This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
File: peb1x0u860AJxV7qaJcDSZcf9jo.mft (raw, json)
Hash identifier: xBo5ODACzXaJoqO4tHHKMUHy2vbdJ1z4KXtpD4soE9w=
Subject key identifier: 7D:D2:D0:98:3F:30:AC:7E:C0:E0:4C:6E:8F:5F:CF:B9:90:B5:4D:7B
Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
Manifest number: 0240
Signing time: Fri 05 Dec 2025 00:09:54 +0000
Manifest this update: Fri 05 Dec 2025 00:09:53 +0000
Manifest next update: Fri 12 Dec 2025 00:09:53 +0000
Files and hashes: 1: peb1x0u860AJxV7qaJcDSZcf9jo.crl (hash: zXKjMY3t7xRVaWY4J47WZ9WHEx/Xj2uFLfn0lGLrBmY=)
2: DFB66DA85E9211ED83D40E65C4F9AE02.roa (hash: vYjDKJoL/LVvPBznc+DyGkQ1jp9r0XRmWXYGOVlx3uA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:09:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A
Validity
Not Before: Dec 5 00:09:53 2025 GMT
Not After : Dec 12 00:09:53 2025 GMT
Subject: CN=693222d2-a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fe:d8:8b:d0:56:60:06:f0:a9:bb:4e:33:4a:
03:10:4e:27:0a:dc:44:67:4b:38:9a:28:5a:2f:6b:
76:58:65:8c:77:01:c5:dd:9a:bd:90:e7:8e:54:80:
06:fd:fa:f1:c7:e0:0b:51:74:a7:28:77:e3:47:ef:
41:33:c5:78:9f:da:05:73:ce:ea:2e:a2:c4:12:7d:
70:c1:19:26:f5:41:c6:db:43:36:76:ae:e1:2b:e5:
6c:c3:91:05:86:6e:31:83:3c:a0:46:96:1d:92:3d:
32:73:ed:4c:b3:9b:1b:00:1c:90:23:ac:c1:6b:0b:
de:c5:2a:07:55:92:41:bc:fd:6c:7c:c6:53:49:18:
bd:93:39:91:ea:1b:01:90:e9:bb:35:cf:79:32:0e:
4a:a6:f7:15:a1:3f:2a:51:a5:33:89:20:69:54:0f:
b6:26:b0:7a:51:6c:83:2c:f5:65:bc:d3:e1:0e:17:
d0:ad:1a:88:47:c5:1d:90:13:fe:ba:93:fc:c3:13:
f2:af:24:cb:1f:c8:bf:e7:da:bc:9b:1d:16:89:63:
c2:26:40:d9:95:62:19:a1:de:a4:c2:62:4c:22:d6:
dc:78:35:d2:2a:51:6d:05:e4:e4:08:f5:dd:0a:ba:
af:c1:d2:0f:b0:f6:5a:20:ea:8e:23:45:a0:db:50:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:D0:98:3F:30:AC:7E:C0:E0:4C:6E:8F:5F:CF:B9:90:B5:4D:7B
X509v3 Authority Key Identifier:
keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:9a:73:77:4a:1c:db:8d:6b:5f:f0:c5:03:31:55:54:6b:e6:
7d:dd:0b:ce:ac:13:d3:84:68:10:73:ea:ae:3d:bf:39:31:3a:
a1:1c:5a:a5:4e:26:f6:1c:ee:1a:86:c3:5d:50:a1:24:82:70:
73:82:5a:cf:8e:e9:09:0f:a0:8c:ca:41:f6:77:49:72:bf:85:
95:07:38:a6:f6:22:f4:ea:39:a7:c1:13:75:df:63:8e:5e:ce:
06:ad:7a:91:a4:c4:d8:a0:52:68:c7:58:ce:82:c5:b0:87:a2:
86:15:91:6b:9c:fa:60:e1:97:3e:a7:23:d3:f8:75:c1:d3:2a:
f1:3f:bc:84:d9:39:f0:85:80:a3:b8:2f:41:56:8b:0e:93:a5:
21:a5:b5:2d:6c:47:46:af:f2:66:98:f1:71:30:d6:54:fc:37:
27:f3:14:7f:ed:83:63:a8:ac:b5:aa:d7:72:99:25:fc:c3:cd:
88:0d:69:72:c5:17:d6:05:75:63:96:c4:f6:e8:00:be:47:7d:
4d:48:16:48:a5:a3:69:89:f3:56:f3:b1:7d:a2:03:54:51:ad:
6b:4a:53:8f:e1:6b:b4:07:0d:92:e7:21:c6:0c:3f:be:dd:c8:
d2:9c:25:54:8c:f3:35:62:35:fe:be:6e:40:2b:d0:7a:15:c5:
da:d2:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:58:32 2025 by rpki-client