This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
File: AQgOJC5FBGBlb__55qpDLh1A4lw.mft (raw, json)
Hash identifier: uUXRbnDwNtLHjKpFXXxWI1oWm9PO7iiKYYvnHxGAS7Q=
Subject key identifier: AD:61:6B:40:52:99:80:68:84:38:57:62:44:BF:D6:A9:EF:54:12:3B
Authority key identifier: 01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
Certificate issuer: /CN=A91A45C3/serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Certificate serial: 05AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
Manifest number: 05A4
Signing time: Thu 04 Dec 2025 21:49:49 +0000
Manifest this update: Thu 04 Dec 2025 21:49:49 +0000
Manifest next update: Thu 11 Dec 2025 21:49:49 +0000
Files and hashes: 1: AQgOJC5FBGBlb__55qpDLh1A4lw.crl (hash: hjXkL4na6a7i4LH5m07wS0NhYpCQf/fS9TfsMUpN/dE=)
2: 278EE7F0F4FD11EB975E376BC4F9AE02.roa (hash: nnEDrBs5N1TINTxavJXzYMTFVmRpWUpTfX0eoMA2f+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1455 (0x5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A45C3, serialNumber=01080E242E450460656FFFF9E6AA432E1D40E25C
Validity
Not Before: Dec 4 21:49:49 2025 GMT
Not After : Dec 11 21:49:49 2025 GMT
Subject: CN=693201fd-e57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:29:02:19:77:79:83:d4:a0:3b:16:b4:01:
2d:ab:6f:ea:4a:4f:74:23:6f:0b:20:07:c5:a4:52:
df:24:21:6b:b0:ca:55:c2:f9:10:33:89:98:0b:fa:
be:1e:a4:a1:3b:45:e9:f9:62:38:d6:bd:9a:04:54:
4c:2c:38:b6:05:42:36:1f:6d:d3:a1:63:d9:33:81:
98:f4:2a:44:a5:06:6e:4a:98:a6:76:f2:fd:f2:e4:
0b:17:95:a5:90:9c:73:58:af:21:8e:fe:2c:7e:35:
cf:c5:d1:31:ce:66:06:d2:b5:a2:9b:88:cd:3d:f7:
1c:e5:f9:2f:c9:9e:e0:56:f8:82:49:19:21:c0:a0:
cf:9c:e3:ba:5f:66:a9:dd:b4:c5:74:11:11:b4:c1:
36:3f:9e:98:1b:98:ca:4c:eb:49:27:c5:22:a2:a7:
f5:f1:4d:53:72:bb:02:46:46:11:09:f7:23:a0:1d:
2a:be:4f:6d:19:81:57:50:8d:76:02:32:30:20:0a:
fa:a4:ef:82:d7:13:6f:0f:ad:ce:fe:e4:bb:68:0c:
21:62:d8:2b:30:7f:ac:51:8b:88:91:e8:8f:2e:70:
ff:9c:ba:c7:c4:e5:14:8c:13:36:4d:30:b2:36:64:
39:57:97:ab:97:81:3c:2e:62:dd:9c:2f:24:a4:3d:
20:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:6B:40:52:99:80:68:84:38:57:62:44:BF:D6:A9:EF:54:12:3B
X509v3 Authority Key Identifier:
keyid:01:08:0E:24:2E:45:04:60:65:6F:FF:F9:E6:AA:43:2E:1D:40:E2:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQgOJC5FBGBlb__55qpDLh1A4lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A45C3/8A33D720F4F911EB912C2B20C4F9AE02/AQgOJC5FBGBlb__55qpDLh1A4lw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:0d:ac:f9:0a:32:6e:86:38:98:72:7f:76:7f:86:84:33:
e4:ff:df:16:2d:68:d6:56:78:f3:86:e2:b1:c9:de:44:b4:b7:
4d:72:f1:3a:88:5d:0c:5a:ea:59:e6:fe:54:1c:1d:02:87:0f:
ec:7c:77:b8:40:f8:c5:24:a9:77:8c:1c:85:c5:92:6e:d2:2e:
92:71:03:2b:1f:7b:8c:fb:2e:d0:a8:80:89:83:9f:67:30:74:
22:d4:a8:f0:3f:7d:97:f0:7b:b8:54:19:a6:8e:69:a0:d1:46:
e4:d1:93:9c:0b:d1:93:c3:8f:cb:d7:85:f2:5e:3a:48:a8:45:
3b:71:8e:1a:65:65:d5:b5:a1:1c:8a:84:ea:c5:43:b7:79:61:
ae:f1:c5:1f:e8:16:fd:77:5f:71:e2:74:7e:01:af:8e:5b:b3:
93:8b:2b:97:3d:b9:2a:bc:fe:71:09:93:47:98:1a:b7:5c:be:
7c:3c:7e:ed:47:5a:b0:8b:0f:01:55:73:e9:1c:6b:c8:a2:5a:
14:87:df:d8:af:8b:3f:49:63:56:05:8c:f4:f4:39:33:9c:93:
7b:2e:46:96:eb:f6:f9:4f:e3:25:c6:29:6a:da:7a:8e:9a:9f:
ae:10:38:cf:22:e4:db:7b:7d:85:eb:03:0f:43:0b:2a:72:5a:
c7:82:0f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:30:11 2025 by rpki-client