This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json)
Hash identifier: zXXlQut2Tx+zsVjn3RgSd85fI2Enc/mlE/s32Itb73g=
Subject key identifier: B4:C9:9B:BC:3A:4C:95:0C:F5:04:19:09:7D:A3:38:03:2D:93:F4:27
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial: 06D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
Manifest number: 06CC
Signing time: Thu 04 Dec 2025 20:56:38 +0000
Manifest this update: Thu 04 Dec 2025 20:56:38 +0000
Manifest next update: Thu 11 Dec 2025 20:56:38 +0000
Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: 9jvRL+dJtYA1rNH0yrTgPkQK2MWAUdd7wEONUZXneHU=)
2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1746 (0x6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Validity
Not Before: Dec 4 20:56:38 2025 GMT
Not After : Dec 11 20:56:38 2025 GMT
Subject: CN=6931f586-8b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:fb:cb:49:fc:7b:3e:a9:c2:35:5c:8a:13:
0f:69:5e:ca:91:89:dd:77:3f:89:4d:9b:47:3e:a9:
60:65:b4:ab:f7:cb:35:4c:8c:bf:3d:d1:09:1c:c7:
c6:02:4d:c9:11:85:a4:e1:c3:0b:69:54:fb:60:e6:
20:6e:d9:3f:a7:e3:ce:d5:ec:49:f6:f2:85:4f:19:
b1:d5:10:ac:1d:e0:ec:7f:4e:51:47:a0:ef:bf:73:
30:7a:dc:9d:2c:33:2f:21:28:db:e9:d5:f5:a7:f1:
c2:f7:9c:c7:39:df:6c:8c:ca:fb:e7:16:72:55:39:
d9:fc:ad:43:9f:46:68:4e:5c:43:67:7b:8c:32:cb:
43:d1:19:a3:8e:e7:52:0a:ea:18:1c:da:e8:73:78:
21:ab:0e:6d:c4:58:c6:a3:48:96:c1:e0:0c:42:cc:
05:2c:fa:fe:25:d3:8f:09:39:83:b8:25:8c:d0:0d:
dd:c8:b9:31:b7:c9:e0:ed:72:4e:0c:5d:58:6d:34:
8c:31:98:df:ab:28:e6:96:ac:db:68:68:53:7c:17:
dc:e5:cc:ef:5c:7c:e7:a4:e0:a0:e6:9a:0c:62:bc:
98:a6:ca:50:b5:cc:d1:46:74:e5:98:73:db:76:93:
68:27:ee:d0:64:39:cf:5b:f9:ea:b9:cc:a6:81:0a:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:9B:BC:3A:4C:95:0C:F5:04:19:09:7D:A3:38:03:2D:93:F4:27
X509v3 Authority Key Identifier:
keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a9:94:3a:87:29:28:5c:28:b9:1b:e2:24:21:c3:96:2c:2e:
b1:29:34:7d:dc:b4:4d:ca:29:13:98:55:a8:4d:eb:f9:dd:05:
ef:63:6a:71:46:79:8e:69:0d:e3:1c:88:66:ab:dd:11:f0:b1:
a6:1a:28:98:46:e3:70:67:2c:6f:77:19:2b:8a:b2:4b:f6:c9:
47:af:c9:a1:d4:ba:68:46:04:03:aa:ba:60:bb:f1:06:75:98:
8e:5c:1a:fa:80:5e:0f:10:c2:dc:66:e0:76:73:e8:f0:de:51:
fb:7d:48:aa:fe:ed:fa:8a:f3:23:1e:02:f7:7a:15:50:e2:e3:
b5:c1:7c:18:d8:d1:dd:f8:a1:0e:13:04:8c:74:b9:2c:d8:46:
8c:c1:37:3b:ea:36:ea:90:d0:3d:37:87:db:6a:06:ce:06:74:
81:9a:c6:1e:3a:53:05:da:3e:6b:de:3c:c9:05:59:42:43:a4:
f3:26:30:ec:d2:a8:4f:04:fb:cc:d4:a9:e3:b3:48:7b:55:51:
d9:60:e5:bf:ba:e1:9f:aa:34:48:fe:1f:b4:c4:9e:f2:25:cc:
d2:42:10:93:a8:86:d2:8c:60:23:2b:c5:75:c7:7c:11:f8:2b:
17:c2:37:42:41:0c:59:b5:73:da:e6:9e:ff:a3:f5:8f:b8:0c:
c8:d7:e3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:07 2025 by rpki-client