This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json)
Hash identifier: GVv+lrxbUXOgw7MeveKo5VqSpCx06s1drfTEPxZn+bo=
Subject key identifier: 8A:CA:78:FF:6C:02:A9:4B:92:C6:C2:92:B8:85:78:AD:C8:0C:1D:50
Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Certificate serial: 0797
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
Manifest number: 0790
Signing time: Sat 06 Dec 2025 20:32:34 +0000
Manifest this update: Sat 06 Dec 2025 20:32:34 +0000
Manifest next update: Sat 13 Dec 2025 20:32:34 +0000
Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: mqO6ppf/JpWXiBKgx1eHzHSM/pPeKDyR/Arb1lu5nO4=)
2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: fAeWrwprG7VOM279Y/8oithgtqvoI+DtUiT3hlYQPU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1943 (0x797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881
Validity
Not Before: Dec 6 20:32:34 2025 GMT
Not After : Dec 13 20:32:34 2025 GMT
Subject: CN=693492e2-b50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:ac:d8:b8:50:72:7f:1d:91:29:90:dc:01:
df:ef:d3:28:56:41:f5:fe:ee:e9:59:e0:d7:7e:92:
3b:46:36:e1:d5:fc:49:06:d7:e9:6f:68:14:41:c7:
34:c3:92:ec:00:34:36:a4:75:ba:69:fa:42:6c:6e:
ba:5d:af:08:75:b2:a7:66:91:97:ed:11:84:0f:65:
be:47:7c:44:2b:88:23:f5:e2:0d:b3:40:54:97:1e:
8e:3d:3f:c2:04:d2:9c:d8:ec:81:ee:89:83:6a:94:
5e:36:86:25:fc:7f:78:d9:89:5c:91:71:d0:43:19:
45:55:ee:39:8a:2c:d4:bc:b7:ae:a5:9e:7c:d9:28:
96:44:6f:f8:38:f0:93:a6:ed:a6:54:7e:1a:5d:00:
e5:3c:3d:e4:b0:b3:f0:40:fd:66:9e:2a:50:aa:e8:
36:31:9b:70:f7:69:94:cc:86:a1:0a:f1:39:11:95:
b8:f1:5f:ab:e3:fd:f4:bf:56:56:54:bc:4c:de:38:
c3:b4:2e:b4:c7:b8:98:df:f0:69:78:50:d3:8d:e4:
a8:a9:73:8f:da:a3:30:d3:96:8d:a0:ff:4c:01:ab:
b4:3f:d0:96:0e:7d:90:13:ee:2f:2e:88:94:d8:98:
30:40:3f:7b:61:6c:24:4b:95:2f:ca:14:26:63:49:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:78:FF:6C:02:A9:4B:92:C6:C2:92:B8:85:78:AD:C8:0C:1D:50
X509v3 Authority Key Identifier:
keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:d9:da:c2:65:60:19:f0:ce:a3:7d:68:63:37:bf:58:72:
25:7f:98:06:9f:69:63:38:a1:0c:ea:72:cc:6b:89:b0:b3:d3:
bd:29:eb:ae:56:e7:3e:dd:88:0b:bf:84:40:8f:7a:16:17:08:
f5:2e:d9:db:74:44:18:ee:44:32:17:96:60:81:c9:70:a0:4f:
db:aa:c6:ed:34:4f:5d:7a:95:b8:f0:71:5a:97:c6:44:14:7d:
51:e7:91:5d:cb:ed:e5:1e:7e:f6:ab:b1:95:66:3e:1b:85:88:
fc:40:44:67:9c:fe:1b:f0:cc:40:a2:5f:e4:74:54:24:2a:67:
2d:9c:6e:f6:f4:f3:a7:c4:47:4d:91:8b:5e:a5:67:ab:b4:10:
99:e3:3e:3c:01:ae:2b:15:22:23:b7:d6:e6:9e:d0:4a:45:f4:
81:42:aa:40:58:05:f2:8e:1d:b3:74:7e:27:83:1b:75:25:c3:
a6:d8:8e:da:bc:11:9f:a8:a9:cc:2a:0f:94:44:c6:c8:b4:2d:
6e:19:f7:1c:6d:85:84:a8:4d:dc:92:98:19:5e:18:07:91:b8:
63:22:30:95:67:49:db:73:7d:12:c0:f5:33:c7:4f:84:81:0b:
f5:00:b9:63:bf:96:c4:4c:a4:f6:01:d3:fa:b6:82:1a:26:63:
c4:14:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:58 2025 by rpki-client