This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File: AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier: CQvAFEhlUg80+hkBxCRv8pB3YRHyZYxxo1lkrC4LQOw=
Subject key identifier: A3:8E:FA:1C:E7:B8:3D:BF:59:D4:48:1B:E8:FE:AA:DE:AB:6A:B9:BF
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer: /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number: 02DA
Signing time: Thu 04 Dec 2025 23:44:14 +0000
Manifest this update: Thu 04 Dec 2025 23:44:13 +0000
Manifest next update: Thu 11 Dec 2025 23:44:13 +0000
Files and hashes: 1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: rEI5EMsDTYc8j4ZnPd8Q/9LwU90MHfqCtiSWJQHsgW4=)
2: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: 98L2p4S3Z9XBKGOrvf/7lu6oUXBZwojag9kKA7jW8zY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Validity
Not Before: Dec 4 23:44:13 2025 GMT
Not After : Dec 11 23:44:13 2025 GMT
Subject: CN=69321cce-888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:b7:82:8d:db:ab:b2:e0:72:57:b8:d1:c3:
99:49:67:65:db:9f:f6:37:b9:a2:80:2a:5a:64:3b:
66:af:79:3b:6f:94:b2:5e:45:9d:58:4f:ef:85:3b:
fe:b0:f4:e5:cf:c4:35:7e:82:49:37:01:29:c0:50:
0c:80:03:e2:b9:b0:54:81:09:41:ca:05:da:d8:05:
78:e4:78:45:7f:c3:17:55:ab:ae:25:00:c1:5b:19:
19:87:9a:46:e4:74:c0:a5:5a:34:a3:25:6c:c6:41:
48:1f:05:a0:e4:af:69:09:06:62:f4:bd:c5:f0:b0:
df:fe:11:b2:41:a8:49:fe:bd:2c:85:b1:f6:57:7c:
de:35:fc:5b:c3:4d:0f:0c:6d:fe:c3:cd:f8:b1:6f:
05:13:a3:67:5f:8d:b9:06:ab:f4:a1:57:85:9f:12:
d2:7f:4e:6f:94:7c:6b:54:6a:24:28:fd:7f:d0:fe:
e7:28:14:18:88:67:99:3d:65:b1:46:37:5a:75:5f:
c8:cf:dd:24:9e:24:61:92:42:91:d4:07:e2:83:02:
fd:8f:c1:1c:50:ce:89:14:aa:89:2d:80:84:9b:4b:
57:97:43:d1:1a:91:a5:99:04:1a:a1:5a:12:75:0c:
66:d8:89:15:96:c0:3f:75:52:a6:b3:d9:95:7e:ab:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8E:FA:1C:E7:B8:3D:BF:59:D4:48:1B:E8:FE:AA:DE:AB:6A:B9:BF
X509v3 Authority Key Identifier:
keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:25:d2:0e:07:1a:dd:ee:bd:44:a6:d6:3e:d9:06:19:75:
4f:8c:86:1a:08:aa:9d:97:05:9e:be:0c:ec:23:bf:95:f1:b5:
3e:dc:9e:a8:1d:9a:54:83:c8:56:c7:22:29:ad:12:e6:6f:67:
af:92:9b:dc:f8:26:ed:2c:5a:a8:53:ef:50:fb:eb:cc:9c:08:
3a:06:68:f9:7c:3c:99:66:47:4c:71:88:ba:83:0d:b8:0e:00:
6f:91:4d:82:d8:33:54:8f:3c:52:22:f1:64:54:27:75:ce:52:
87:9a:e9:37:52:87:c3:00:ea:5f:0f:a2:bc:58:6a:03:1b:44:
1e:ca:9b:d8:2a:fc:66:1a:d2:ec:cb:26:1e:be:3b:4d:60:32:
8d:ea:c6:3d:0c:ea:bd:ec:76:a9:4b:f7:0a:38:af:69:0e:55:
bc:90:32:e3:7c:6c:7e:36:10:cf:22:86:c5:22:2e:89:87:69:
00:b9:ce:dc:25:1f:72:36:7f:9c:9a:5d:59:e6:80:87:ef:b0:
35:51:68:d0:1b:27:89:17:2e:9f:65:48:b9:f6:77:c5:eb:52:
bf:92:91:97:a4:a7:3e:62:44:f7:f1:15:b6:5b:95:e0:f6:8f:
38:13:ff:2a:75:6b:72:95:4b:06:5a:22:f3:b1:16:0a:7b:30:
29:c7:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:44:50 2025 by rpki-client