This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
File: AkIpyBrDU1oh1g4twyqbiL1q2B8.mft (raw, json)
Hash identifier: ZifqSjigjeZr+A+SE4b1Gx20JcTBJo2cYrjbPt4WlNY=
Subject key identifier: C0:F3:F4:C3:34:7F:14:0A:D8:20:03:C1:E2:18:92:83:D2:D0:8D:8F
Authority key identifier: 02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
Certificate issuer: /CN=A91A0848/serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
Manifest number: 023D
Signing time: Fri 05 Dec 2025 00:20:09 +0000
Manifest this update: Fri 05 Dec 2025 00:20:09 +0000
Manifest next update: Fri 12 Dec 2025 00:20:08 +0000
Files and hashes: 1: AkIpyBrDU1oh1g4twyqbiL1q2B8.crl (hash: mDmYXnyblyHDWxf/jRyknoK4MVBWKIzkftxRaIBQjdg=)
2: B9D00D3C195A11EE83248835C4F9AE02.roa (hash: TDlTkXNyk/OE7AIzmPKhh2DU+PZI5hEvSUbR0akOStU=)
3: 3B6578C47F4211F084F6C541C4F9AE02.roa (hash: B4BkdpTo1qZHacqSMnVvogHOqStnqdG0ex859T6dd8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0848, serialNumber=024229C81AC3535A21D60E2DC32A9B88BD6AD81F
Validity
Not Before: Dec 5 00:20:09 2025 GMT
Not After : Dec 12 00:20:08 2025 GMT
Subject: CN=69322539-f4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:bc:07:6b:fe:91:68:76:51:34:a9:07:b4:
02:36:ac:92:b9:ef:76:ca:7f:72:ec:57:68:4a:80:
66:d9:ce:19:a0:80:21:2c:68:38:e7:06:15:f0:4f:
cf:73:10:64:25:0c:18:30:24:64:bc:f1:87:ce:8b:
14:fd:54:bc:a6:bd:4b:68:e6:d0:5f:e8:6c:88:82:
78:6f:e6:39:5f:58:5a:46:44:3f:2d:b5:f8:17:32:
a9:7a:cd:52:37:ac:33:32:16:ca:0b:b7:46:a3:cf:
99:eb:a4:41:9e:29:fb:42:39:15:01:90:8b:a4:90:
7b:6e:04:f0:bd:2b:4f:6a:c3:b1:6c:fa:36:b7:68:
b1:08:a5:09:b5:31:21:43:65:05:87:e4:e4:8b:0d:
59:de:f0:47:01:73:f3:fa:e6:55:05:e0:eb:e8:77:
dc:05:25:62:d3:f8:56:df:a8:af:52:fa:63:2c:08:
5c:99:8d:c7:1a:ab:67:6a:15:ca:1b:20:8c:d1:c7:
08:0c:8d:d7:30:b0:49:55:16:b9:7a:1b:21:df:7f:
7b:a6:be:29:05:df:d6:19:4c:26:cf:25:34:ed:85:
75:a9:51:e9:8e:09:91:24:10:0c:28:fe:fa:3b:0d:
c7:c0:85:61:61:af:1a:81:e1:47:39:6d:51:58:ad:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F3:F4:C3:34:7F:14:0A:D8:20:03:C1:E2:18:92:83:D2:D0:8D:8F
X509v3 Authority Key Identifier:
keyid:02:42:29:C8:1A:C3:53:5A:21:D6:0E:2D:C3:2A:9B:88:BD:6A:D8:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AkIpyBrDU1oh1g4twyqbiL1q2B8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0848/64D8B1DE77E411ED97F5934DC4F9AE02/AkIpyBrDU1oh1g4twyqbiL1q2B8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:28:7b:0b:10:1a:6f:20:e5:70:3b:87:f8:ac:93:2b:e5:2f:
77:09:d1:fc:58:2f:78:43:b7:52:0f:96:00:3c:b2:70:c3:bb:
78:c9:e3:80:6f:b6:5b:bd:fd:a8:1a:d2:a1:5a:9f:43:b5:87:
97:e5:a5:bd:f6:b4:6b:e9:2e:28:eb:1e:b0:5d:1f:0a:ff:d0:
ab:36:48:f3:d8:4d:06:83:d5:55:b9:9e:da:33:07:a3:4f:58:
9e:fc:85:29:8d:1d:a7:f7:29:6c:5b:4b:fb:51:c8:19:20:77:
4e:a8:13:d9:84:19:e0:55:88:9d:02:e0:cc:55:2e:14:2a:8a:
17:75:99:5a:fa:06:43:00:76:95:7a:5a:0b:d8:c5:7d:96:42:
69:b2:3b:5c:2d:10:ec:46:f5:0d:33:13:af:48:42:52:77:e5:
f6:87:06:59:b7:e9:69:b7:f2:a2:eb:65:14:ca:cd:83:43:38:
e6:ba:74:ca:2e:bc:73:40:48:7b:9c:75:e1:03:26:d5:a4:82:
4e:51:f8:2c:f3:e5:0c:69:fc:29:8c:58:82:2c:0a:17:b6:60:
fb:6c:3a:37:e7:0a:38:51:30:24:4b:42:c1:94:23:4e:e2:68:
19:cf:e7:0a:5d:ab:f0:f0:eb:8d:c0:42:b2:6a:78:9a:62:07:
2f:f5:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:49 2025 by rpki-client