This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json)
Hash identifier: mDDR9th77F/QaMZL8Th97jGugIW8mOXEOuMHAnvSpCU=
Subject key identifier: E2:93:83:E7:22:F3:C5:77:EE:38:D6:B1:0F:1A:FF:76:7F:52:BD:F8
Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Certificate serial: 07EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
Manifest number: 07E4
Signing time: Thu 04 Dec 2025 20:11:08 +0000
Manifest this update: Thu 04 Dec 2025 20:11:07 +0000
Manifest next update: Thu 11 Dec 2025 20:11:07 +0000
Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: WXlrGRmdITAxsAuSGmCm8GTx3bmLjwre+YahmFtfBDU=)
2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: xKjoE/L7amuNhMSwGDrHGE81K3Mhyx0/ODd0Eq8CTmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2026 (0x7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568
Validity
Not Before: Dec 4 20:11:07 2025 GMT
Not After : Dec 11 20:11:07 2025 GMT
Subject: CN=6931eadc-3437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:9b:39:15:b7:b9:62:e5:0c:f8:8b:17:8c:
ed:fd:24:fa:97:d3:8e:4f:4c:23:94:c8:8a:82:20:
8c:da:2c:0b:76:01:56:3d:c3:33:72:5c:9c:df:83:
06:94:32:5f:03:39:f1:bf:d9:35:b0:b6:37:76:19:
c2:d7:7d:2b:b6:66:56:c1:0d:ed:90:34:71:e7:75:
07:5f:48:8c:e7:99:1e:ef:96:80:42:5e:39:17:f5:
85:89:1f:01:c9:70:17:4c:e5:00:81:70:5d:14:87:
af:a4:fd:b5:42:8c:c0:0b:24:80:bc:c1:90:12:67:
4b:89:d0:66:95:11:f8:be:2f:d3:31:e5:e8:51:b5:
12:a5:8f:a5:32:48:4a:38:48:b8:a7:41:44:2a:f2:
81:1b:43:51:ce:ab:97:06:07:4b:ce:cf:4f:64:c2:
08:8f:a4:d5:0b:f9:2d:f0:2d:2c:d8:03:04:65:48:
33:ee:29:26:86:ec:40:6a:51:94:b7:7f:a7:ab:46:
28:c8:3f:ad:ee:7b:a9:b6:8e:dc:c8:13:94:4d:7c:
84:70:bc:50:4a:b4:53:46:6e:aa:61:47:86:54:64:
4d:f5:f4:8f:f1:de:fe:eb:0b:f2:bd:b5:d5:26:9c:
4a:f9:fa:26:24:25:4d:15:e2:ea:f7:10:ac:33:4b:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:93:83:E7:22:F3:C5:77:EE:38:D6:B1:0F:1A:FF:76:7F:52:BD:F8
X509v3 Authority Key Identifier:
keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:dc:a4:34:e4:42:c3:dc:5d:2c:c2:90:92:4c:c6:d1:ac:cd:
86:3f:af:58:78:c9:c4:db:b9:a4:9f:b5:c9:4a:fa:a0:3c:b0:
09:24:e2:b1:31:40:e9:4f:c1:aa:a2:6a:66:2a:0a:63:2f:d8:
20:37:a2:b5:7c:11:27:82:d4:e5:21:fc:b3:7e:f3:3a:3f:3c:
d0:f4:32:43:ea:fb:a2:f1:27:40:70:42:e3:c7:07:cb:4d:ff:
d9:18:48:eb:85:8d:1f:e9:f5:b1:b4:bb:8d:32:98:c7:72:7c:
4b:a9:e8:ed:68:35:12:f9:56:33:bd:dc:9c:cf:1b:0b:54:a2:
0f:1f:f4:0b:b6:a1:a4:d2:79:dd:c4:cf:90:ef:51:fb:6c:53:
aa:5e:3d:e3:82:c8:da:1c:cd:9b:56:aa:fb:aa:9b:fd:c1:e9:
46:96:70:5e:eb:c7:4a:26:a3:23:28:ca:03:e5:ad:8b:d5:06:
27:0f:41:e9:ce:32:d2:80:f7:1c:f6:3f:d4:60:d3:85:53:0b:
de:65:7e:ee:61:8a:b5:fe:af:f8:a7:42:ce:bc:40:9b:83:b1:
58:27:d8:70:8f:8d:58:3f:db:92:a0:d9:f1:66:3b:42:4f:46:
ea:01:71:f9:82:43:16:01:79:41:aa:aa:85:dd:88:f7:8e:5d:
19:88:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:15:07 2025 by rpki-client