This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json)
Hash identifier: jeyMF2chlWzfLzGirJc26EVRA5caOoprr2We7QOZKDQ=
Subject key identifier: D6:BA:EC:D1:74:CA:E7:6B:75:84:0F:8E:6D:F1:74:96:56:6D:16:72
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial: 08D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
Manifest number: 08D0
Signing time: Sat 06 Dec 2025 19:35:11 +0000
Manifest this update: Sat 06 Dec 2025 19:35:11 +0000
Manifest next update: Sat 13 Dec 2025 19:35:11 +0000
Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: GRA2J6nFk14jHr0ze/ALy7HXuCetT773x5T/PO2XqUk=)
2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: MIyBunftYkQco/m/ADmv4S1fyRxTgeEhYhl9wBxnLIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263 (0x8d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Validity
Not Before: Dec 6 19:35:11 2025 GMT
Not After : Dec 13 19:35:11 2025 GMT
Subject: CN=6934856f-33a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:42:87:3f:76:95:ad:78:db:88:d7:19:d4:
ef:d4:d2:71:2e:f5:f1:12:2a:1b:9b:34:6f:ac:18:
da:c8:4d:ef:ff:76:ea:e7:99:cc:b2:6e:9b:25:0b:
88:b6:4c:9a:23:d9:87:97:24:cb:1f:c5:69:35:21:
78:a7:9f:12:04:23:34:ec:9f:49:96:ef:18:ef:ed:
e3:62:9e:67:69:3e:33:af:f9:8f:1b:c1:32:a0:e8:
74:0e:92:48:f6:7c:69:68:77:de:3a:39:7f:73:f0:
1e:50:42:fa:6d:40:d8:55:66:30:b4:62:2e:36:c6:
7b:ab:e0:5b:f0:72:58:7d:c1:7a:b8:ce:53:9d:9e:
4e:aa:eb:1f:dc:b6:ee:87:3d:ff:f0:47:bd:56:f3:
72:eb:60:5e:04:a4:11:23:51:2d:fe:76:a8:b9:d3:
2a:8d:64:ea:00:01:29:22:1c:65:d1:42:6e:a0:d0:
61:16:88:79:9f:69:8a:9d:1c:6d:05:62:a3:21:cb:
93:16:8f:df:5f:a9:56:78:cd:d4:01:82:18:90:66:
0d:38:67:57:e0:f0:32:64:78:fc:b3:d6:30:58:eb:
a6:0a:8d:8e:42:a4:ef:62:94:8d:c1:c0:81:79:ed:
d6:50:14:23:88:9f:e5:44:05:da:41:37:e0:42:0f:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BA:EC:D1:74:CA:E7:6B:75:84:0F:8E:6D:F1:74:96:56:6D:16:72
X509v3 Authority Key Identifier:
keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:86:a3:58:64:de:f6:30:7e:65:01:61:76:6c:e9:21:bf:34:
56:19:ac:d2:d4:db:07:df:7a:ab:57:15:74:af:37:a3:88:e8:
2c:0f:04:cd:4d:5a:1f:4a:a3:de:bf:27:9c:cb:f3:5c:ee:bc:
24:ed:6e:fd:74:59:c5:7d:41:64:48:c4:90:d6:75:23:ed:a2:
e9:01:48:84:25:1c:29:c2:3d:8f:5a:b7:8f:06:a5:82:f8:7a:
b3:59:d3:08:37:74:30:1d:5c:18:40:1a:0e:67:a9:20:3a:15:
c7:fd:da:28:5a:f1:96:0f:28:4a:f2:0b:12:f6:03:20:58:55:
d5:44:5f:8f:1d:1d:4b:26:17:cd:f3:76:da:de:72:33:e9:16:
0e:90:84:ed:44:e0:a5:87:49:97:e5:37:18:95:2e:78:30:50:
44:4c:c7:cf:ac:02:6c:59:ce:48:82:3f:e7:5e:65:2f:a9:de:
78:fd:ce:97:b8:ff:60:b3:7f:aa:2e:28:56:2f:1c:39:95:6b:
a7:0d:8e:18:01:04:85:54:7f:f1:28:24:9f:25:10:12:c8:18:
06:ca:e5:55:00:f7:29:4b:dc:b4:e3:21:71:d1:84:2d:35:2d:
8c:12:ea:93:40:c4:4e:34:da:4f:14:ff:fe:33:66:1a:e6:00:
86:71:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:05:32 2025 by rpki-client