This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: hneVfxSfDIMVX6UnDWC+28UQrdrQfxJnEDOXpRhdb9I=
Subject key identifier: 79:C8:B6:AB:24:58:78:41:3F:D8:0D:1C:C6:A0:AA:90:53:A9:44:0A
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 0817
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 07FE
Signing time: Sat 20 Dec 2025 20:34:42 +0000
Manifest this update: Sat 20 Dec 2025 20:34:42 +0000
Manifest next update: Sat 27 Dec 2025 20:34:42 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: +9ZlDFGxfRu2LJ1Qs6gcWM/TBlxUJFG1gOsmJrcJxmk=)
2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: rQ3HbUHQH7eVX3Cnh8/MApZL6I89rN2JY57V2VKSths=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071 (0x817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Validity
Not Before: Dec 20 20:34:42 2025 GMT
Not After : Dec 27 20:34:42 2025 GMT
Subject: CN=69470862-25c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:71:78:15:ef:1a:8d:e9:5e:13:31:ad:42:
c0:40:e4:d4:2f:32:72:b0:90:8a:8e:dc:e0:a8:78:
12:c4:6f:d8:31:00:0b:b2:35:c2:a7:50:d4:ef:c4:
0f:fa:03:8c:e7:3c:9e:ad:f4:08:10:53:60:f0:3b:
49:0e:d2:f8:ea:9f:9b:d6:0d:d1:c7:5c:5e:36:2f:
17:5f:8d:68:25:82:7d:f9:2f:fb:1c:3e:ef:71:d7:
ce:ab:a8:97:d9:12:48:a0:d9:4d:1d:ba:5d:c2:c1:
8b:40:4e:07:61:c3:dd:6e:79:33:af:c6:d1:cc:e1:
cf:66:5f:2d:b6:0b:07:bd:f0:32:62:ec:6e:ef:f3:
09:0e:d8:9f:5d:87:4b:8b:80:2f:c3:32:c8:85:ca:
36:6a:42:8e:74:e8:3a:47:b2:ed:e9:5a:ef:6f:00:
0d:93:f0:2e:67:ef:91:d2:98:d6:90:36:2e:78:91:
8f:b9:05:2e:a0:24:00:66:79:4a:55:d5:8e:b2:df:
09:4b:6b:66:43:a1:b2:5e:81:39:36:83:17:cb:ad:
27:93:41:39:b3:7e:ab:76:33:ae:c2:b4:f9:03:8e:
66:77:93:05:fa:c5:4c:d6:79:ad:aa:2c:3b:b8:f3:
77:2a:e7:cf:62:dd:b1:19:20:a6:2c:b4:8c:ce:c9:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C8:B6:AB:24:58:78:41:3F:D8:0D:1C:C6:A0:AA:90:53:A9:44:0A
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:55:37:ec:ff:83:6a:24:5e:e2:af:f2:0d:bd:e7:15:86:d3:
39:6c:e0:3b:7d:8c:f4:74:cc:fc:2d:b5:ab:71:21:7e:f3:f2:
07:54:63:67:27:2f:31:7a:59:6b:82:74:ac:e5:9f:b7:98:69:
35:be:0c:10:c4:c8:fa:84:f6:74:f3:03:00:a6:39:35:1b:fd:
1e:46:87:46:71:e8:e5:a5:5d:55:77:7c:52:d7:c7:d1:97:91:
ed:91:f6:ad:ca:09:59:83:97:a4:00:47:05:66:3a:fb:3d:58:
09:49:68:b7:2f:1b:b6:1a:b3:ff:14:3b:4a:24:86:fc:18:a3:
a3:fb:8f:a9:db:76:55:c4:e1:bc:e1:f3:a9:b3:f1:7c:5b:c5:
68:f5:fd:32:80:cf:5f:7e:e0:4f:ef:b7:4c:8b:f8:f3:b0:45:
a0:c5:5a:24:95:28:73:65:ac:71:0d:88:99:04:c4:af:19:c3:
a7:69:41:df:ba:8a:d9:38:d9:0d:91:f4:ea:b9:c2:fe:52:91:
81:54:28:c6:b2:e4:f2:67:94:38:b6:37:47:fd:b8:0b:77:55:
f4:4d:76:39:fd:53:51:88:77:0f:1f:72:7b:7a:f4:b6:ef:1e:
c8:00:3d:9e:1c:d6:a4:cf:c6:af:9d:b5:59:1a:a6:7b:c2:8a:
de:1f:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:14:26 2025 by rpki-client