This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json)
Hash identifier: xuOXqtmYExYo3gaqNbqu5OVblQ0TzKyKfxYZftWRuqM=
Subject key identifier: 46:0D:58:94:2A:26:CF:4C:07:4D:09:49:B4:C0:C8:2E:2F:20:96:B5
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial: 97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
Manifest number: 95
Signing time: Fri 05 Dec 2025 04:24:55 +0000
Manifest this update: Fri 05 Dec 2025 04:24:55 +0000
Manifest next update: Fri 12 Dec 2025 04:24:55 +0000
Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: b06ZWewhEvU1mlklNx+O0fHrLmMC8738B4q+KKqA2mY=)
2: CF5EEDA6894411F0BE628977C4F9AE02.roa (hash: 17QpSjP3T4fN2iFoeGDXqVvnkQ3k4lIOqR9Kwrs2UKY=)
3: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: kIHtM5yk/7E77z9qFDfBUJpQm2RMukSPxAc1zKCnuxc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
Validity
Not Before: Dec 5 04:24:55 2025 GMT
Not After : Dec 12 04:24:55 2025 GMT
Subject: CN=69325e97-45f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:fa:67:02:a3:54:f2:91:86:64:36:96:a9:
6d:25:f5:e7:ca:f5:74:f9:eb:04:4a:ce:25:ae:3c:
44:cb:e5:76:ac:92:0a:c5:44:90:b2:12:73:9c:49:
45:86:50:fa:9c:e0:33:88:a3:8d:f9:1a:84:74:e2:
2f:d0:81:cf:1e:d4:68:01:30:e9:e3:a1:b1:8b:1e:
7c:87:1c:74:42:2f:36:7a:4d:96:55:ee:57:6f:c5:
0b:22:db:60:5b:aa:27:31:c2:b9:02:7b:f1:9c:3d:
39:4e:89:41:6e:e5:d7:c1:8a:e8:34:9b:e8:bb:93:
8c:54:1e:1e:84:60:dd:73:bf:89:54:74:7e:ff:d9:
49:03:e5:b7:e8:85:8a:06:37:ab:32:d8:c7:cd:15:
e0:96:20:af:28:46:e4:68:71:13:14:e6:c7:48:35:
af:cc:c2:cc:54:01:0b:7c:d3:41:16:d8:21:06:62:
66:32:b7:e3:9c:4c:53:8e:9a:38:b4:7d:40:67:0b:
33:7b:a9:73:3b:ae:0a:63:d9:9d:8d:15:6f:90:d1:
64:70:f8:1f:0c:6a:39:12:38:8c:8f:65:e0:e9:76:
f0:e4:e4:e1:f7:18:46:48:a2:00:08:60:f8:69:a3:
6a:5f:4f:8f:46:53:c0:4c:37:3d:47:5d:4b:b6:8f:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:58:94:2A:26:CF:4C:07:4D:09:49:B4:C0:C8:2E:2F:20:96:B5
X509v3 Authority Key Identifier:
keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:d7:a1:bf:10:49:7e:6a:bf:3f:f0:5a:93:b8:45:24:09:
d3:16:e0:b9:66:f1:b0:a2:48:b8:23:80:03:cd:6e:be:ed:2d:
7c:d9:0b:80:fb:b5:2b:d5:e3:04:fb:4e:6c:0d:6b:af:21:ba:
5f:20:ea:78:ff:18:ac:10:9b:6b:91:f8:ac:06:3c:2a:90:64:
0f:64:7b:65:1a:1c:05:f7:bc:fe:a7:9b:e7:a2:b2:ed:3c:a6:
16:61:dc:68:d6:ce:99:0f:33:0b:60:01:55:d3:b2:40:7c:c3:
db:a1:78:82:3a:b8:71:4b:32:f1:2a:d0:3d:c5:ea:ed:d4:8a:
40:8b:0a:59:1e:45:13:0f:e9:19:0f:51:3e:e4:20:a9:02:61:
64:6c:4f:4a:54:65:cf:b2:2c:18:d1:bd:52:d0:69:ab:59:07:
c2:1a:bf:0f:83:0b:d4:16:ea:77:c3:47:41:8c:7d:31:74:2f:
43:27:f1:96:b3:d8:44:02:4d:ef:4c:d5:51:1f:26:8f:58:40:
d1:fb:6e:12:09:6d:10:11:a3:70:19:d2:6c:9f:31:b0:ce:3f:
7c:82:d5:ca:36:28:76:4e:d7:54:65:3c:a8:fe:ac:a2:4b:24:
59:0e:99:e4:55:30:ea:ac:94:84:29:c0:89:6f:92:ca:57:58:
3b:e5:b4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:31 2025 by rpki-client