This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json)
Hash identifier: ByCz34D96VqsJK1wnmIv0lLoYroJqGNGOrdsgLKaeCU=
Subject key identifier: 61:06:BA:DB:8C:11:5F:69:E1:70:94:9E:89:0E:1D:B9:7C:CE:F3:F3
Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
Certificate serial: 073A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
Manifest number: 0733
Signing time: Thu 04 Dec 2025 20:41:10 +0000
Manifest this update: Thu 04 Dec 2025 20:41:09 +0000
Manifest next update: Thu 11 Dec 2025 20:41:09 +0000
Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: DDIaL47xrFraQI5EaSIXumX0i1b0fyLU+7oz/jP3hlQ=)
2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl
rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850 (0x73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919
Validity
Not Before: Dec 4 20:41:09 2025 GMT
Not After : Dec 11 20:41:09 2025 GMT
Subject: CN=6931f1e5-b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:36:a1:6a:7b:19:1c:f5:c4:5f:c9:11:a6:
16:e3:b5:34:f5:9a:50:b2:f3:f5:85:d3:41:ff:09:
22:1d:61:b4:62:d1:3d:6c:65:0d:84:46:73:68:b8:
a8:6b:bc:5c:be:9c:a9:ae:c0:00:93:25:e3:c4:ce:
60:d4:fe:82:7d:9a:27:4c:f2:73:c6:a6:2c:2c:f2:
37:1c:f4:53:43:6f:ad:8c:3c:52:53:87:87:99:66:
ae:ca:bc:03:3e:e3:ef:04:86:ca:bc:9d:6c:9b:d7:
b5:a9:de:ef:65:ba:2c:69:f6:04:63:bd:a5:c4:9a:
3b:1e:a2:1e:52:25:99:c8:08:3d:1a:15:17:94:1d:
3c:b7:8c:05:b1:86:1b:7c:9e:1f:3c:f9:d8:43:56:
f9:8b:40:c7:d1:f7:6b:dd:4f:99:c1:64:c4:e7:ca:
dd:a5:7e:8c:f3:24:c6:ff:6b:1c:c0:1d:04:c7:a4:
4e:ad:ea:01:cd:c1:f7:4d:1a:66:1a:6c:89:af:29:
33:f9:27:3d:df:fc:b1:02:39:30:ee:d1:26:a8:de:
90:34:c4:7b:9a:73:30:c1:e7:2a:d8:61:58:4f:6d:
94:b6:e5:45:96:ef:ff:ca:e0:0c:36:1d:cd:67:54:
07:bb:68:57:b5:3d:f8:9d:5d:6d:e1:ba:3b:b3:3b:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:BA:DB:8C:11:5F:69:E1:70:94:9E:89:0E:1D:B9:7C:CE:F3:F3
X509v3 Authority Key Identifier:
keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:74:d5:bb:a0:4b:0b:12:43:8e:a8:24:32:a6:21:eb:1a:ec:
37:eb:33:9e:3f:e8:fd:93:7a:28:4d:e4:45:8c:19:3c:84:67:
74:29:21:bf:4b:c3:56:c4:04:6d:7b:6d:20:c1:37:a4:2d:1f:
90:83:57:8c:fa:31:8d:51:3e:59:fe:a2:9b:fe:0c:b0:40:dc:
fc:17:24:07:fe:22:42:32:80:91:10:1d:b9:4d:0f:dc:de:a4:
3e:24:4d:92:93:ae:86:22:9d:5d:dd:9f:57:68:14:59:b5:d1:
57:a9:37:64:d7:1a:cb:97:98:af:06:a8:b6:d1:5b:30:c2:42:
99:98:89:0b:e9:b5:af:70:ad:cd:eb:12:24:3f:2c:0c:57:19:
9f:ba:9c:1b:63:0b:89:c9:53:89:7e:5f:6f:bd:55:64:7d:bd:
94:3c:22:97:aa:94:d1:e1:5b:e4:55:18:c7:1f:43:da:a7:e1:
85:75:94:ce:ee:1d:2a:4a:02:16:58:36:f5:f3:69:be:16:10:
40:c1:ab:2d:ca:5d:57:4d:b0:85:ef:3d:ab:8a:e0:12:06:bf:
7c:ab:2c:e9:5d:83:63:ac:3a:a8:a5:c2:2e:22:e4:3c:b5:d3:
d7:9f:42:85:bf:3a:72:3c:4d:47:04:68:7b:ea:fa:00:d5:e4:
44:1f:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:00:45 2025 by rpki-client