This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
File: iOe1QfQimNbptRZdllJGzBzB9aI.mft (raw, json)
Hash identifier: 1FVimj0FKY3bgfExyX7e9AiqLjbG3tJpbhzADo13ReU=
Subject key identifier: 57:0F:05:32:73:CC:B2:C7:3A:04:5B:2F:D3:8D:8E:83:1F:80:65:8E
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0FC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
Manifest number: 0F87
Signing time: Sat 06 Dec 2025 17:03:06 +0000
Manifest this update: Sat 06 Dec 2025 17:03:06 +0000
Manifest next update: Sat 13 Dec 2025 17:03:06 +0000
Files and hashes: 1: iOe1QfQimNbptRZdllJGzBzB9aI.crl (hash: OUfXKdOn2UXZGO4Z9nD5v19wF9n2ePVjG9bAUEM3lfk=)
2: 13C1EDA8767911EE9A957930C4F9AE02.roa (hash: rMgdKojSnMQn5zP9ArOeE344pCaixcohoQsewhOoy54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4034 (0xfc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F, serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Dec 6 17:03:06 2025 GMT
Not After : Dec 13 17:03:06 2025 GMT
Subject: CN=693461ca-b917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:53:e6:c8:fe:e2:f3:ee:73:ff:45:25:3c:
99:ab:5f:64:3d:f2:eb:47:d4:71:0c:6e:33:35:ca:
be:a2:d7:37:7e:ba:f4:0c:25:46:26:ac:f7:aa:7d:
c8:a9:22:ec:ea:5e:38:03:11:dc:d8:ac:9a:29:1a:
b1:cd:23:31:22:d2:35:e0:11:cd:69:62:ad:65:3b:
86:d1:b8:9a:eb:e9:52:ba:70:17:26:c1:6b:dc:60:
30:a5:0f:5c:ff:e6:10:7c:80:eb:52:e2:e2:93:0a:
7b:30:09:29:1e:f6:0f:d9:c3:99:d5:ef:a0:68:4c:
28:c1:cb:37:65:35:2f:8a:b2:c9:53:03:6b:f7:9d:
23:db:aa:92:7c:2a:5b:99:41:77:d9:0c:0a:2a:74:
6f:ad:53:d2:2b:4a:b7:10:57:15:23:41:c3:7c:dd:
de:62:42:89:1a:ca:9d:7b:48:f6:58:71:d9:97:43:
fa:84:37:25:24:75:5c:76:9b:9a:9c:dd:2f:17:09:
14:7f:73:f1:48:1b:13:98:d9:bc:93:4a:6b:25:79:
2d:10:41:d9:c3:fd:f4:9f:db:3a:11:7e:43:26:26:
53:dc:65:e2:9e:49:ba:0f:77:53:eb:97:c2:6d:d5:
d3:c4:f9:a5:c2:68:dc:dc:91:f6:72:4d:9d:c3:f6:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:05:32:73:CC:B2:C7:3A:04:5B:2F:D3:8D:8E:83:1F:80:65:8E
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:73:0a:4b:bb:e7:63:9d:e8:52:67:cc:37:10:d9:32:34:ba:
ba:fe:18:fb:3f:39:76:b8:fc:84:7e:ab:41:36:8a:b3:24:1b:
a9:92:5c:ff:76:16:6e:8c:b7:61:07:47:63:ac:6e:7c:39:1c:
65:ff:74:09:fa:59:fb:5f:42:fe:c0:d8:7e:b7:b2:82:20:18:
21:df:0a:06:8c:6f:ff:b6:dd:f9:b0:87:42:b1:36:54:fb:5b:
d4:33:b2:4c:ab:1f:09:64:ec:bf:65:90:a7:41:49:c7:9a:c8:
a0:9b:99:77:ba:2a:46:0e:97:9a:e4:5b:4b:08:19:8c:2c:d4:
82:1f:48:32:24:e5:c4:cf:fa:23:b4:94:1d:00:a8:bf:ed:2d:
96:3b:a9:fa:e1:b1:d2:66:ec:88:0c:39:ed:68:63:90:b9:1d:
e4:88:8d:7c:14:53:98:dd:18:ac:5d:cd:67:ed:19:b6:8c:4a:
f4:7f:e5:c5:78:d3:19:34:b6:0f:84:00:07:a5:c6:5e:ad:5f:
49:56:59:64:d4:b0:fe:3b:ed:97:93:8d:c8:b9:74:60:4b:44:
71:b1:f9:ae:1a:03:4e:79:c5:b4:6f:d1:f0:1a:ef:7f:f0:7a:
36:f0:80:5f:f7:41:e2:98:21:9c:92:af:7b:37:f5:0a:6e:08:
ae:72:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:28:35 2025 by rpki-client