This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json)
Hash identifier: eTPr1nSZWRWDYeSnXGeiI55B/rztCMo3KqLL/xZJYgA=
Subject key identifier: CA:06:FC:EE:9B:79:35:B2:91:C9:61:2E:04:9D:46:3F:3A:45:99:13
Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
Manifest number: C3
Signing time: Sat 06 Dec 2025 21:37:05 +0000
Manifest this update: Sat 06 Dec 2025 21:37:04 +0000
Manifest next update: Sat 13 Dec 2025 21:37:04 +0000
Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: /mk5xyIzSyoMH+0XsLxQb2rVS6zoaSxKHbIYIPw+ST4=)
2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: 05N/6Qhw5iJe1Qr/JCmwvRl4veGMACl1Zh2wsIyWrXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6
Validity
Not Before: Dec 6 21:37:04 2025 GMT
Not After : Dec 13 21:37:04 2025 GMT
Subject: CN=6934a200-a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:c0:73:bb:2f:5d:36:a4:63:9d:bc:c2:2a:
45:4a:57:8d:dc:8b:e1:3c:f0:c6:99:7a:31:60:de:
21:8e:2f:a1:76:e7:98:86:00:52:62:4f:6c:c2:60:
21:97:4f:75:a0:65:01:ad:32:78:8c:8d:f1:fe:ed:
9a:2b:8e:be:78:95:f7:a1:90:2a:50:57:6c:c5:97:
e7:15:63:7a:5b:e9:14:a9:c3:25:e2:b9:cf:df:d3:
7f:9d:53:5a:d7:c9:19:71:fb:48:24:2f:fb:b7:d9:
f4:53:c9:d0:10:4f:8b:58:d0:2a:8e:e4:86:32:42:
dc:e8:db:8c:30:84:11:61:ce:47:01:1f:5c:86:d9:
0e:6c:f9:c2:ca:2d:84:12:64:62:71:50:bf:fa:33:
d1:d5:87:70:7a:db:28:4a:23:ff:b1:e1:13:94:aa:
c3:39:8d:25:e8:04:03:62:67:bf:13:40:1c:4f:de:
67:62:e5:e9:54:d6:e2:a4:f6:fc:a2:fc:40:b1:94:
0c:88:7a:8b:74:9c:0e:cc:4d:83:f1:83:40:fb:98:
43:27:31:9e:d1:20:ca:af:78:f5:df:79:2b:61:d3:
f2:5f:4b:95:76:a2:94:a8:bd:ff:fa:5e:59:be:59:
e1:28:4f:be:ee:db:1c:17:9b:0b:3a:cc:94:f5:bd:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:FC:EE:9B:79:35:B2:91:C9:61:2E:04:9D:46:3F:3A:45:99:13
X509v3 Authority Key Identifier:
keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:64:3a:fe:d3:eb:37:72:63:eb:fb:8c:0e:17:b8:e3:fe:de:
04:fd:13:84:d9:00:6d:6d:68:58:0c:c7:68:fe:d6:0a:41:d3:
e2:fe:79:ff:1f:af:70:9e:a2:a4:ac:6b:9a:43:db:79:ae:fa:
88:dc:b3:c5:19:81:7a:78:70:66:e6:01:11:e5:cf:44:8a:94:
f3:29:0c:1a:c4:4b:12:74:df:60:a3:cf:42:3f:f4:d9:34:d6:
c4:e7:23:46:5d:27:85:7c:dd:d1:96:ab:c2:f8:b6:c0:c2:f1:
38:66:44:3a:5e:d6:2c:8e:96:77:01:b0:77:dc:b2:e7:4e:68:
f1:31:84:90:d9:dc:06:36:80:72:d9:66:9d:58:53:96:67:93:
f2:da:dc:ac:06:76:eb:7f:b8:2c:35:09:09:9b:f9:40:77:7b:
9f:61:f1:59:11:46:50:d3:27:88:14:ad:dc:5d:57:ff:63:f8:
83:d7:24:67:19:a9:26:ea:1a:c3:64:8f:ba:fd:ba:e9:5f:cc:
7a:37:b1:b3:ef:04:9e:5b:0b:0c:72:56:6f:2f:b2:5d:a2:e2:
e6:ee:c2:a6:59:02:af:1e:47:99:c0:cf:2b:09:81:29:23:90:
e0:52:1c:27:78:f0:27:6e:4b:e1:84:02:d0:a5:ca:a1:82:f6:
a7:cb:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:09 2025 by rpki-client