This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json)
Hash identifier: VpjjmM8GhWqXQ5nubA8tIhv3lblRkNcR/CLzYjeMgL8=
Subject key identifier: E9:4F:C7:6E:C2:16:42:85:12:6C:5F:22:63:06:A3:2C:A5:03:38:42
Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
Manifest number: 01A5
Signing time: Fri 05 Dec 2025 01:29:54 +0000
Manifest this update: Fri 05 Dec 2025 01:29:54 +0000
Manifest next update: Fri 12 Dec 2025 01:29:54 +0000
Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: LDBqm5A9ArzGITPvPkx98V7zQXCovol3MjFbp9ZcBb8=)
2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: pevsaD4Tdrw3Ixu5KEE5rMHmedLOctKuJ/befOUTShA=)
3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: T8iSluo7SP9pG/tufgbYgInS5lll4OSd156UhBgQ4N8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B
Validity
Not Before: Dec 5 01:29:54 2025 GMT
Not After : Dec 12 01:29:54 2025 GMT
Subject: CN=69323592-04e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:af:58:e2:d7:f8:91:22:04:be:05:6b:c7:
40:a0:31:f1:12:9a:69:40:59:f0:25:a3:3d:d8:c8:
cc:14:d3:6d:12:38:e0:fe:8c:b4:18:82:06:f1:2c:
cd:fe:8d:30:76:ba:7a:eb:a8:e9:a6:00:fd:a1:fd:
d9:12:26:ea:61:60:7f:18:c9:db:dc:3c:0f:b9:64:
9f:84:4d:dc:5d:8a:01:8d:91:bc:c5:5a:a2:7f:70:
30:f4:cb:61:18:c0:d6:65:dd:12:d5:34:39:ca:2f:
3f:19:a8:d5:4b:75:67:01:73:d2:ca:85:d8:43:ae:
0b:de:a4:67:d2:fc:1a:2c:39:96:c6:a1:4c:36:1c:
8b:d9:ae:fb:0d:88:72:89:92:79:da:54:d7:d5:6d:
b5:1b:cf:ca:ea:c9:91:cf:0e:30:ae:ab:89:7e:b1:
d3:55:cf:99:e6:86:92:9b:36:ec:28:79:71:40:81:
bf:b6:78:21:8e:af:bc:b9:cf:72:8f:62:d8:42:3b:
a4:b8:9d:a2:12:2c:12:6d:78:ba:b3:cb:a5:06:6b:
12:33:f0:d0:0a:91:20:24:74:a8:1e:db:bc:88:41:
56:5f:cf:cb:94:56:dd:85:de:a4:e5:29:37:0d:6d:
a5:d4:2c:c3:4c:37:32:a6:47:08:3c:0b:49:e5:ba:
81:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4F:C7:6E:C2:16:42:85:12:6C:5F:22:63:06:A3:2C:A5:03:38:42
X509v3 Authority Key Identifier:
keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2f:ad:ea:e1:76:32:46:1b:71:51:4f:89:e1:f6:d9:4d:7e:
0a:3f:db:a1:6a:c2:ce:e7:69:22:c5:54:39:5a:16:be:ff:52:
a2:97:6a:c9:d8:75:8c:09:92:86:85:b5:c3:8c:2c:c2:9a:06:
af:7a:2d:74:d6:c2:cc:af:b2:12:61:f8:17:0c:4b:fd:8c:af:
64:44:e3:6f:8d:4f:58:be:d3:ab:d3:40:93:5d:c6:6c:83:74:
3b:a3:56:d0:3c:28:15:bd:41:86:c6:7a:c8:b9:42:e9:a2:1d:
14:6e:ce:b7:b7:7c:1e:c5:82:29:ed:38:f7:3a:eb:cd:a0:da:
36:32:d5:0b:ff:93:37:77:0f:82:05:f7:02:9e:a1:4c:8e:aa:
ef:a1:94:3c:32:08:85:20:ce:ef:77:a4:01:79:81:36:50:c1:
a8:c8:7c:67:ba:74:1f:c3:5f:59:e1:09:ce:8d:43:ab:1d:b0:
2b:52:a8:04:42:60:88:c0:be:cf:53:a9:8c:1e:8b:30:73:15:
e6:ef:e2:26:b6:5f:4f:ad:46:da:25:c4:9d:c4:43:23:64:48:
a5:b5:4f:75:e9:8e:27:28:58:85:65:61:ac:17:e9:d5:d9:2e:
78:2b:7b:c9:1e:dc:0d:f7:65:a5:60:b1:90:79:b1:1d:e5:52:
c7:d5:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:00:31 2025 by rpki-client