This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
File: rKBb-WKVthwuROndPExIxFm56Vw.mft (raw, json)
Hash identifier: F2MuDX2uEUel7UkgIUsCq+LnRNDthpJGTWc7jGvXCKo=
Subject key identifier: 2C:87:4C:F8:18:02:08:D8:77:6C:EA:01:98:83:C5:FF:06:7E:C6:A1
Authority key identifier: AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
Certificate issuer: /CN=A91547EC/serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Certificate serial: 30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
Manifest number: 30
Signing time: Fri 05 Dec 2025 05:25:53 +0000
Manifest this update: Fri 05 Dec 2025 05:25:52 +0000
Manifest next update: Fri 12 Dec 2025 05:25:52 +0000
Files and hashes: 1: rKBb-WKVthwuROndPExIxFm56Vw.crl (hash: S4vCClDsTW+PY/yeEbLn5od4L1dJ/6ASzb60zzl6ey0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91547EC, serialNumber=ACA05BF96295B61C2E44E9DD3C4C48C459B9E95C
Validity
Not Before: Dec 5 05:25:52 2025 GMT
Not After : Dec 12 05:25:52 2025 GMT
Subject: CN=69326ce1-0d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5c:5c:52:96:be:b2:af:cd:b7:a6:1d:87:6a:
16:47:8e:8d:81:c6:17:0c:80:95:e0:00:17:da:d1:
16:85:e9:4e:0b:df:00:15:2d:85:e2:4d:da:c7:90:
e4:69:08:fa:bf:1b:6f:94:0b:94:be:68:83:cb:55:
4e:26:e9:35:40:c1:f7:5b:78:c9:ce:3b:b7:03:85:
60:a4:25:59:b1:c5:93:ab:4e:52:de:38:6e:9f:84:
0b:1e:cb:64:e7:92:6d:d2:5c:2d:5c:8d:21:ba:10:
98:25:5f:91:f7:39:57:62:84:4e:e6:a7:db:fa:5d:
41:18:e7:88:61:3d:59:c0:cd:8b:71:8a:63:11:68:
05:4a:8a:95:4e:e7:92:3f:11:64:9a:ed:ff:ab:7e:
70:70:5c:49:f2:b4:5e:a7:24:cf:76:cc:80:ca:1c:
80:c2:e7:98:4e:aa:2b:b3:3b:18:56:34:e4:00:98:
26:97:87:e4:02:29:d9:98:3a:2b:4f:54:fe:d5:ba:
44:a7:bc:47:7c:b1:43:76:80:58:83:63:f4:d4:1d:
58:e9:da:31:16:18:6b:8f:26:ef:dd:45:f9:0f:aa:
98:11:66:de:dd:27:52:38:0a:50:8b:4f:7f:08:a0:
d6:fd:67:ec:03:f3:d9:2a:3d:7e:9d:9a:fa:41:7a:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:4C:F8:18:02:08:D8:77:6C:EA:01:98:83:C5:FF:06:7E:C6:A1
X509v3 Authority Key Identifier:
keyid:AC:A0:5B:F9:62:95:B6:1C:2E:44:E9:DD:3C:4C:48:C4:59:B9:E9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKBb-WKVthwuROndPExIxFm56Vw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/2E65979687DD11F0B74CFE76C4F9AE02/rKBb-WKVthwuROndPExIxFm56Vw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:87:d2:6d:d7:2f:c2:11:75:6b:b5:38:1f:0b:df:18:80:55:
58:ad:bd:53:23:d3:d4:50:1e:6c:58:ed:79:ee:db:3b:c7:c0:
31:7d:f9:6e:a7:9c:fc:49:92:1c:fa:20:29:46:65:62:8b:2e:
5e:cc:2d:14:57:00:3e:48:a2:df:d2:e8:6c:fa:6f:56:76:e9:
2c:5f:bd:17:ed:55:e7:9d:dc:40:0e:aa:df:ac:74:44:e9:54:
66:2d:70:c2:14:a3:0f:8a:23:a5:75:f3:3b:97:b8:6d:d8:df:
7c:43:ea:87:82:13:e5:00:99:4b:ac:0c:61:c8:d9:80:77:e6:
9a:9b:57:60:c6:4c:93:6e:ec:e4:13:40:95:a1:6f:76:93:33:
43:32:40:4c:78:62:0c:65:c7:be:f8:93:6a:a7:13:d2:83:cc:
4c:00:72:df:a4:3b:70:6d:c2:53:12:e3:a6:f1:c2:21:5b:b9:
01:b6:57:19:67:37:e7:d9:0f:45:5b:d8:a8:cc:02:09:b4:e5:
61:9f:41:65:c8:61:fe:d1:37:2d:4e:da:28:f2:a8:9b:bc:69:
15:0c:f8:40:b7:60:ff:db:89:59:60:95:46:a5:41:fa:94:5a:
a0:7d:6e:cf:1c:63:df:6f:c9:99:50:91:f9:b6:db:a8:8b:84:
5d:38:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:25:15 2025 by rpki-client