This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json)
Hash identifier: 6BAdTumsU4C5STfGt/kPu9qjFSNqKl39atsC200ID7k=
Subject key identifier: 73:4E:D0:67:EE:84:83:C4:B5:61:6C:9C:6A:66:9F:2B:1A:24:CE:57
Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Certificate serial: 0246
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
Manifest number: 023A
Signing time: Fri 05 Dec 2025 00:17:37 +0000
Manifest this update: Fri 05 Dec 2025 00:17:36 +0000
Manifest next update: Fri 12 Dec 2025 00:17:36 +0000
Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: FAkrUE7S7iI7FbsVOT2BumKu5ZqxPbKwIaMXleurvko=)
2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: n2zLDtDaPNL3Ye6qBkwU/zpDC2mfhiqQ0N3aGF+8gOs=)
3: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: KwJcRfcCHNm1/1H4hZVLWjzBmRVSuYEae2GuTglAJm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540
Validity
Not Before: Dec 5 00:17:36 2025 GMT
Not After : Dec 12 00:17:36 2025 GMT
Subject: CN=693224a1-df93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:27:f9:4e:aa:82:93:a7:29:7b:79:cf:47:
7c:9b:bd:43:5b:bc:a1:64:16:3b:83:dc:50:43:e2:
00:b7:3b:f2:70:ef:4b:a5:d1:fc:e1:e8:d0:2d:16:
0f:e5:23:50:30:35:a5:62:8d:17:59:da:83:be:f3:
59:f9:05:0b:2a:00:cb:11:ad:4e:d8:5b:f5:c6:46:
8b:fd:f4:1b:e5:6e:3b:1f:99:a0:e5:09:a9:c2:bf:
a7:25:cd:68:45:be:34:ff:25:88:40:02:91:18:65:
ec:e1:d0:9b:38:8a:24:17:ef:68:98:29:85:a2:ec:
df:cf:7b:d0:68:01:2e:a1:87:2b:1c:52:05:83:50:
76:1d:07:cb:e8:4f:1f:e2:34:4f:26:b4:f2:fa:be:
82:ac:c1:3c:92:6c:6f:0f:b3:56:85:9f:f8:b8:7e:
7c:1f:30:97:a1:7d:e4:c1:60:3f:06:4d:3b:88:42:
66:63:0b:d6:ad:37:97:a6:79:bc:d8:0c:9d:ce:ea:
4b:4a:a9:a6:e1:38:85:14:3a:8f:bb:94:e0:ba:38:
81:6c:a6:66:d9:7a:91:25:8a:d1:4d:32:8f:71:91:
33:6e:79:f0:e1:5b:ff:08:4d:a8:90:33:c7:c3:fb:
b3:f9:b3:10:fd:fa:83:7a:d6:b1:a5:32:c1:ac:1f:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:D0:67:EE:84:83:C4:B5:61:6C:9C:6A:66:9F:2B:1A:24:CE:57
X509v3 Authority Key Identifier:
keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:94:e4:e9:91:f2:56:ab:7f:4a:d2:93:e2:1a:8d:be:35:ec:
e7:00:bc:e6:fe:c0:e1:13:86:cf:67:bb:c6:bd:fa:57:20:05:
7a:ee:0f:8b:1c:ea:1a:e5:db:8f:27:a6:d0:d1:3e:39:c4:9b:
ee:e1:1a:11:18:e7:f6:01:c1:f1:a0:4a:9d:62:3c:a3:19:a6:
c0:1f:66:c8:87:68:bf:35:d6:e7:56:38:a8:43:99:08:2e:1c:
a9:9e:db:33:1d:d9:ca:05:79:75:96:06:36:fb:44:8a:30:ba:
48:7d:23:9e:0e:2d:5d:c0:73:b5:f1:26:d4:11:b8:86:35:48:
ba:13:ac:7e:8f:f1:e2:92:42:2f:f5:ef:ba:e5:14:29:d7:5e:
c7:76:de:4c:77:10:67:82:da:3e:50:60:e9:f6:9b:76:15:64:
8a:94:33:c7:e8:53:95:cd:81:5d:74:8c:66:27:06:11:d6:5e:
5f:ea:bf:b4:28:a6:70:f9:bc:da:9b:16:b5:5e:09:e2:f4:00:
43:bf:7e:9d:09:bf:50:82:8f:00:aa:a3:f0:12:00:e4:8f:69:
d9:ac:fe:10:48:cb:3a:1d:36:cc:4a:c5:50:d2:59:87:93:0a:
0c:30:90:12:9c:cd:bb:eb:76:88:cd:5b:fe:da:e3:65:1d:93:
52:c7:b4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:34 2025 by rpki-client