This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier: /J17v4X/0paE2O+aeIXy4TZkX/MANtJ+dVO5s45cHX0=
Subject key identifier: 01:AC:94:85:CB:75:6A:73:A2:DA:8E:88:54:6D:2C:1D:0C:F3:B9:1B
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number: 025B
Signing time: Fri 05 Dec 2025 00:00:21 +0000
Manifest this update: Fri 05 Dec 2025 00:00:20 +0000
Manifest next update: Fri 12 Dec 2025 00:00:20 +0000
Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: BW2cSEpKbMoFOPQRhPyyx57asdU+5olSpFlUKlMqtFQ=)
2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Dec 5 00:00:20 2025 GMT
Not After : Dec 12 00:00:20 2025 GMT
Subject: CN=69322095-56be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:e9:00:46:ff:f0:d2:b6:a9:2a:35:21:fa:
8f:3b:67:5b:67:db:79:28:eb:25:1d:82:f1:a6:1b:
dc:ac:96:94:1e:a8:03:42:bf:2e:a8:b3:45:cf:6e:
58:8d:7b:67:b5:20:a1:c6:97:28:25:ef:e3:56:0f:
6c:e8:b2:a1:36:57:dc:ef:f1:6d:c2:e6:70:67:a8:
ee:25:35:3a:5f:c1:e0:2d:93:a4:f3:9e:fd:4c:89:
fc:9c:35:e1:e8:93:94:ac:da:e6:6b:4a:47:98:fc:
fd:03:9e:55:34:26:85:36:11:e1:b9:d1:e5:2a:fc:
e7:92:57:d5:ca:07:40:18:e0:75:db:11:92:8e:d6:
f6:b1:a0:4e:13:64:bd:ef:66:3f:e5:60:d8:ed:98:
9a:03:0a:97:0c:f0:09:5b:c3:a4:b7:ff:78:cb:52:
7a:18:dc:90:f3:42:87:56:3a:a7:69:e5:55:f7:dc:
95:52:35:53:e6:68:65:7c:2a:71:8d:55:e1:23:1a:
aa:03:82:6d:6a:74:ef:e1:f4:e2:9d:70:54:46:c0:
31:2b:f3:08:d1:1c:58:0b:fd:a7:7c:4d:10:d5:f7:
aa:86:cf:df:8c:fc:53:45:75:fc:a8:56:a9:02:54:
bc:dc:69:d6:d9:a2:01:bb:56:c8:89:0d:98:c1:b7:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AC:94:85:CB:75:6A:73:A2:DA:8E:88:54:6D:2C:1D:0C:F3:B9:1B
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:fe:93:ae:a5:fc:2e:18:2d:c7:d9:5e:62:4d:cb:0a:41:0e:
96:24:41:a4:77:99:31:95:a7:ef:ce:3e:73:c6:a9:d5:f9:e3:
ef:b5:34:65:46:fb:a2:25:32:88:d0:b0:e3:37:c3:9d:23:33:
38:1d:fb:82:72:5d:1a:5d:d2:4a:0e:73:42:f1:6e:db:11:fe:
de:0c:2c:e3:61:ce:f6:c0:48:e6:66:6f:45:b1:72:70:11:42:
bd:27:bc:af:96:8d:44:52:90:0f:d3:3b:22:d6:6c:ad:d3:55:
12:2d:f8:b6:66:a9:58:15:43:99:ce:9f:98:df:eb:e2:95:b2:
2e:b0:85:65:aa:60:4e:03:82:1a:90:bd:f7:6e:23:3d:b5:d1:
23:04:e4:28:ed:0b:56:80:cd:04:f9:fc:81:45:dd:d2:c3:21:
02:5c:09:2a:7d:02:2d:b6:8a:4d:d3:30:94:f5:14:82:c2:37:
70:65:28:97:d9:1e:23:78:53:08:8c:84:64:a5:13:88:37:53:
68:40:5e:45:4b:af:f1:b2:93:3d:33:2e:1e:30:68:c3:a4:12:
39:21:0e:21:ca:79:24:72:c6:f3:b4:6e:78:66:91:25:9b:28:
45:ae:3c:f6:d9:58:d9:56:eb:44:c2:d6:86:a3:5a:62:ba:2e:
1a:6c:68:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTJDNUExMTAvBgNVBAUTKDc0QkYyRkUyNkQ0NEZGRUY2M0RFNjgzRjQyNDI0ODI0
MEZCNzIyOUEwHhcNMjUxMjA1MDAwMDIwWhcNMjUxMjEyMDAwMDIwWjAYMRYwFAYD
VQQDEw02OTMyMjA5NS01NmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5fpAEb/8NK2qSo1IfqPO2dbZ9t5KOslHYLxphvcrJaUHqgDQr8uqLNFz25Y
jXtntSChxpcoJe/jVg9s6LKhNlfc7/FtwuZwZ6juJTU6X8HgLZOk8579TIn8nDXh
6JOUrNrma0pHmPz9A55VNCaFNhHhudHlKvznklfVygdAGOB12xGSjtb2saBOE2S9
72Y/5WDY7ZiaAwqXDPAJW8Okt/94y1J6GNyQ80KHVjqnaeVV99yVUjVT5mhlfCpx
jVXhIxqqA4JtanTv4fTinXBURsAxK/MI0RxYC/2nfE0Q1feqhs/fjPxTRXX8qFap
AlS83GnW2aIBu1bIiQ2YwbfcQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGslIXL
dWpzotqOiFRtLB0M87kbMB8GA1UdIwQYMBaAFHS/L+JtRP/vY95oP0JCSCQPtyKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1QS8wQUVGMEZEODNF
MzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8tOWozbWdfUWtKSUpBLTNJ
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RMOHY0bTFFXy05ajNtZ19Ra0pJSkEtM0lwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MkM1QS8wQUVGMEZEODNFMzIxMUVEOEREN0UwNkFDNEY5QUUwMi9kTDh2NG0xRV8t
OWozbWdfUWtKSUpBLTNJcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAD/pOupfwuGC3H2V5iTcsKQQ6WJEGkd5kxlafvzj5zxqnV+ePvtTRl
RvuiJTKI0LDjN8OdIzM4HfuCcl0aXdJKDnNC8W7bEf7eDCzjYc72wEjmZm9FsXJw
EUK9J7yvlo1EUpAP0zsi1myt01USLfi2ZqlYFUOZzp+Y3+vilbIusIVlqmBOA4Ia
kL33biM9tdEjBOQo7QtWgM0E+fyBRd3SwyECXAkqfQIttopN0zCU9RSCwjdwZSiX
2R4jeFMIjIRkpROIN1NoQF5FS6/xspM9My4eMGjDpBI5IQ4hynkkcsbztG54ZpEl
myhFrjz22VjZVutEwtaGo1piui4abGg3
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:36:06 2025 by rpki-client