This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
File: 1cBKCsLVKt_nBVZHjcsOHYHtENo.mft (raw, json)
Hash identifier: /tnfC+Ph0cTXa+JNWKvs6u4UhjcQp4VO7Eu1nCu73Os=
Subject key identifier: 1B:2D:B4:88:DF:9F:33:FA:33:71:36:EA:C2:54:EB:F8:97:B2:29:26
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 04D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
Manifest number: 04D2
Signing time: Thu 04 Dec 2025 22:22:50 +0000
Manifest this update: Thu 04 Dec 2025 22:22:49 +0000
Manifest next update: Thu 11 Dec 2025 22:22:49 +0000
Files and hashes: 1: 1cBKCsLVKt_nBVZHjcsOHYHtENo.crl (hash: 71OP60NjvZ4OSSgnrSr90EE1MeugW0adtlztxUyNr3Q=)
2: F11B4C14E40111ECBD78E571C4F9AE02.roa (hash: viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1241 (0x4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: Dec 4 22:22:49 2025 GMT
Not After : Dec 11 22:22:49 2025 GMT
Subject: CN=693209ba-00b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:45:4f:8c:72:4b:9f:3c:53:2a:01:c9:91:
05:ee:e5:ea:77:41:e9:c4:80:6d:1f:ad:74:86:ca:
f0:11:99:c8:b4:88:22:4a:8f:b3:1d:1b:c3:d2:b0:
01:95:01:3a:7f:a4:06:ca:cc:3b:26:a1:48:73:04:
d4:2c:9d:61:55:0b:76:f9:3e:1b:e0:5b:ac:5c:c6:
12:43:13:e2:cb:ff:b9:aa:7f:ce:d1:7b:ad:70:df:
3a:94:8c:61:50:fe:36:bf:05:58:21:8d:92:3a:1c:
55:a7:a3:f7:76:a3:4b:1c:63:84:6e:ee:00:8c:38:
15:3f:f4:f7:d6:f8:39:e0:4d:ca:ff:02:d4:37:65:
9d:08:ce:0a:e4:2e:ec:b4:c4:0a:57:8e:77:c0:72:
26:16:66:8a:2c:f8:32:4d:2f:55:94:fc:a0:77:80:
b1:b8:2a:f8:fa:e9:29:08:92:0c:08:14:5d:9a:0f:
07:31:72:2a:5a:a8:42:e3:be:0b:4e:86:c8:25:8a:
82:5e:86:51:73:86:a1:cd:c1:73:65:83:1c:df:02:
a6:a7:90:32:8d:d7:10:2c:8e:b7:d5:5f:af:a9:14:
10:62:8b:af:87:0d:a0:23:38:f6:6c:6e:82:ee:54:
7e:d0:da:25:b7:cb:61:5b:ed:ae:ab:64:a0:e4:99:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:B4:88:DF:9F:33:FA:33:71:36:EA:C2:54:EB:F8:97:B2:29:26
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:a1:94:eb:ff:37:0e:2a:f1:35:c0:cf:35:4d:12:e7:a0:
e1:17:39:ac:bf:44:51:41:f5:20:42:59:ef:fa:0f:55:d1:95:
78:35:9c:a4:ac:d5:9b:74:b5:2b:02:6c:70:9c:cc:60:6c:2a:
22:9d:e7:bb:b8:41:0c:74:3b:d3:5a:1f:4e:27:b2:19:06:bb:
5b:b6:44:c4:b0:7a:d5:d9:d4:98:18:b0:53:b6:1e:13:74:54:
d4:d6:5f:71:12:3d:80:ec:c4:ff:74:fa:32:76:7e:fe:d3:f9:
99:d6:7d:dc:9e:d0:ce:a2:95:cc:11:9c:a5:95:bb:14:f5:8d:
17:96:bb:43:1e:09:5e:46:53:30:a0:ab:4f:2f:00:a5:1f:b0:
9e:95:50:39:95:20:1e:49:83:f5:ac:d8:72:04:09:f7:30:1f:
48:4c:18:07:7d:2f:6c:03:dc:77:b6:20:e9:3b:96:2e:ba:11:
d1:29:7e:7f:df:23:97:e4:b5:cd:03:1b:14:41:6d:eb:6c:e3:
1a:4f:16:12:89:43:3c:53:44:6d:2b:03:93:78:dc:7a:f5:d4:
c4:66:2e:ed:5d:e8:40:8b:3b:2a:43:b6:21:91:5b:dc:16:09:
27:03:71:68:a7:dd:7b:84:4b:a3:4d:da:88:40:b3:b5:9e:ca:
2c:89:a4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:20:42 2025 by rpki-client