:c0:5f:d6:9a:c0:9d:83:ae:b6:e8:79:67:6f:95:
c0:3f:e1:29:db:3b:8b:42:01:2e:0a:ca:5c:3e:41:28:53:24:
04:fc:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:43 2025 by rpki-client