This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
File: 2K83cS1WsbaT720D40bADPPwST4.mft (raw, json)
Hash identifier: Rs1Ww7rfda4BGXQTTGlhh+Xln3X3adDv7Qx25k1v42A=
Subject key identifier: FD:1F:F8:AF:58:D9:60:AE:BA:98:E9:86:3E:F4:D9:9F:DE:47:3A:F9
Authority key identifier: D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
Certificate issuer: /CN=A91A86D0/serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Certificate serial: 0FCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
Manifest number: 0FB6
Signing time: Sat 06 Dec 2025 17:00:14 +0000
Manifest this update: Sat 06 Dec 2025 17:00:14 +0000
Manifest next update: Sat 13 Dec 2025 17:00:14 +0000
Files and hashes: 1: 2K83cS1WsbaT720D40bADPPwST4.crl (hash: b7MJKBN2FLK6Rj15u5GaNPUc9ZK4pJXv6IWRQaBXVkc=)
2: AFCF76ECC43411F0982E427DC4F9AE02.roa (hash: mNdL6rcYZPvYSFc6XWNaIrKma9w9J2a48AtG9Q5JxNY=)
3: F0F0DEC2C43411F0836DBC7DC4F9AE02.roa (hash: FlKDn7TH0xwtocs3xoGnXoyNOsEdYeMYxp8TFP51AsY=)
4: CC99502E382F11EEAB87A63EC4F9AE02.roa (hash: /jxk5arOtk8XX4x0oqH6WonBrSttsEFSJuqdd1pQsXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4046 (0xfce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A86D0, serialNumber=D8AF37712D56B1B693EF6D03E346C00CF3F0493E
Validity
Not Before: Dec 6 17:00:14 2025 GMT
Not After : Dec 13 17:00:14 2025 GMT
Subject: CN=6934611e-ef6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:bb:94:fb:0c:82:59:b8:df:70:02:bf:be:
fe:2e:bf:12:7d:77:00:e9:d3:fb:ac:70:fb:4a:c7:
c0:49:c2:ab:1f:65:8b:a0:7b:ea:f3:38:84:5d:b2:
9a:57:fe:cf:3a:3e:28:79:03:1e:45:fe:e7:1d:7a:
40:02:67:b3:c6:34:11:af:1a:db:5c:67:3f:6a:8d:
7e:fb:14:f9:03:83:de:62:52:72:93:dd:7c:aa:3f:
ea:43:0c:30:44:4d:3f:bd:03:3c:fc:8d:bb:c3:fe:
ff:25:6d:eb:89:c0:8c:d7:1d:08:2e:d5:8f:4c:61:
fb:e1:54:f7:70:4e:c5:6b:6b:59:5d:59:60:b5:6c:
8a:70:a4:21:98:1d:ee:3a:9e:c1:80:e7:df:a5:cf:
4e:73:35:dd:fb:17:71:99:8a:c9:04:5a:f7:22:f8:
41:00:01:ea:27:c7:1a:9b:bd:55:40:d4:2e:a4:25:
7e:31:32:0e:58:b6:ec:68:a9:dd:ee:6c:4e:e0:71:
7d:3c:63:ff:04:16:8b:11:38:96:dc:0a:00:a2:ba:
30:fd:e0:13:9c:82:b0:2c:cc:b7:16:c5:96:96:d0:
91:82:20:2c:74:1e:ae:33:cc:f1:65:38:10:c5:65:
20:48:25:76:00:d4:9c:73:b1:71:31:f7:4b:8e:03:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1F:F8:AF:58:D9:60:AE:BA:98:E9:86:3E:F4:D9:9F:DE:47:3A:F9
X509v3 Authority Key Identifier:
keyid:D8:AF:37:71:2D:56:B1:B6:93:EF:6D:03:E3:46:C0:0C:F3:F0:49:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K83cS1WsbaT720D40bADPPwST4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/FA78B0446FCE11E988C44B3EC4F9AE02/2K83cS1WsbaT720D40bADPPwST4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:e3:f7:34:31:c4:bd:d3:ff:14:5b:c9:b1:4a:96:29:60:
b3:d3:dd:fa:d7:bb:ab:d1:77:94:2a:22:5a:c8:4c:c0:ad:f2:
83:d7:c0:b2:48:c5:56:55:1a:ad:29:45:12:99:6c:91:93:f0:
ab:ab:ef:a9:c7:96:35:c6:10:cf:92:99:6d:8f:bc:65:72:83:
04:77:45:c0:af:13:99:b2:4e:27:6d:38:e3:2d:8f:ad:a9:01:
db:4f:e4:1f:89:93:85:ee:6b:3c:94:a6:48:c2:c3:fb:a7:a1:
24:5f:3f:a2:f7:de:76:d7:05:e4:63:5c:df:73:2a:21:16:35:
0f:50:22:6a:87:5a:51:de:f0:79:dc:10:14:97:e2:81:44:88:
11:f9:3d:c3:c5:2f:25:37:4a:1b:eb:a4:2d:c3:40:c0:42:c3:
f3:99:19:2a:7f:11:b1:59:3f:4d:de:f6:b1:aa:6b:d5:db:ca:
ba:47:eb:ef:02:f0:eb:33:10:d1:f6:0d:8f:32:17:f3:0e:7a:
c6:81:0c:c7:bc:36:67:33:e6:9a:b5:40:9f:1a:25:4c:05:68:
3a:5b:4a:b3:c1:ce:12:17:f1:6b:28:fa:75:b3:71:de:44:2d:
8d:e8:b3:b4:44:ff:be:b5:de:89:c0:c2:34:fc:ef:2c:b3:c6:
b9:b8:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:25:51 2025 by rpki-client