This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: QC6QAxIhvJqQfcgiYoxM30xOkiv0pyM6KqqgyubeEvk=
Subject key identifier: 29:E9:0D:97:00:24:E8:B3:C4:74:1A:43:A1:3B:81:E8:6A:D4:E9:92
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0238
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 0228
Signing time: Sun 21 Dec 2025 01:22:10 +0000
Manifest this update: Sun 21 Dec 2025 01:22:10 +0000
Manifest next update: Sun 28 Dec 2025 01:22:10 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: EoZj3LdZXdK7RTDeZxXnMMV808mGPa8HQY29hjeGYnA=)
2: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: 8XCBqH3UeeuDPYwwqRpO+AoZOfKPyRMZ7ican69IhKU=)
3: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: V+A9+3TWv6PDJfONkiYGSLwYtuk75uf9VZIwDYRykJo=)
4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: GzbxM9C1MjlQY8/LbZ9rlFb8KN037sgMyJVoACbdjQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Dec 21 01:22:10 2025 GMT
Not After : Dec 28 01:22:10 2025 GMT
Subject: CN=69474bc2-50ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:42:44:a1:ff:e2:2c:30:2e:e8:00:a3:04:
68:f2:79:95:9f:68:cb:ce:2d:70:b3:ad:89:aa:01:
f0:e3:36:ff:e8:5f:b8:56:19:e2:f8:09:ad:c0:0e:
cd:02:22:54:cc:4f:3f:4f:16:82:76:ca:53:72:04:
c3:8f:b7:15:9b:9a:65:34:d4:e2:cb:01:63:62:d8:
2d:28:64:43:35:8b:33:31:81:e5:23:12:64:9c:e1:
a0:17:39:ac:2d:25:4c:75:c8:2a:9c:7d:a7:9a:86:
70:28:16:72:70:77:77:4d:54:7a:f3:2e:ce:e4:ad:
39:a4:3b:b7:89:9b:0f:e8:e0:1e:4f:4a:56:04:0c:
1d:38:da:1e:49:84:b9:2b:fa:e0:1b:30:ce:a8:86:
7c:ab:f7:46:25:fb:c0:d4:eb:f5:f3:38:00:dd:ce:
7e:10:65:9f:6b:e6:c1:c0:45:2e:3c:a3:60:b6:f2:
d2:5c:21:e0:cc:c7:e8:3b:e6:78:f0:9f:50:2e:39:
90:32:22:e3:e1:cd:87:1f:39:2c:39:3c:fc:e9:22:
30:54:34:52:da:f6:20:14:cb:a8:e1:79:7a:de:f2:
e2:ee:fa:0b:f4:cd:18:17:a7:1e:61:36:f1:74:4e:
86:ac:d7:db:d2:d8:e8:f1:49:52:26:e5:fe:c4:3d:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E9:0D:97:00:24:E8:B3:C4:74:1A:43:A1:3B:81:E8:6A:D4:E9:92
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0e:e8:28:54:1f:37:91:07:74:64:9b:e5:5d:98:78:7c:5d:
23:28:a0:3f:0b:1a:e5:e0:c6:eb:b9:0c:78:40:66:d4:c1:ed:
17:4b:40:23:44:2a:fa:db:bc:1b:ad:a6:33:60:d7:f7:cc:20:
ba:da:e1:71:09:11:53:49:0e:c0:1a:90:12:05:cd:ce:40:f5:
d1:76:9e:46:18:98:45:0f:99:ed:eb:b4:c5:ee:2b:53:28:cf:
b3:72:88:4e:58:e9:88:01:60:e1:28:30:27:2c:82:98:11:b9:
d3:25:31:94:6b:b0:d4:91:c5:c1:d1:87:2f:80:c0:3c:16:c5:
fb:0f:69:99:ce:ee:32:66:93:7f:4f:33:5f:f5:da:5f:91:f9:
56:07:da:6d:27:4c:be:85:b8:6e:8e:67:e7:31:e0:28:18:13:
78:df:5e:7c:9a:59:62:bd:ce:59:13:65:9c:36:94:26:99:04:
51:0b:dc:5b:8a:92:ee:ad:4e:ff:e1:b8:ba:e1:7f:b5:bb:72:
6b:1c:21:c5:70:0e:b5:64:94:7a:31:3f:aa:cd:50:8a:6f:a3:
12:35:e8:65:68:2f:55:78:f3:b6:68:8b:d1:c9:0c:ad:5f:4a:
60:47:3c:8c:42:9a:93:05:5c:01:c7:f5:70:d4:ac:95:c4:8b:
a4:63:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:22:33 2025 by rpki-client