This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json)
Hash identifier: rh0C26z7ilORJ/AeOVXvirENxKqydsY99Yhi5X5j0ig=
Subject key identifier: E0:0F:B0:B8:61:D0:B3:F6:18:BB:DC:43:85:15:2A:85:51:02:23:F2
Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
Manifest number: 01BB
Signing time: Fri 05 Dec 2025 01:23:23 +0000
Manifest this update: Fri 05 Dec 2025 01:23:22 +0000
Manifest next update: Fri 12 Dec 2025 01:23:22 +0000
Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: Z8prRognondX/Xe4Oe6aBb4r6pjCzo/HkC+UAsiAIbw=)
2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=)
3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=)
4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=)
5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=)
6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=)
7: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=)
8: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=)
9: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=)
10: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890
Validity
Not Before: Dec 5 01:23:22 2025 GMT
Not After : Dec 12 01:23:22 2025 GMT
Subject: CN=6932340a-1d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:8e:d6:74:f3:4e:63:48:04:8d:9b:67:ca:
df:8e:6a:ec:d5:22:8d:b4:f4:7e:6a:d0:82:ba:c1:
d1:00:f3:2f:9d:31:ff:09:d3:de:62:1f:41:42:dc:
6d:97:8c:42:5a:d1:54:c0:45:db:88:b0:8c:0d:9c:
6f:4b:cb:df:3c:3c:f4:53:b5:0d:49:fd:5b:13:00:
26:f7:cd:d1:4d:f6:fc:dd:d3:24:83:1e:db:ad:9c:
55:2f:a3:a4:1b:55:fd:d7:0d:3c:92:b7:a7:80:14:
0d:09:17:7d:d6:2c:e5:5b:20:68:9e:00:6e:3b:a4:
91:d2:f1:40:19:c6:30:99:22:53:8a:90:18:96:5a:
59:2f:b4:6e:fa:e5:e8:dd:75:7f:4b:7c:40:25:88:
7d:65:b5:5a:0d:f1:40:29:df:c6:cf:cf:69:3a:f7:
f4:6d:33:45:64:eb:55:c8:dd:7c:b1:16:8c:e3:bd:
1c:e7:8f:a5:88:9d:22:d2:cf:c8:27:60:4b:8b:e3:
59:e0:6b:3f:26:39:8b:99:bd:84:09:23:d2:7a:c2:
43:0f:cc:0c:9b:55:ee:3c:f1:70:80:31:ce:6f:7c:
74:2c:2c:1d:0b:bc:56:45:da:12:9b:e7:f6:1b:f0:
db:57:92:fb:1f:68:da:17:1a:61:3c:4c:c4:9a:03:
9e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0F:B0:B8:61:D0:B3:F6:18:BB:DC:43:85:15:2A:85:51:02:23:F2
X509v3 Authority Key Identifier:
keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f6:d1:46:0d:af:24:f7:b6:07:d5:dd:d6:02:b4:29:60:70:
d6:5c:e2:92:12:6f:bf:03:65:b2:cb:59:b9:57:c4:21:67:d6:
1b:08:df:1a:c3:2b:ec:e8:23:35:5e:af:75:ef:3c:29:87:be:
e6:50:cd:a1:a8:15:ce:a1:91:90:cd:1e:8f:a0:c4:d2:98:e9:
bc:9e:b0:e3:b1:04:b9:d5:8d:a6:b6:64:2b:ee:95:45:bf:47:
fa:77:c5:68:ac:6c:9d:80:4b:95:bd:3b:ee:2e:09:40:85:4e:
f7:c6:a4:d5:39:9f:2c:1e:b6:c1:66:55:7d:3e:4f:88:84:ce:
f1:52:13:b0:85:af:26:c3:fa:d5:db:61:e5:e6:cf:93:6e:4b:
28:07:3f:92:8f:07:59:8d:7e:72:19:db:7c:43:3c:bc:b0:18:
ab:04:f2:a5:41:cc:be:50:f7:37:7f:34:02:b2:c0:06:b2:6b:
55:f2:e1:be:54:ae:9c:23:d2:29:cb:cb:e7:d5:04:85:8f:1e:
b3:c0:14:3c:77:eb:08:e2:f8:83:bb:6f:ea:99:2c:49:68:10:
06:98:91:19:98:11:43:87:6d:43:45:70:86:c2:0a:e7:9f:b9:
ea:a3:eb:d7:4a:07:73:3c:24:72:a4:cc:6f:7c:66:e7:a3:22:
86:bf:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:12 2025 by rpki-client