This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
File: dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft (raw, json)
Hash identifier: MRPAgvjNVy2SXrxwsyrxWxz7KOWwNk97as7rZIQuBQ0=
Subject key identifier: 97:D7:57:A0:97:25:68:B5:CB:DD:B9:38:59:5F:84:49:55:3B:C4:D8
Authority key identifier: 76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
Certificate issuer: /CN=A91B19F8/serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
Manifest number: 0202
Signing time: Fri 05 Dec 2025 00:40:47 +0000
Manifest this update: Fri 05 Dec 2025 00:40:46 +0000
Manifest next update: Fri 12 Dec 2025 00:40:46 +0000
Files and hashes: 1: dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl (hash: 2IB5Rp5QRNYvZvLYL3DQRm/aJOrt0KTs9aSNN4UeeaA=)
2: 5E5DF206BCA411EDBD39730EC4F9AE02.roa (hash: 285R3oYGxnsmMAJjm1+eYdJApQO5EQQ/gOWcq+lr5pI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B19F8, serialNumber=764BB8478BFF8CC8BFF14E8FB6AADC28ED5E4864
Validity
Not Before: Dec 5 00:40:46 2025 GMT
Not After : Dec 12 00:40:46 2025 GMT
Subject: CN=69322a0f-6c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:8f:c6:e3:3d:d4:4c:24:0a:59:67:4a:21:
ba:93:aa:4f:c7:42:5b:e1:ec:73:e8:0c:f2:1f:e5:
f8:17:f5:13:65:45:09:8c:50:cd:93:fc:05:1b:65:
5f:79:0b:21:3a:ba:49:45:53:c0:6d:bc:25:07:c6:
64:72:fb:d0:36:b3:64:f5:4d:ae:64:71:81:95:43:
d4:0f:dd:f5:a8:e8:9f:e2:d5:63:7e:1a:cb:f8:e8:
ed:8a:0e:d3:72:9f:3b:6e:f9:13:dc:a4:1c:09:d1:
2b:23:61:0b:9d:0c:ce:80:56:c7:df:f3:71:c1:f1:
0a:e3:f7:f0:06:06:d8:13:da:a3:c4:d2:c4:1c:b3:
ff:8e:62:02:1a:6e:73:c1:83:07:df:63:42:67:53:
68:bb:8a:fb:8c:8f:02:e9:a0:1b:93:6c:7f:94:44:
bb:85:1c:52:ea:4e:d6:06:f8:1a:06:02:bf:ef:34:
24:6f:ff:e9:3f:bf:c9:e4:1f:c0:cb:84:85:24:be:
b4:06:79:f3:6f:b0:7b:c0:73:39:9d:5a:38:64:0c:
22:57:84:be:2c:35:5c:59:41:d0:7b:bd:ec:ee:4e:
f2:35:fc:c5:64:c7:bb:be:60:14:7c:5a:f3:6b:73:
77:7f:29:db:a3:d3:2d:0d:7a:21:c8:c8:77:c1:bf:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:57:A0:97:25:68:B5:CB:DD:B9:38:59:5F:84:49:55:3B:C4:D8
X509v3 Authority Key Identifier:
keyid:76:4B:B8:47:8B:FF:8C:C8:BF:F1:4E:8F:B6:AA:DC:28:ED:5E:48:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dku4R4v_jMi_8U6PtqrcKO1eSGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B19F8/CAE6B4CEBCA111EDA370780DC4F9AE02/dku4R4v_jMi_8U6PtqrcKO1eSGQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:ba:97:f7:6e:11:38:be:1c:d7:5a:33:4f:56:16:28:f8:7b:
5a:92:85:13:69:64:96:66:f6:9f:c4:69:65:3c:f3:5b:b6:88:
3c:d2:66:80:cc:c7:7d:dc:3b:2d:34:ba:fe:6b:d9:6a:42:fd:
3e:0d:a5:d6:ad:3e:af:af:77:8d:73:e5:97:4a:be:d0:a2:2c:
33:49:78:8b:ac:c6:2b:ee:d5:42:0c:f4:5f:d2:a4:25:2c:28:
c3:82:69:b4:ff:7d:73:7c:f6:2f:76:82:fe:85:d9:6f:6c:89:
a8:43:bc:17:b4:94:67:c0:c1:0a:89:75:78:96:77:0c:a1:11:
7a:bb:aa:36:ed:8b:98:7c:00:44:9c:16:17:b9:5d:b7:12:89:
12:8f:c6:6a:9e:12:ba:40:95:fa:25:a5:b6:27:13:96:5c:e2:
84:b4:0e:77:07:e3:74:5c:47:2c:8f:0d:6b:69:74:b4:00:35:
00:8a:32:3d:30:21:3c:fd:f7:e2:a9:87:a9:37:24:b8:e2:48:
65:f3:47:28:32:a2:21:87:5d:58:27:4c:66:16:85:8e:1e:ed:
45:5a:1c:c5:85:b8:45:b4:35:b1:41:b0:73:0f:6b:a2:eb:b2:
99:38:cc:bf:a3:93:6a:e4:44:65:5f:07:50:f3:2c:3f:58:4f:
06:fa:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:10 2025 by rpki-client