This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
File: rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft (raw, json)
Hash identifier: LE7skEw8HIyRuWOPsw8eIZ2FJJ5THXy+LMAca7ddFy8=
Subject key identifier: 77:3D:7B:2A:BF:7D:98:9C:4B:F8:D6:CB:6A:A2:EA:48:E4:40:10:39
Authority key identifier: AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
Certificate issuer: /CN=A91A83B4/serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Certificate serial: 045B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
Manifest number: 044C
Signing time: Sat 06 Dec 2025 22:57:28 +0000
Manifest this update: Sat 06 Dec 2025 22:57:28 +0000
Manifest next update: Sat 13 Dec 2025 22:57:27 +0000
Files and hashes: 1: rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl (hash: MaOC/zcluX1zUcWQbVKEwUt9sddsR/iSkrZlT3RbqE4=)
2: E37002DA5EEC11F08928266FC4F9AE02.roa (hash: bP8QoLrN2cG+x9Zk4VLIpDMpINAZs4gBK6D1Lhe10Us=)
3: 2E82E686569E11F08015BC34C4F9AE02.roa (hash: lvLXESJcuRjSmTnSzTV0gfJc2SXdXizZz5eloJwhEZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A83B4, serialNumber=AEB839CCBFAD5BD98A7A0DA9053BC2726F26904F
Validity
Not Before: Dec 6 22:57:28 2025 GMT
Not After : Dec 13 22:57:27 2025 GMT
Subject: CN=6934b4d8-68fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:37:51:68:5e:de:ec:b3:c6:63:6f:63:98:
eb:bc:99:e4:07:ae:de:2b:8c:a0:e0:03:f4:44:aa:
ee:c9:38:f1:0f:f7:3d:3a:b1:01:33:4b:7a:73:c6:
81:04:4a:1b:2b:57:f8:6f:69:46:7a:e1:2f:f6:21:
03:dc:52:7e:a7:b2:88:60:2e:7f:66:48:b0:15:b2:
9f:7f:f8:ce:bf:ba:54:92:19:30:73:ab:a5:f7:8b:
17:0a:ec:ba:21:01:60:ec:54:46:98:66:a2:0f:98:
f7:8b:aa:68:35:d6:40:49:61:3d:66:f8:07:b2:1b:
9a:c7:f9:67:dc:49:2f:40:dd:4e:3a:89:eb:b9:3f:
75:a3:7c:64:63:1b:d8:99:e1:92:f7:3b:44:1b:4e:
1d:4b:61:0d:34:fa:fe:43:35:0a:04:49:e7:07:b3:
ed:4b:90:62:e8:44:c5:a2:4c:a2:c6:fa:08:54:c7:
16:e5:22:a3:96:b3:f4:1b:68:c9:7c:74:82:0e:50:
12:8f:35:97:51:37:fd:67:6f:6c:ca:da:3a:57:81:
99:0a:45:10:2f:00:90:8e:79:b4:00:78:30:91:52:
90:eb:89:f9:28:02:de:1a:e7:48:10:34:4a:f9:3e:
e4:3b:78:23:80:0c:fb:0c:17:47:78:48:2c:3a:ba:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3D:7B:2A:BF:7D:98:9C:4B:F8:D6:CB:6A:A2:EA:48:E4:40:10:39
X509v3 Authority Key Identifier:
keyid:AE:B8:39:CC:BF:AD:5B:D9:8A:7A:0D:A9:05:3B:C2:72:6F:26:90:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rrg5zL-tW9mKeg2pBTvCcm8mkE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A83B4/E79ED49083F711ECA47A6265C4F9AE02/rrg5zL-tW9mKeg2pBTvCcm8mkE8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:da:29:97:68:67:b4:8f:2c:d1:32:e7:57:6b:2c:d8:19:2b:
36:03:de:e5:2c:5c:83:fe:27:e9:dd:79:95:b4:01:2f:ce:03:
c3:e9:c2:a7:48:89:52:2e:8f:2d:df:6c:00:a3:98:7b:a7:ae:
07:97:41:a3:19:b7:63:59:de:1b:d4:8e:c6:21:a4:97:56:c0:
a6:90:03:e3:25:31:8d:f9:75:50:38:37:12:87:86:eb:54:2b:
8f:1b:bc:51:f0:6b:4b:f6:85:e0:e3:6d:d8:d3:2c:f0:cb:c0:
aa:2f:1c:fd:89:2b:20:a9:4b:d7:d0:d7:a2:e0:93:4d:c1:24:
61:00:08:26:f7:ea:a7:5a:88:f6:30:54:cb:83:b5:64:57:ce:
a2:8a:67:e4:00:78:58:62:70:96:50:96:c4:9e:77:9b:91:2f:
a0:7e:2a:1d:4d:84:ae:d7:fc:1c:f4:5c:97:1b:d8:95:c9:d6:
33:c0:3e:54:55:55:89:93:8a:d5:2f:3c:44:44:04:a4:6b:6c:
70:85:35:a7:92:20:79:98:e9:0f:fc:79:f7:6e:94:49:56:42:
90:ed:c6:f4:7c:f1:29:9a:a5:2f:93:7c:a6:d2:5a:97:c6:1e:
94:db:f1:04:b9:39:c1:72:12:20:40:4d:c4:09:ac:ef:a4:f7:
c7:93:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:39:41 2025 by rpki-client