This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
File: TT_EcGT06hvcqym55lsx103iZOA.mft (raw, json)
Hash identifier: PgcZmExnEZztrozuMTkBT7x5zfra4ZU+yQEuCeRb1z0=
Subject key identifier: 3F:01:E9:81:AB:7C:C5:53:C3:D0:D4:0E:C9:64:74:E9:9D:BE:D9:42
Authority key identifier: 4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
Certificate issuer: /CN=A91AFAAC/serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
Manifest number: 65
Signing time: Fri 05 Dec 2025 04:53:34 +0000
Manifest this update: Fri 05 Dec 2025 04:53:33 +0000
Manifest next update: Fri 12 Dec 2025 04:53:33 +0000
Files and hashes: 1: TT_EcGT06hvcqym55lsx103iZOA.crl (hash: oHJmvRXGx6WoU5WnhswcQUBieA4/befZeeEfUrvM/6Y=)
2: 40F5D9E6354B11F0A873F14DC4F9AE02.roa (hash: Cosb+eMZxQ3sCZz6h4y2hYsraDJKDCIgjZyVYBFmpVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:53:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFAAC, serialNumber=4D3FC47064F4EA1BDCAB29B9E65B31D74DE264E0
Validity
Not Before: Dec 5 04:53:33 2025 GMT
Not After : Dec 12 04:53:33 2025 GMT
Subject: CN=6932654d-c504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:46:85:e6:d9:bc:1c:92:ef:72:7c:e1:19:
c4:a0:86:72:51:8f:3a:13:d1:38:4a:a8:69:56:29:
96:15:8c:94:c4:af:08:d2:19:13:1f:e6:3e:b9:72:
47:80:17:1f:9a:b1:66:f9:73:49:1b:29:7d:64:70:
a1:6b:24:4a:7d:0e:6b:69:b3:f5:22:3b:2d:02:e0:
8e:30:68:79:c1:72:28:cd:62:0e:12:d9:2f:6c:4c:
c9:52:97:21:f0:bc:9a:5f:45:ca:a3:62:c8:59:b8:
28:fe:cc:00:ba:d1:a0:7e:e2:c1:85:a2:7a:90:f4:
23:d9:63:1a:f6:94:d2:46:b0:e4:3f:5c:8e:c4:01:
41:37:f0:34:e5:91:7a:6b:3b:f2:a4:33:be:8e:f2:
e9:d3:f1:3a:e0:2f:4f:83:c2:66:8d:9c:17:9d:75:
67:5e:4a:57:d4:c4:85:76:fa:86:63:1b:7d:54:e5:
78:b5:25:e3:58:3d:62:cf:76:59:61:3b:a7:bf:1c:
52:f6:f5:9c:aa:73:4b:88:6e:a2:84:54:73:2d:09:
7c:bb:57:aa:0f:9f:77:d4:7d:8b:20:f9:16:df:ee:
bf:55:e8:f3:f9:04:5e:5f:11:08:94:2f:15:0b:c2:
43:f2:35:81:f4:d9:1c:f8:87:4c:05:6e:6e:6d:8f:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:E9:81:AB:7C:C5:53:C3:D0:D4:0E:C9:64:74:E9:9D:BE:D9:42
X509v3 Authority Key Identifier:
keyid:4D:3F:C4:70:64:F4:EA:1B:DC:AB:29:B9:E6:5B:31:D7:4D:E2:64:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TT_EcGT06hvcqym55lsx103iZOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/4AF0C92A354A11F0BA766E4CC4F9AE02/TT_EcGT06hvcqym55lsx103iZOA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:52:d7:68:c0:24:ae:31:8a:9c:28:58:3c:6c:85:5c:ec:
2f:cd:0e:97:39:11:65:41:ee:0a:86:72:07:f9:95:72:43:84:
1f:aa:e3:e2:b7:a1:fe:b4:c3:f7:d7:8b:9e:b2:47:67:fe:c0:
52:dd:01:45:b9:a5:0a:4b:25:2b:d9:47:76:4e:cf:0f:6e:e6:
88:fc:07:a8:6e:88:32:bc:01:8a:a6:25:cb:f9:5f:2a:15:d1:
ef:97:b8:bf:71:1f:e6:8d:35:08:0b:20:bc:c9:65:bb:9b:4a:
8d:33:cc:0d:37:43:0b:29:84:3e:aa:c4:af:0d:2e:57:eb:4c:
a8:4a:03:2b:a1:fb:10:dc:7d:ad:94:83:61:e3:ce:41:4a:8c:
9c:64:a6:65:d9:11:80:1a:bc:7b:da:f3:84:db:16:98:e8:55:
7c:d1:15:5a:f2:34:1e:74:39:04:0b:c8:bb:3d:db:4e:49:e7:
5d:e0:52:e1:e2:32:b3:dd:fc:8f:6b:64:3e:b6:67:28:cc:99:
5d:c5:30:17:20:cf:71:01:be:1b:51:48:a7:d6:e1:87:9f:11:
ce:f4:fb:3a:aa:3b:96:4e:fa:e8:be:86:fb:55:ca:a8:bb:c6:
a1:81:cc:8f:7e:6a:9f:1b:27:5e:0a:b0:70:7e:07:34:e0:eb:
3b:4c:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:47:21 2025 by rpki-client