This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier: xZlMe2UwSm13VJph4b1roRyaVsefUgVWcp6RxY2A6LQ=
Subject key identifier: 68:65:C6:32:37:CF:36:06:7C:50:19:1C:62:B3:F5:DD:88:E6:E5:1B
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial: 06C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number: 06BF
Signing time: Thu 18 Dec 2025 21:37:32 +0000
Manifest this update: Thu 18 Dec 2025 21:37:31 +0000
Manifest next update: Thu 25 Dec 2025 21:37:31 +0000
Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: bFtU0buzSe268faB0BFDjSK4xjpFIDSY3rjHYEs9V6c=)
2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: WA/tDmga3l8gZvc4ZjpwlBlP3nDfqhnwsfFvTM1otOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1735 (0x6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Validity
Not Before: Dec 18 21:37:31 2025 GMT
Not After : Dec 25 21:37:31 2025 GMT
Subject: CN=6944741c-c462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:ca:8b:dc:3e:54:70:a6:e4:d0:bb:6b:f2:
07:d4:2b:39:af:74:22:06:19:26:26:96:d5:81:57:
80:c7:18:16:81:e7:b3:ba:e3:a5:52:c0:8a:5e:9e:
23:fc:c4:8f:a1:37:86:a4:e2:0e:2d:7d:37:a6:15:
ad:94:14:3c:e3:0b:35:f1:79:ae:5e:bd:1c:22:df:
14:89:9c:1c:5b:9a:c3:b3:2e:d4:36:5f:24:32:4f:
c7:97:a8:4e:16:f1:11:b0:25:6d:51:83:d9:34:fd:
12:3f:82:a2:f0:c5:1b:c7:9a:f2:69:b1:ed:19:5d:
5f:fb:80:83:89:91:ef:04:c9:b4:93:e8:9d:c2:ef:
3a:11:40:ce:56:29:b9:98:96:47:62:29:ba:5f:6a:
88:45:bd:ea:fb:2f:e7:57:a0:a9:5e:2d:3a:c9:0a:
8e:a9:7d:53:55:c6:c6:2e:b8:09:39:c3:70:d2:e3:
f7:a7:b8:3a:fe:c9:71:7f:ef:c0:c7:4d:f1:1c:90:
05:3c:17:d4:03:40:5a:52:3b:ca:08:ac:60:cd:0f:
41:4a:30:ec:8e:af:61:42:bd:4d:66:3c:19:f6:4e:
07:c7:5a:4c:50:af:08:bb:e7:0e:97:00:a2:b2:e8:
0f:f6:87:ed:dd:02:e8:b5:ba:eb:b2:67:66:25:a8:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:C6:32:37:CF:36:06:7C:50:19:1C:62:B3:F5:DD:88:E6:E5:1B
X509v3 Authority Key Identifier:
keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:cb:a5:9c:8c:e9:a2:46:cb:3b:c6:15:52:69:8a:49:65:
6b:d7:42:13:12:c5:25:f6:d0:98:ff:ad:c4:fa:c5:54:6c:4b:
20:b8:e3:a9:30:87:96:d5:ed:66:8f:24:10:52:dc:59:b3:50:
a5:f8:60:63:bd:01:1c:ad:dc:72:06:12:da:6e:7d:00:09:e4:
eb:8e:23:52:39:9b:ae:c6:be:72:7a:78:08:93:c3:c0:79:da:
c6:d5:81:2d:7f:f7:fa:c5:71:2e:57:30:56:e6:fc:c3:fc:84:
c6:a3:a3:ab:5a:d5:ff:65:d4:7d:01:a0:12:83:c5:3b:78:f9:
7b:0b:70:4c:d1:ce:d9:a8:16:41:f8:c4:f2:06:97:6a:49:d6:
c7:99:ca:9f:f7:57:08:b8:86:07:f9:20:3d:7c:72:93:f2:37:
28:69:c6:77:f4:6e:f5:8d:33:68:79:27:7d:6a:46:66:a8:18:
d1:a0:8e:93:db:50:06:7d:99:17:bd:d2:08:cd:a9:c3:51:07:
21:0d:97:8f:79:17:88:18:96:e4:e5:4b:41:52:f9:62:23:59:
a7:c7:1a:56:95:26:51:b9:6e:c6:59:62:b3:f7:e9:7f:33:d8:
72:23:5f:50:40:3c:59:74:cb:01:ca:f7:88:9f:68:76:a4:fc:
8b:a6:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:33 2025 by rpki-client