This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier: YlfEZdn+ZdmPekLbsFFyJqcWggCmz/QkV5Y2c9iRFkA=
Subject key identifier: 1B:88:64:10:96:B4:5D:01:6C:4F:81:2E:A7:16:A1:28:CD:EA:98:A5
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number: 01DC
Signing time: Fri 05 Dec 2025 01:01:37 +0000
Manifest this update: Fri 05 Dec 2025 01:01:36 +0000
Manifest next update: Fri 12 Dec 2025 01:01:36 +0000
Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: RZ12lRfHgQVSqnxpu8VMl4D0YXBsmT4guz6YNFnXNK0=)
2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: SO9SbWUjXyJ9Yb5w7Q+6mTlLwT6ktJsJ2PGUdf4nf50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Dec 5 01:01:36 2025 GMT
Not After : Dec 12 01:01:36 2025 GMT
Subject: CN=69322ef1-825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:27:d5:32:f3:3b:0a:a3:6d:27:f3:2a:1d:
ae:2f:f2:f7:cd:da:1c:de:b6:ea:65:81:09:68:91:
43:31:cf:0e:bd:02:69:aa:54:10:31:67:2c:c5:6a:
7f:0a:ac:9d:ac:49:e8:be:13:8e:11:c9:12:49:05:
35:c1:d1:eb:47:98:5f:68:d7:fa:ab:d6:32:65:20:
e0:af:3e:13:86:16:d3:71:ed:e2:c6:ff:3a:7d:0a:
4a:45:c0:e2:ab:f9:4b:11:2e:2b:b4:c6:c5:76:67:
0e:f3:98:bd:a7:12:a7:d7:12:e2:df:cb:cb:a7:12:
54:f2:0a:c7:1d:34:de:0f:cc:5a:33:e0:d6:8f:60:
5c:09:d5:d0:28:2d:37:2e:2a:55:cd:ec:f0:30:6a:
1a:7c:41:d1:f6:74:76:a2:e3:a7:9b:ac:d9:3a:2d:
2e:4c:4a:46:eb:21:6d:ce:59:4a:bd:93:ab:fe:7d:
68:d0:be:9c:33:4a:ec:d7:61:a7:b9:70:44:32:ff:
dd:4d:44:89:14:24:29:04:53:d5:2a:89:c5:60:93:
e1:58:93:68:a7:9d:04:d5:22:d3:3d:73:3b:4b:61:
9d:09:04:25:55:88:8e:80:b1:6d:d1:2a:5d:d5:57:
ab:be:d1:2e:b7:51:de:12:e5:76:8f:f6:2e:b5:da:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:88:64:10:96:B4:5D:01:6C:4F:81:2E:A7:16:A1:28:CD:EA:98:A5
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7a:2b:42:eb:de:b2:ff:79:ca:02:5b:c9:90:2e:0b:6d:00:
c5:21:dd:71:38:d2:b6:16:56:7e:c0:5a:49:ec:1a:8e:3a:9a:
e3:e2:2f:04:23:58:91:db:c2:23:31:23:c5:d5:37:0f:f8:98:
53:55:f0:c6:5d:84:2e:69:79:13:3b:92:9d:98:47:6c:0d:c7:
cb:aa:37:e6:95:6e:d6:65:b1:cb:aa:59:74:4a:ac:af:de:1b:
41:47:be:01:f6:92:92:50:87:2b:66:12:82:94:e4:15:e9:9c:
94:96:4e:54:9a:ab:a3:da:13:8a:be:ec:0d:bc:68:d1:08:0c:
c5:26:cf:56:59:7e:af:29:50:68:40:dc:d7:fb:bd:cf:6e:31:
95:fe:ab:0c:61:bc:99:59:23:33:e4:ca:a5:dd:1d:13:15:80:
de:ac:c8:30:60:f2:08:12:e1:fa:8b:e6:55:5f:03:19:ee:65:
e9:4f:dd:73:76:fb:c5:cc:1a:9e:17:9e:51:15:39:28:1a:0e:
59:10:2d:31:51:30:77:b9:bf:7e:78:e4:a8:fa:e0:12:05:ae:
fb:d6:e2:e0:bc:d7:d9:5c:c3:09:65:01:7d:14:eb:93:dc:9b:
d7:be:0d:c7:66:75:c2:3f:b5:a7:d2:cc:ef:12:d7:83:fd:c4:
99:36:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:09 2025 by rpki-client