This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
File: fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft (raw, json)
Hash identifier: ztnN7M36XskvgSRYX/gn7knWlE3G9uK9BT8YccjR+cI=
Subject key identifier: FC:D2:2D:0B:9A:CD:4E:26:43:5D:B9:A0:F4:17:C7:6E:CD:83:63:26
Authority key identifier: 7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
Certificate issuer: /CN=A91AB92D/serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Certificate serial: 0208
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
Manifest number: 0204
Signing time: Fri 05 Dec 2025 00:41:22 +0000
Manifest this update: Fri 05 Dec 2025 00:41:22 +0000
Manifest next update: Fri 12 Dec 2025 00:41:22 +0000
Files and hashes: 1: fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl (hash: zOaBsDJI8KRZlP9NwEk91KkRUWnny+1bQAu264qylpg=)
2: 99B10EC4BD3511ED837DED0DC4F9AE02.roa (hash: VjsdP0zlKHnuUM/QDxE6pyiIHcCSV1/bdfYwggvcPkg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520 (0x208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB92D, serialNumber=7DD85EC439786FD42E0BF7B72137765F05D0E9FA
Validity
Not Before: Dec 5 00:41:22 2025 GMT
Not After : Dec 12 00:41:22 2025 GMT
Subject: CN=69322a32-d5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:c4:16:fc:9f:73:ac:0e:f0:a7:79:98:62:
79:32:5c:2c:b7:ab:3e:b1:6a:a4:aa:f0:09:c6:0f:
63:cf:a5:ea:1c:c7:84:7c:25:4e:0a:09:6e:9f:a3:
39:3d:38:22:fe:25:ee:3c:61:2f:f2:a9:b2:16:29:
8a:c1:cf:18:98:3d:52:f1:5b:57:06:a1:1c:46:2e:
22:db:d8:46:ef:c1:1c:f6:96:5f:02:ef:cc:2c:7f:
12:65:97:e2:c7:c3:29:3e:32:fc:72:78:37:71:38:
53:07:88:20:c2:24:6b:e5:be:0d:2c:57:8e:71:e1:
ff:85:65:0c:42:9f:94:5f:4a:fc:49:91:21:29:a4:
1c:54:11:01:35:5a:e3:f4:fe:0a:4e:7a:c8:0a:62:
ca:83:a5:ca:27:00:40:6c:9d:e5:b0:e9:05:e7:9e:
38:c5:49:57:9f:db:4b:09:84:8f:54:86:13:79:c2:
b1:78:0f:97:28:fd:cb:f6:84:82:f0:7c:e8:9d:9d:
e4:ea:c5:80:27:ef:d4:94:e7:cd:f3:41:62:f8:d1:
09:ac:d1:1d:b2:01:b0:b6:84:6f:2c:8c:f2:11:73:
9e:c5:0a:2c:60:ce:a2:ee:e0:d7:4c:4c:de:fe:06:
20:8c:13:06:e7:e9:45:e9:e4:cd:2d:5b:f8:f5:6f:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D2:2D:0B:9A:CD:4E:26:43:5D:B9:A0:F4:17:C7:6E:CD:83:63:26
X509v3 Authority Key Identifier:
keyid:7D:D8:5E:C4:39:78:6F:D4:2E:0B:F7:B7:21:37:76:5F:05:D0:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fdhexDl4b9QuC_e3ITd2XwXQ6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB92D/6BE2CAD0BD3211ED84A82809C4F9AE02/fdhexDl4b9QuC_e3ITd2XwXQ6fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:99:3f:34:71:fe:d4:ce:f7:b6:6f:e5:c2:83:44:2e:f1:7d:
d2:f6:55:b4:79:da:52:96:25:f5:6a:27:47:8d:d4:01:7c:88:
ac:d1:b9:16:42:65:37:2c:5f:75:ae:21:91:44:48:33:83:96:
65:fa:e2:33:a0:ee:97:80:aa:cf:e7:11:5e:1d:08:20:f1:64:
bc:52:82:77:57:7f:18:48:fc:13:a3:e8:01:48:15:25:8c:69:
1d:45:fb:c9:e1:31:66:f1:6d:9b:04:b9:78:50:80:d2:3d:f7:
86:1d:d2:c6:32:50:e4:51:81:05:5a:61:8e:e8:ab:74:f5:af:
0e:5b:97:3e:64:b5:0e:ca:4b:e2:99:64:7d:70:88:bb:97:44:
62:1b:88:b9:06:21:82:8a:0a:e8:85:e2:44:b9:ff:4a:35:4c:
e0:6e:e9:e2:d7:d6:cf:99:92:60:fa:0b:b9:6e:44:8b:e9:72:
42:92:26:14:ef:dc:5a:e3:8d:14:ad:7b:dc:34:5b:c4:25:8c:
8c:50:38:8a:f6:7b:cf:4e:dd:c1:9a:78:07:da:9b:f4:4b:15:
7e:7e:e3:68:d0:7a:41:e6:b1:28:7d:c7:e7:7b:9e:fe:f3:5f:
50:87:0c:50:d2:98:29:dd:21:8b:f0:5b:c4:9a:bb:aa:0b:e5:
14:b6:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:16:38 2025 by rpki-client