This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json)
Hash identifier: hsOIuqUIk+iUNb0jQ47AbbTLYhrHkOxYsx88+2neoyA=
Subject key identifier: 53:2F:AD:40:B8:EA:90:CF:32:03:90:7E:F2:7C:22:0F:2F:5C:98:CD
Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Certificate serial: 2392
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
Manifest number: 2364
Signing time: Thu 04 Dec 2025 15:37:53 +0000
Manifest this update: Thu 04 Dec 2025 15:37:53 +0000
Manifest next update: Thu 11 Dec 2025 15:37:53 +0000
Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: cae4SFIgTP5xQR0xl4xzV1cWdnIG64ug9zZLNpNnJms=)
2: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=)
3: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9106 (0x2392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40
Validity
Not Before: Dec 4 15:37:53 2025 GMT
Not After : Dec 11 15:37:53 2025 GMT
Subject: CN=6931aad1-0f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d3:00:c1:82:f2:eb:10:92:b0:f7:37:a6:a3:
ba:d0:a3:0d:0c:a1:d3:58:0f:53:92:07:71:48:99:
b4:b0:c2:41:a5:d8:8b:f6:c0:91:cb:50:4c:e0:df:
18:b7:7e:75:7f:0f:00:23:15:45:23:b0:29:46:e3:
c0:84:6a:88:03:30:ac:72:b9:02:80:4d:0e:9f:f7:
50:a7:9a:81:d4:41:fc:7f:5c:fc:95:eb:7f:27:d2:
bd:3b:79:6a:a6:4c:52:db:b4:f9:c8:e4:88:42:e8:
a2:27:cd:63:b0:b7:28:7d:61:c3:a4:bc:51:40:18:
ce:e6:60:aa:ad:66:b4:3e:74:70:57:a9:be:8b:7c:
90:d5:39:45:8c:bf:49:7c:b2:81:1f:f6:58:12:13:
bc:a0:51:3b:80:60:7b:34:4d:58:d3:7c:f3:15:45:
f9:6c:6b:f9:ef:9d:48:d3:dc:71:71:7c:b6:d3:c5:
61:b9:83:0f:ea:fe:5c:67:34:2e:d3:f2:eb:51:f5:
f7:1c:11:a5:d8:32:74:62:db:ba:6b:c7:88:9d:a6:
f9:01:5c:99:bd:b9:88:4b:aa:ac:d1:19:c8:c3:64:
3f:55:d9:6b:2a:05:c5:0d:29:78:96:57:d7:b7:30:
e3:59:f0:08:e1:88:5d:ed:be:73:3a:cd:93:97:8a:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:AD:40:B8:EA:90:CF:32:03:90:7E:F2:7C:22:0F:2F:5C:98:CD
X509v3 Authority Key Identifier:
keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:42:af:fc:04:32:67:2f:3c:33:70:31:ac:31:e0:eb:c7:4b:
f9:28:d0:b1:11:fc:f1:51:d7:c5:21:26:c4:6f:ce:e8:a8:3a:
9f:fb:50:f3:45:01:8b:5b:34:85:39:5c:ad:69:4d:b5:07:94:
de:94:54:a5:16:01:ba:a3:77:9f:ba:5e:fb:4f:6c:1d:31:33:
bd:82:5b:c7:76:e0:46:03:b4:9c:14:70:2a:a6:08:7f:cb:79:
d9:24:fd:3c:53:f3:34:61:86:d2:c4:d2:f9:52:d0:3f:6e:72:
8e:a0:8c:6d:5e:6d:28:c3:2e:9c:db:68:70:1b:ab:0f:36:0f:
38:db:6c:87:53:80:57:78:82:28:ae:94:ec:aa:c3:82:75:ee:
06:b1:30:e8:9d:d5:93:b4:a6:72:d1:23:f9:fb:a2:94:d3:4c:
c6:a9:9a:49:16:bb:d6:24:fb:25:66:95:e8:6e:6a:12:aa:31:
47:07:8a:7e:46:f7:4a:23:0d:88:06:97:50:46:3f:4f:7a:6e:
df:fc:ce:10:4f:35:17:19:9b:7e:a7:c2:c0:e2:75:4a:17:71:
97:0e:62:ea:5b:33:d7:a9:2c:f2:4c:49:5a:46:c0:e2:dc:cf:
d1:ea:eb:b7:c0:00:46:21:30:11:57:72:81:27:b8:11:38:f0:
01:98:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:43:32 2025 by rpki-client