This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
File: eAtbxs5eRpg3res2hXTtSDBIAcs.mft (raw, json)
Hash identifier: 837xGMK3p9+kUO7xCLRbLQ6oSs/utnYzbX/ZO+f1BTA=
Subject key identifier: 9D:D2:07:81:60:98:DB:C2:34:6E:CD:2C:DF:03:7C:1F:34:32:CE:F9
Authority key identifier: 78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
Certificate issuer: /CN=A91A5A93/serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
Certificate serial: 0129
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
Manifest number: 0125
Signing time: Fri 05 Dec 2025 02:47:11 +0000
Manifest this update: Fri 05 Dec 2025 02:47:10 +0000
Manifest next update: Fri 12 Dec 2025 02:47:10 +0000
Files and hashes: 1: eAtbxs5eRpg3res2hXTtSDBIAcs.crl (hash: rBQCmhCx4Hg87CL8Bx382M25hF1pk/x/6eexTL/xUvs=)
2: 521500EE15C611EF88C07237C4F9AE02.roa (hash: BCuicmcvw7ww1h97rYp14idO+zun7W58fW3pvWobsAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl
rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5A93, serialNumber=780B5BC6CE5E469837ADEB368574ED48304801CB
Validity
Not Before: Dec 5 02:47:10 2025 GMT
Not After : Dec 12 02:47:10 2025 GMT
Subject: CN=693247ae-cc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:43:01:be:a1:7c:56:50:ac:b3:27:f2:6c:
f5:d7:9c:d1:18:23:b1:d6:7e:e0:3d:c5:c2:41:79:
b7:d7:7a:30:2d:9f:74:91:a2:e0:fb:f7:18:a4:d6:
1c:75:2e:32:0a:38:38:9c:37:6f:85:1f:17:c0:ea:
46:d8:58:e3:03:35:14:7b:05:77:b7:71:37:25:5f:
1f:ee:42:63:68:17:78:63:78:e2:b1:1a:ea:e4:67:
c1:fd:99:95:9d:06:3f:46:b0:95:47:f6:60:a3:5d:
bf:c7:b3:da:f2:be:aa:55:f2:16:ea:51:84:22:ad:
87:21:c4:d0:88:6c:f4:32:48:7c:d2:a0:42:04:fd:
d7:f2:45:87:e6:ed:12:26:c9:91:b0:fa:14:5a:10:
6a:c9:67:89:8a:6b:27:fd:9c:7f:39:45:ac:29:e3:
ed:05:e1:85:6e:aa:01:a2:b9:d3:ae:7e:dc:9d:08:
02:7e:df:9c:98:ee:18:d7:f7:7b:c8:c3:ae:53:ba:
83:4b:5a:6b:5f:ae:cc:9f:ed:8f:a8:2d:82:d7:8e:
76:31:9d:b2:71:fb:54:d8:5a:22:92:1d:a3:95:7f:
64:f6:7b:ee:46:08:55:95:5e:83:d8:8e:ab:bb:31:
cf:b9:a2:66:9b:6a:ab:c2:de:1e:e0:d8:83:4b:75:
bf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:07:81:60:98:DB:C2:34:6E:CD:2C:DF:03:7C:1F:34:32:CE:F9
X509v3 Authority Key Identifier:
keyid:78:0B:5B:C6:CE:5E:46:98:37:AD:EB:36:85:74:ED:48:30:48:01:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eAtbxs5eRpg3res2hXTtSDBIAcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A93/C01AF5F415C511EFAA338236C4F9AE02/eAtbxs5eRpg3res2hXTtSDBIAcs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f9:4d:b6:2f:c4:65:05:9c:47:7f:33:6b:44:f6:73:59:8b:
ce:76:63:13:35:1d:66:f7:20:bc:c0:81:f1:b8:ab:64:83:36:
6c:c7:63:62:13:8c:61:79:52:82:32:76:b3:8d:5c:99:20:50:
62:b6:f9:97:1f:59:a3:35:17:86:ae:ab:10:15:31:72:5c:6b:
da:ef:84:c9:24:a0:8c:52:ab:58:d0:86:fa:0b:3a:2e:b4:bd:
17:46:b1:d2:c1:d0:58:2d:38:22:9c:db:32:b4:57:04:da:ec:
e1:e4:88:20:a2:22:d9:43:6b:84:89:c6:30:54:5e:43:17:68:
d6:2d:35:52:37:2a:8b:94:43:b2:47:dc:f5:a5:88:6e:f9:8a:
51:5c:20:a5:c5:3e:99:45:6d:84:02:fd:64:83:72:f8:e2:2d:
0a:41:30:22:9f:17:d4:e0:2e:f4:67:ab:a6:98:79:c1:cc:00:
a5:8c:09:54:5d:25:2c:53:ea:a2:9f:94:0e:e7:fb:53:b6:89:
ab:9d:8c:62:99:0c:52:bc:76:a9:95:87:b4:82:0d:19:e8:43:
c4:78:29:48:98:f4:73:97:fe:02:c9:b9:29:0c:b0:b0:c4:65:
e5:09:b8:40:31:da:32:dd:58:54:42:70:00:29:b2:e7:38:5e:
fe:b2:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:50 2025 by rpki-client