This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json)
Hash identifier: uLfowNR26wYWfhlZGahEq3VX98vHqnkULCH4sJ6X2Dg=
Subject key identifier: E2:04:89:36:78:12:B6:60:6A:43:2F:D5:71:F1:69:CE:E5:3F:57:F6
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial: 0963
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
Manifest number: 0956
Signing time: Sat 06 Dec 2025 19:20:06 +0000
Manifest this update: Sat 06 Dec 2025 19:20:06 +0000
Manifest next update: Sat 13 Dec 2025 19:20:06 +0000
Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: T727sX2+ZZ9aAkQSiXWhWjBwRljMeP++NwRfcVnqa2I=)
2: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: 1cgPVh8WdtKfjeGj/rrD5cxiCucmJ6j+98VBK0Krq4o=)
3: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: DfbRrZ2co3f9GeR9Q8AQK2kJs9OcFCrj3LQOWU/ZriY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:20:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2403 (0x963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Validity
Not Before: Dec 6 19:20:06 2025 GMT
Not After : Dec 13 19:20:06 2025 GMT
Subject: CN=693481e6-d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:ea:60:2b:cf:21:eb:c0:dc:34:74:3f:6f:
56:09:a2:4c:d7:e6:c9:70:82:80:2e:af:9d:89:89:
fd:f0:e5:7a:0f:e0:9e:58:3f:10:a4:39:d6:c0:22:
d3:2f:57:7a:3f:81:9f:d5:c9:24:8a:a3:29:2d:f2:
45:10:86:19:8b:84:86:73:20:d2:a2:3a:15:e9:a7:
b0:9d:71:e9:9e:bf:bc:fe:56:83:ce:d7:65:d5:f3:
c8:8a:54:c5:18:0f:da:4e:d3:32:e2:47:42:b2:e6:
ec:aa:ec:74:69:3b:db:f4:6a:cf:09:99:4b:8f:62:
3b:47:7a:3c:8d:4c:5a:59:bd:cf:f9:23:9e:30:13:
79:f7:6a:50:b9:06:a5:91:03:af:62:c6:c6:28:e2:
b5:6e:cd:3e:23:16:7f:27:eb:84:3b:38:8d:fe:f2:
4c:9e:9d:2e:26:0b:1e:16:5b:97:33:31:d9:78:e7:
6b:67:9d:93:1c:cb:9c:cd:bf:2c:2a:83:f9:b5:40:
55:a9:b0:de:d5:93:eb:97:31:ff:fc:72:c8:99:94:
37:bd:7d:58:cd:72:3e:01:fe:f7:b3:e6:5f:08:3e:
b1:2a:2e:e0:ce:5a:36:30:43:58:c6:c0:cb:48:d6:
59:9c:af:ee:72:a4:7b:0c:6c:15:38:cf:de:4d:f1:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:04:89:36:78:12:B6:60:6A:43:2F:D5:71:F1:69:CE:E5:3F:57:F6
X509v3 Authority Key Identifier:
keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:f4:09:a6:d3:74:94:52:c5:55:c5:2a:72:6d:1a:7c:77:
4e:ef:ad:ce:2a:6c:95:9e:2f:09:60:89:d6:a1:33:16:b6:3d:
2f:6b:35:0e:9f:b6:92:f9:a8:fc:df:73:a2:55:d1:52:cb:94:
6c:b2:c8:78:e7:8a:ea:fc:04:2b:ad:9c:0c:19:14:c5:b5:9a:
02:4c:95:cf:b2:c9:3b:0c:56:bd:20:e1:42:5d:99:b0:55:ff:
ed:fe:3f:e1:de:19:67:26:31:f0:1e:d4:c7:03:c7:70:ec:1d:
9e:31:8f:b3:d9:c0:6e:a5:c4:8c:4a:cf:c9:1b:49:78:34:bd:
f5:28:e1:22:87:d7:26:b2:98:86:51:75:a5:90:26:84:ed:33:
67:40:cd:72:af:05:0d:b9:ba:e1:98:24:3c:69:43:93:e9:c4:
1e:64:76:3f:fd:5f:25:5b:0c:9e:5c:80:66:df:d9:69:1f:83:
95:c2:a9:ed:9c:6c:bc:b3:e1:da:07:61:b7:9e:dd:b0:a2:9b:
30:35:91:47:db:8f:6f:7f:57:a3:79:c9:4f:08:25:ab:bb:b4:
f3:9b:9b:a9:51:6e:0f:33:f8:ad:e7:6c:f4:73:bf:e7:1d:c5:
24:be:1a:86:02:ad:d6:5f:fc:fe:3d:0f:50:c9:62:ac:f1:76:
3c:86:84:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:32:01 2025 by rpki-client