This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
File: -c2wYYjVT9E3MDC5IMjkRdstPVc.mft (raw, json)
Hash identifier: csG4sF/D3PUjywxNaYIFZDZQc/J9EjRmf63fAr+mVDg=
Subject key identifier: F7:DD:6E:3E:F4:BE:91:20:72:FE:F9:A4:B6:40:58:79:54:82:3E:07
Authority key identifier: F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
Certificate issuer: /CN=A91A99F8/serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Certificate serial: 91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
Manifest number: 8E
Signing time: Fri 05 Dec 2025 04:34:59 +0000
Manifest this update: Fri 05 Dec 2025 04:34:58 +0000
Manifest next update: Fri 12 Dec 2025 04:34:58 +0000
Files and hashes: 1: -c2wYYjVT9E3MDC5IMjkRdstPVc.crl (hash: xyQb20/tlBchCjL2mNKsRbcRZVM5Gt0Ilq21i463Xyc=)
2: C4D0CEECACF611F0AC34117FC4F9AE02.roa (hash: 7ucYBUaCLmqgDRuv79Vd3l7kVK2Q22cJEETdC+Ms3yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99F8, serialNumber=F9CDB06188D54FD1373030B920C8E445DB2D3D57
Validity
Not Before: Dec 5 04:34:58 2025 GMT
Not After : Dec 12 04:34:58 2025 GMT
Subject: CN=693260f2-6418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:05:61:b2:19:c0:e3:ac:a1:85:d8:cc:2a:
e9:a5:f2:08:1d:81:f2:b4:1d:07:f9:9c:4f:1d:bd:
77:25:91:f0:53:b7:12:b2:54:fb:c9:c5:9f:42:f2:
64:52:cb:73:5d:10:70:e5:cf:6a:83:a9:fa:c1:59:
7c:69:df:90:56:60:87:61:0a:f9:c9:bd:27:a4:b3:
15:e2:f4:49:4f:b3:b1:69:24:a7:48:1d:35:94:24:
b2:a0:15:d7:d0:54:4a:02:6e:90:a4:5c:13:f2:86:
74:5d:19:3b:5a:15:f2:67:6e:70:f6:b4:02:4c:a1:
b7:e4:a1:69:e7:b6:0a:b5:e0:2b:f7:ec:e5:b4:8d:
c7:41:51:04:9d:f7:58:3d:a2:2a:4c:04:62:02:3d:
a7:b5:ea:73:7e:f5:35:45:8b:ad:a8:2e:31:24:77:
e3:8b:ee:cc:01:e8:a0:95:47:70:07:3a:53:4f:55:
dd:d0:71:dc:32:ce:30:e7:c9:84:83:e1:19:db:b8:
8f:14:39:db:b3:c1:f8:c3:92:bb:af:08:86:6d:7d:
54:c9:98:56:b7:b7:fd:8f:75:71:19:d1:a0:20:bf:
1c:33:1a:c1:78:7b:41:b3:42:d9:26:b8:2d:f3:d7:
6a:cd:fd:d1:28:44:10:ec:a6:09:6e:f9:68:58:d1:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DD:6E:3E:F4:BE:91:20:72:FE:F9:A4:B6:40:58:79:54:82:3E:07
X509v3 Authority Key Identifier:
keyid:F9:CD:B0:61:88:D5:4F:D1:37:30:30:B9:20:C8:E4:45:DB:2D:3D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c2wYYjVT9E3MDC5IMjkRdstPVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99F8/7A4D7B8804A711F0B4D73982C4F9AE02/-c2wYYjVT9E3MDC5IMjkRdstPVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:d3:20:a2:ae:23:a2:a9:5a:43:89:56:0f:f9:8a:bf:8f:38:
08:67:56:c5:1b:56:0d:35:31:de:00:b7:de:a6:8a:35:c9:37:
98:84:c6:b9:11:b0:af:0c:6a:03:4b:2a:0f:82:a0:27:84:82:
c6:d4:ee:34:92:05:6d:06:ce:6f:26:9e:b2:bf:04:1a:fc:2c:
87:40:c9:69:82:2f:47:55:31:d8:ed:de:fb:da:12:33:03:63:
cf:b1:ff:3e:9d:cf:a2:7d:74:05:16:fa:01:2c:18:b9:5b:32:
b5:69:c3:86:b6:bc:fc:40:c7:0a:6f:8b:6e:36:b1:57:13:2f:
72:24:60:7b:32:99:ac:b0:61:d3:77:ce:65:72:21:78:4c:cb:
4a:a2:41:a6:2b:1e:2a:2e:3d:2f:a4:aa:87:28:f7:81:bd:81:
0d:a8:00:52:80:e2:56:81:5d:e1:a6:e9:ff:dd:55:72:6d:a1:
b5:1a:41:45:a9:57:dc:3b:44:96:03:cb:ed:da:24:31:29:de:
4a:1f:c0:27:29:1b:9e:4c:93:d9:9d:c1:a0:e5:4f:c5:6e:25:
f5:b6:18:55:be:fb:75:d5:e4:8f:f5:ae:4f:c4:58:00:68:40:
e0:cd:60:98:d3:93:f8:e9:a7:33:c5:16:c9:03:0d:0d:9b:62:
14:ad:61:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:48 2025 by rpki-client