This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier: tzypkgwIBnl/GsJuZ/xgMRuoZIiFFl/YY0ledCIsmvQ=
Subject key identifier: 00:4E:9A:6E:36:72:40:6F:2F:C2:BA:D6:21:22:73:5E:38:C6:A7:D9
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 0519
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number: 050D
Signing time: Sat 06 Dec 2025 22:23:17 +0000
Manifest this update: Sat 06 Dec 2025 22:23:16 +0000
Manifest next update: Sat 13 Dec 2025 22:23:16 +0000
Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: ZQHrMmMnHbUztgPDuAphkvJcgWqA7Q0+rdTfLHE+zPg=)
2: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=)
3: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: Dec 6 22:23:16 2025 GMT
Not After : Dec 13 22:23:16 2025 GMT
Subject: CN=6934acd4-c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7e:ad:b4:f3:b4:1d:5c:ac:ba:7c:72:33:ca:
51:62:9e:5f:61:ff:32:11:0c:09:b5:a4:c8:98:ee:
85:66:87:c2:ef:a3:ab:22:45:6a:c8:8a:79:77:3d:
d2:d3:57:3d:02:b3:dd:13:1e:ab:2d:f6:af:0f:bd:
09:51:a3:62:77:ac:75:64:2d:d7:2e:47:c6:1f:1e:
c0:ae:95:71:ef:b6:18:03:22:4b:90:2f:26:fb:8a:
cf:c4:4a:66:58:97:00:d8:43:90:f9:83:08:23:04:
ae:1c:3a:43:78:7e:68:15:b8:36:a1:8f:52:59:b2:
05:58:d0:a5:f9:73:52:00:3b:d1:31:b8:dd:10:04:
7f:73:d5:b9:11:23:fc:7e:ff:5f:34:af:d2:d9:b9:
dc:b3:32:40:08:06:d4:2e:d3:34:72:52:72:79:2f:
a2:4a:d9:13:94:18:5e:c4:63:69:c1:88:75:66:45:
b3:ae:8f:35:1e:85:e0:f9:70:a8:5b:28:32:bb:8f:
8d:fe:59:19:f2:9e:2a:0f:6f:36:71:3a:9b:e0:62:
84:e9:73:02:32:a8:be:01:a7:b7:13:94:20:de:68:
04:90:e5:f6:33:68:38:7d:be:46:f0:f7:16:8d:cf:
cc:a5:2d:a5:ff:24:f3:2b:a9:08:e9:68:a1:14:d3:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4E:9A:6E:36:72:40:6F:2F:C2:BA:D6:21:22:73:5E:38:C6:A7:D9
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:fe:41:16:1c:3e:f2:26:a2:7d:ec:74:61:94:a7:54:17:
61:e4:e1:77:ff:c1:17:86:7f:42:0b:33:98:d9:b1:34:aa:e7:
d0:c1:2c:6a:7d:e7:fe:49:81:a0:1c:52:dd:df:52:0b:7e:2c:
bf:77:53:f1:8a:c2:55:4c:79:2c:75:b3:76:24:8d:b7:eb:0f:
04:51:1a:e8:fc:a1:3f:03:9f:db:ae:a9:35:d4:8b:c7:e1:c8:
4c:c9:38:e5:51:08:2a:af:34:18:6e:fe:d5:29:8d:9e:27:f1:
28:ca:e8:f1:e5:b4:72:8c:f3:52:04:71:21:27:08:04:bc:e6:
27:61:c7:0e:5f:71:27:c0:8b:2c:8b:87:66:36:ce:04:75:50:
ee:68:47:e1:58:1f:2a:1b:c9:10:91:f6:a5:bd:fd:9a:19:15:
3f:1c:ae:41:1e:d0:d4:71:85:54:8f:19:b7:ad:ff:19:05:e5:
c2:e2:75:e9:9c:eb:e3:69:52:78:0e:69:f0:f4:3d:e3:13:da:
b8:8e:b3:57:6f:70:de:a5:e8:be:27:10:d4:51:bc:16:5d:b3:
d7:06:eb:25:28:a2:3d:78:fd:db:b2:dc:37:aa:2b:95:3e:86:
58:a6:54:72:89:58:71:66:07:3a:32:61:7c:22:2b:3d:b0:61:
ec:d0:ac:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjFEQ0YxMTAvBgNVBAUTKDcwNEJGRjRFQ0FBOURDOEE4QjcyMDkyNjRDNjA3REI1
RjIyRjI0ODIwHhcNMjUxMjA2MjIyMzE2WhcNMjUxMjEzMjIyMzE2WjAYMRYwFAYD
VQQDEw02OTM0YWNkNC1jNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5H6ttPO0HVysunxyM8pRYp5fYf8yEQwJtaTImO6FZofC76OrIkVqyIp5dz3S
01c9ArPdEx6rLfavD70JUaNid6x1ZC3XLkfGHx7ArpVx77YYAyJLkC8m+4rPxEpm
WJcA2EOQ+YMIIwSuHDpDeH5oFbg2oY9SWbIFWNCl+XNSADvRMbjdEAR/c9W5ESP8
fv9fNK/S2bncszJACAbULtM0clJyeS+iStkTlBhexGNpwYh1ZkWzro81HoXg+XCo
Wygyu4+N/lkZ8p4qD282cTqb4GKE6XMCMqi+Aae3E5Qg3mgEkOX2M2g4fb5G8PcW
jc/MpS2l/yTzK6kI6WihFNN1gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABOmm42
ckBvL8K61iEic144xqfZMB8GA1UdIwQYMBaAFHBL/07KqdyKi3IJJkxgfbXyLySC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMURDRi8zNjk3OEE3QzMw
QkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJcUxjZ2ttVEdCOXRmSXZK
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NFdl9Uc3FwM0lxTGNna21UR0I5dGZJdkpJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MURDRi8zNjk3OEE3QzMwQkMxMUVDQTMwM0VGODZDNEY5QUUwMi9jRXZfVHNxcDNJ
cUxjZ2ttVEdCOXRmSXZKSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAX4/5BFhw+8iaifex0YZSnVBdh5OF3/8EXhn9CCzOY2bE0qufQwSxq
fef+SYGgHFLd31ILfiy/d1PxisJVTHksdbN2JI236w8EURro/KE/A5/brqk11IvH
4chMyTjlUQgqrzQYbv7VKY2eJ/Eoyujx5bRyjPNSBHEhJwgEvOYnYccOX3EnwIss
i4dmNs4EdVDuaEfhWB8qG8kQkfalvf2aGRU/HK5BHtDUcYVUjxm3rf8ZBeXC4nXp
nOvjaVJ4Dmnw9D3jE9q4jrNXb3Depei+JxDUUbwWXbPXBuslKKI9eP3bstw3qiuV
PoZYplRyiVhxZgc6MmF8Iis9sGHs0Kyd
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:20:26 2025 by rpki-client