This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
File: f7FuQPo8p3_OJMTJpGRWg8OeihE.mft (raw, json)
Hash identifier: klOPjCvFGYAaq8dnGQUa1uEJo3uSFqYe333bGEalTt0=
Subject key identifier: E1:25:6E:AA:62:6B:9E:C9:16:F4:CC:21:C1:02:0C:27:A0:18:A5:E7
Authority key identifier: 7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
Certificate issuer: /CN=A91AF83D/serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
Manifest number: 01FD
Signing time: Sun 07 Dec 2025 00:57:27 +0000
Manifest this update: Sun 07 Dec 2025 00:57:26 +0000
Manifest next update: Sun 14 Dec 2025 00:57:26 +0000
Files and hashes: 1: f7FuQPo8p3_OJMTJpGRWg8OeihE.crl (hash: 018WmzIStIMAbog7gIirDejE3hPtye0mGDO14n2iFLg=)
2: AB3814CEC85411EDAE5D9322C4F9AE02.roa (hash: Ne5P4RHs3YFSrDYzxUegdYs2bv4xvTKvncGb7wbf4vY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:57:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF83D, serialNumber=7FB16E40FA3CA77FCE24C4C9A4645683C39E8A11
Validity
Not Before: Dec 7 00:57:26 2025 GMT
Not After : Dec 14 00:57:26 2025 GMT
Subject: CN=6934d0f7-55f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:bb:80:43:9e:93:e2:ed:b5:61:07:ea:7e:
7a:9d:df:1d:a2:3e:59:67:49:7a:66:3d:af:3f:8f:
21:71:d1:0c:82:e1:47:ca:00:3d:0f:bc:de:f3:56:
f0:4d:2e:8b:59:29:1a:db:4d:cf:46:eb:da:d4:de:
e8:6b:e1:b9:20:f4:b3:b6:39:65:d2:bd:65:da:2b:
44:78:ab:c1:86:e2:b4:91:09:d4:5c:3a:88:08:1d:
b4:66:cc:64:82:29:42:c3:7d:74:a3:eb:64:72:c6:
51:eb:68:28:45:70:79:9e:f1:e6:d6:6e:49:ff:4d:
77:3d:d7:48:7d:06:b0:15:6d:3c:59:35:0e:3f:c5:
52:99:6a:b0:0b:b1:b8:b7:09:13:16:6c:fa:90:0e:
40:07:f8:ad:53:05:1f:05:22:51:94:d9:56:66:97:
ca:5b:ed:06:fc:c4:8b:37:77:aa:75:50:9d:27:1d:
31:9a:28:c0:51:7c:5e:e4:f0:ed:da:0f:14:70:10:
d9:12:b6:81:cc:97:fe:53:8a:f3:54:f9:65:92:a7:
1a:60:98:60:78:3e:c4:29:0a:fe:54:3e:ba:b9:a9:
b7:47:f4:ae:c3:a7:92:b2:50:cb:11:d7:38:34:b3:
30:41:86:d4:19:26:82:15:d0:5e:87:d8:be:92:f1:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:25:6E:AA:62:6B:9E:C9:16:F4:CC:21:C1:02:0C:27:A0:18:A5:E7
X509v3 Authority Key Identifier:
keyid:7F:B1:6E:40:FA:3C:A7:7F:CE:24:C4:C9:A4:64:56:83:C3:9E:8A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7FuQPo8p3_OJMTJpGRWg8OeihE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF83D/A3D52FB8C85011EDAF5BBA87C4F9AE02/f7FuQPo8p3_OJMTJpGRWg8OeihE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1a:0f:f8:dd:14:d0:78:1a:5e:f9:79:d2:e7:96:61:f5:42:
d0:56:db:2f:d1:c2:bf:f5:82:68:0b:0f:a9:18:f3:67:35:18:
30:c5:df:0a:15:df:84:aa:8c:3b:12:34:1c:c5:71:43:b0:58:
44:71:c0:5e:f6:92:13:39:99:c6:8d:da:63:c3:bb:f9:84:e8:
9e:cf:08:d1:c4:68:b7:57:a4:fb:3b:e7:56:13:37:aa:2d:42:
e9:ca:01:7d:15:89:f1:cc:72:3e:b4:96:54:9d:85:f2:47:c9:
e9:1d:e0:87:e3:a0:c9:b7:87:02:79:7e:bc:21:c7:92:43:74:
9a:03:be:09:a5:42:f7:7e:3a:ce:62:16:41:dc:38:30:35:be:
f2:48:80:97:b7:97:32:40:91:b7:bd:fd:6c:c6:30:a3:08:11:
ae:31:45:f7:40:72:15:d7:66:33:74:8e:bb:f4:da:2a:a5:6c:
2c:45:5b:fa:10:ed:ee:a5:b3:35:5c:8b:a5:52:53:59:4b:b0:
3c:19:0f:f6:29:13:25:54:50:7c:7a:18:ab:42:c3:a1:f5:54:
8b:ca:a1:12:95:23:6f:eb:1e:f7:dd:53:12:cc:6a:61:5f:b2:
13:18:31:e7:ac:47:60:02:e9:f1:0e:08:bd:ef:0c:f0:97:97:
61:92:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 10:29:46 2025 by rpki-client