This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
File: RMCz5V6PTVgxhgXnITScArKJwv0.mft (raw, json)
Hash identifier: 7AjDj4JVowFFB8edgMmRDRdTXoVVBH7GCpwSuciLorA=
Subject key identifier: 8A:D1:75:34:31:9F:E2:FE:8A:79:5C:5D:63:40:28:44:FA:53:5B:0B
Authority key identifier: 44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
Certificate issuer: /CN=A91167F7/serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Certificate serial: 073E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
Manifest number: 0738
Signing time: Mon 08 Dec 2025 20:39:34 +0000
Manifest this update: Mon 08 Dec 2025 20:39:33 +0000
Manifest next update: Mon 15 Dec 2025 20:39:33 +0000
Files and hashes: 1: RMCz5V6PTVgxhgXnITScArKJwv0.crl (hash: vu/QG9y4s7CMPdcWDoMKmiFoCAxKuObIwXCbQlDT7AM=)
2: 980A0D7254B511EBAC30E864C4F9AE02.roa (hash: q+i3wafgejbFMbyjX77ENtsRan2UT1Ux8wQq92JlMS0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 20:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1854 (0x73e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91167F7, serialNumber=44C0B3E55E8F4D58318605E721349C02B289C2FD
Validity
Not Before: Dec 8 20:39:33 2025 GMT
Not After : Dec 15 20:39:33 2025 GMT
Subject: CN=69373785-5bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:55:63:c9:ad:62:4f:7c:0b:67:07:3e:eb:
4f:5e:b9:ba:4b:fc:df:2f:a6:d0:d3:ac:27:fe:83:
0c:00:d0:8a:e2:1d:1d:4c:17:10:d6:d7:9e:0a:db:
89:12:a4:b2:de:29:34:62:ca:8e:0b:fb:28:bc:9e:
f7:ec:02:b9:00:97:2d:dd:83:ac:b5:6e:6f:5b:b9:
ae:6c:e5:21:6b:b0:17:3c:e3:cc:3f:a6:d2:d4:52:
09:7f:fe:e3:ff:c1:73:21:c0:61:e8:e7:8b:c7:e8:
b5:73:e7:28:dd:8d:c3:ae:d7:01:22:b4:d9:0a:0d:
9f:80:d0:68:0c:d5:30:34:90:2c:03:e4:50:f5:9a:
18:58:a2:f7:73:71:b9:44:be:0d:c6:5b:fd:fd:35:
c8:6c:1a:ff:68:2e:bb:a5:7d:c3:a6:69:18:da:56:
e0:ac:90:c2:2e:cb:ab:d3:9b:8e:88:d4:b6:72:8e:
09:ac:5b:d7:b8:0b:29:cd:cf:24:ef:09:70:1f:71:
0c:d3:09:ed:5f:2f:30:d3:b0:93:49:e2:fb:ba:18:
2b:c1:f3:6f:64:92:0c:e8:b8:da:a6:69:07:ef:a2:
be:aa:0a:4e:65:85:44:ac:4b:8c:0b:6b:c2:19:96:
92:36:ba:f0:3d:50:27:ea:a3:a4:03:c2:05:cb:76:
e9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D1:75:34:31:9F:E2:FE:8A:79:5C:5D:63:40:28:44:FA:53:5B:0B
X509v3 Authority Key Identifier:
keyid:44:C0:B3:E5:5E:8F:4D:58:31:86:05:E7:21:34:9C:02:B2:89:C2:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMCz5V6PTVgxhgXnITScArKJwv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91167F7/BFD3EB1A541611EBA4D56863C4F9AE02/RMCz5V6PTVgxhgXnITScArKJwv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d9:32:11:e9:0e:2a:69:f6:44:b9:21:6e:b1:cd:e0:26:c9:
b5:86:8f:0d:7c:2d:c7:74:c5:71:51:d3:70:65:f0:32:3e:62:
b4:dd:e3:5b:5e:e5:fd:a2:cb:66:b8:9e:bc:ba:fe:68:c8:e0:
6c:e3:55:ce:d8:78:4f:b1:5e:8d:78:f0:c9:bd:9e:e1:e6:4e:
7c:4b:fe:6f:41:6e:db:73:ab:ac:da:fa:fb:ff:a2:61:05:c1:
fa:67:a3:a7:94:c1:06:86:49:7d:c3:a5:09:e6:9f:9b:02:a7:
bc:71:bf:c3:8c:32:92:be:91:da:3b:c8:8a:f3:06:36:59:46:
7c:32:40:94:94:72:a9:88:fc:b5:3a:21:54:82:dd:ed:76:c1:
e4:99:95:fb:7c:cf:ae:7a:be:34:74:b2:3a:ec:61:03:66:21:
4d:f9:1f:b0:e3:c9:78:45:f8:5c:a0:79:5f:f5:a1:b4:f7:4e:
67:40:22:2e:94:9d:62:00:68:ad:d7:d9:fa:ec:c5:9b:b1:65:
e7:20:2c:17:44:57:57:d9:fa:07:76:ea:8d:60:68:8e:53:a2:
7d:7d:79:f6:6e:61:e3:3a:cb:a7:8a:35:f0:db:a0:47:53:5a:
9f:51:b8:2e:ef:6f:09:1b:ab:ac:4d:c7:95:3e:a6:98:67:59:
30:d1:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 09:27:31 2025 by rpki-client