This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
File: aWkfVRZJUvL08f7oBKoVg1_-htU.mft (raw, json)
Hash identifier: CbJKzDlbPzUEyeAHAJ/Ps3F7fd2K3urxpXNy9F+BYo4=
Subject key identifier: 49:87:B1:69:9F:D0:53:EF:A6:4B:1C:D2:DE:21:77:83:1F:8B:D5:F9
Authority key identifier: 69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
Certificate issuer: /CN=A91A618B/serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Certificate serial: 0A2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
Manifest number: 0A28
Signing time: Thu 04 Dec 2025 19:01:25 +0000
Manifest this update: Thu 04 Dec 2025 19:01:25 +0000
Manifest next update: Thu 11 Dec 2025 19:01:25 +0000
Files and hashes: 1: aWkfVRZJUvL08f7oBKoVg1_-htU.crl (hash: McraFVKfzUZ5nECVGMhfYtcP2adWQP/euH9h4tSkLwU=)
2: 594ECE96804011EA9B73BC62C4F9AE02.roa (hash: EKd9VQ360ebUJ8WlZXHE7k1r87p0QtlOPC8jxoN1cJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2606 (0xa2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A618B, serialNumber=69691F55164952F2F4F1FEE804AA15835FFE86D5
Validity
Not Before: Dec 4 19:01:25 2025 GMT
Not After : Dec 11 19:01:25 2025 GMT
Subject: CN=6931da85-bd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:8d:fa:1d:9c:4a:33:a3:e1:35:84:0f:33:
54:5c:6f:6a:e1:15:b4:44:02:0b:17:6e:54:21:14:
d3:23:52:ba:cc:6d:07:2c:0f:80:5b:dc:e7:c9:bc:
e2:a1:79:d0:53:c1:10:5d:ba:a7:71:18:94:9e:f2:
7e:e1:bb:7b:e3:1d:6a:08:79:22:7e:ec:4d:b4:5b:
6b:0d:5a:40:9d:78:3f:67:47:07:b2:56:54:cd:91:
03:5f:6d:19:fd:56:eb:db:93:40:a0:2c:b9:80:d5:
3e:89:2b:86:e1:d2:13:46:22:38:78:be:b9:f8:1c:
d2:84:ca:49:8e:d8:ea:0b:ba:86:13:0f:6c:4c:bf:
ba:ef:d4:30:fd:cb:86:7d:f0:ec:9a:f6:1c:0c:26:
cc:d7:0b:70:aa:f4:bf:70:aa:67:f5:25:73:eb:0c:
81:08:d6:cd:45:b1:51:08:37:07:5a:07:91:a9:65:
5e:5b:34:34:10:ea:a4:81:be:a3:bf:03:7e:a5:f2:
77:f2:8c:06:75:a1:6b:57:39:1b:e6:c4:99:4b:41:
1a:2a:71:3c:1c:81:1b:03:4c:da:b9:d4:5f:10:a7:
f8:38:c5:73:a5:3f:ec:fd:cf:24:a7:dc:ba:6d:d4:
c5:b4:eb:d1:96:8b:5e:da:f6:7d:93:e0:18:a9:df:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:B1:69:9F:D0:53:EF:A6:4B:1C:D2:DE:21:77:83:1F:8B:D5:F9
X509v3 Authority Key Identifier:
keyid:69:69:1F:55:16:49:52:F2:F4:F1:FE:E8:04:AA:15:83:5F:FE:86:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWkfVRZJUvL08f7oBKoVg1_-htU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A618B/9BA2B254803F11EA97B43D62C4F9AE02/aWkfVRZJUvL08f7oBKoVg1_-htU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:4b:d8:37:ab:23:4b:0a:9a:46:55:11:4a:4f:35:8b:ae:c2:
55:fc:d8:31:f1:4a:6e:50:3a:c6:58:05:ef:3c:27:53:31:34:
8a:b8:3c:e2:27:e4:56:95:90:aa:fa:3a:d1:4c:ac:4a:7c:6f:
ce:12:2a:b3:37:cf:e0:39:90:bb:4a:02:f9:91:27:49:d7:2b:
b1:c3:c2:55:b6:ee:da:fd:37:69:55:70:be:a7:26:62:6f:9a:
2c:5d:e0:36:be:b6:0b:f8:fa:dd:dd:50:fb:0a:d0:1c:89:01:
12:1c:ff:b8:38:79:41:0f:83:82:da:ee:65:65:dc:36:22:0c:
dc:8f:b3:54:0c:b4:3c:c5:3c:e0:e6:a7:ef:43:9d:64:92:0f:
84:a8:cd:2e:26:fc:c3:86:e1:f3:ed:70:0b:72:e5:47:d5:ba:
9c:34:fb:6f:56:5c:55:41:a3:1a:c3:9b:26:f0:3c:23:8a:4c:
02:94:6d:58:3f:c9:3f:eb:ab:f4:c7:35:4c:54:b0:32:96:ba:
af:d3:c7:b6:0b:7b:b0:ea:89:cc:b5:1b:e6:14:94:9f:a4:44:
8f:1e:ea:34:00:e4:8b:7f:09:42:bd:b8:cd:69:d2:6b:32:d4:
04:20:f8:43:41:69:9f:e4:46:85:86:e8:14:f0:f7:24:a2:16:
80:45:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:22:34 2025 by rpki-client