This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
File: dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json)
Hash identifier: jS82TBbJC6FQzJ9zAlVrI8PUdNXfQMEV86L0TGTaCfg=
Subject key identifier: 71:99:43:32:B7:67:AB:54:EF:E6:88:7E:91:C5:45:36:60:5D:5D:91
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Certificate issuer: /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial: 06E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
Manifest number: 06BE
Signing time: Thu 04 Dec 2025 21:10:02 +0000
Manifest this update: Thu 04 Dec 2025 21:10:01 +0000
Manifest next update: Thu 11 Dec 2025 21:10:01 +0000
Files and hashes: 1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: SxoG6GWxotUh2XO9TvRThV3XkYD1ple1CwFTF+j+dTg=)
2: 4FE5F30290D411F0B8A56049C4F9AE02.roa (hash: tijl1a/Co2BtT46BKoUW7AiBvHenjrU1pgwCiF84Uq0=)
3: 3CEDCE18900D11F0BD65E474C4F9AE02.roa (hash: UlU8FGyIe5T0I0XXCW9XvGGScSrSWkYOAvIkrPLe+o0=)
4: 8EFF79AA9C9B11F09188945AC4F9AE02.roa (hash: vjiqIdfdvKZRB8r/txhRVqd+ixYcog2/ptWnbBhNw5A=)
5: 8158A3A6943211F0843A1075C4F9AE02.roa (hash: 0lN/Ng3NrJ/5kCvRcvb8gFvnW3r3YxhFiq3R/rO55bM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763 (0x6e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Validity
Not Before: Dec 4 21:10:01 2025 GMT
Not After : Dec 11 21:10:01 2025 GMT
Subject: CN=6931f8aa-3a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:06:34:49:b3:e1:8d:14:16:80:3e:4a:ae:38:
c6:f0:4b:89:af:45:56:64:ff:d1:39:c9:64:0c:73:
13:34:5c:ab:0c:91:e4:90:c9:22:1b:19:c8:35:97:
c0:03:d1:51:b4:f8:93:14:df:60:c6:bc:20:67:38:
18:03:7e:27:ad:45:40:cd:da:bd:cc:f6:c9:b8:fa:
9f:56:39:17:7e:bf:9d:8d:15:ab:b2:6b:74:93:35:
92:db:69:6d:69:ec:c4:5a:d9:b4:b8:01:78:67:1f:
e8:ca:60:c8:1c:37:9d:94:bc:b4:4e:61:f1:1b:7c:
c9:86:b3:d8:3d:c9:87:50:77:41:d6:32:3d:88:2c:
23:23:5e:38:05:c2:e9:75:06:27:9f:64:28:58:12:
43:a5:6c:73:b2:f6:80:d3:9c:d7:e3:30:ad:a0:3e:
0a:5f:b0:d5:e5:fb:e7:98:93:5a:ac:5c:42:ce:24:
a6:df:d8:22:46:8c:f3:28:9d:cc:e6:39:b3:a2:bf:
20:f3:2e:74:7b:6e:bd:08:59:21:f9:28:0b:d9:9b:
b6:f7:c3:7d:93:42:3d:67:94:79:71:f6:72:77:3d:
f4:14:ec:d3:12:bb:4d:eb:cf:30:13:46:f2:9e:e4:
7c:6b:51:ef:8f:6f:9d:6e:be:71:7b:4d:1a:a5:fc:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:99:43:32:B7:67:AB:54:EF:E6:88:7E:91:C5:45:36:60:5D:5D:91
X509v3 Authority Key Identifier:
keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:60:49:ed:49:0e:62:0b:d8:cb:17:b6:4c:04:3a:e1:02:21:
9a:26:b9:cc:b0:e8:77:e7:b2:ff:35:eb:b2:ab:d7:9c:58:5c:
0f:ae:fa:6c:78:6b:be:77:5b:e2:97:e8:eb:e2:19:ec:b9:a5:
1d:21:c5:b4:ef:c1:c7:9f:ae:20:28:f0:66:56:ef:44:16:51:
99:7a:00:6a:ab:ea:27:b5:2f:a7:c9:02:8d:47:cc:52:9f:ac:
68:57:b5:19:47:87:e3:e1:77:bb:6d:a9:be:20:09:e6:da:98:
98:1a:46:9f:a8:82:ea:cc:cd:5f:b4:62:dc:c6:82:03:09:34:
97:4d:69:18:40:93:be:93:c1:2a:0b:8d:e3:1c:35:e7:ba:b1:
6d:18:81:dd:3d:b4:f5:80:fa:63:f0:50:6a:84:62:85:9b:2e:
79:8e:4d:06:50:ec:5f:13:ee:a9:17:b8:88:a5:7d:b9:bf:e6:
a6:39:03:7d:95:0a:7c:64:2e:13:b8:c6:32:a4:ce:fe:38:d3:
33:d9:38:dd:af:3d:08:7b:9a:88:ce:3c:92:9e:0e:51:05:bb:
dd:1a:e7:14:3a:f3:c6:dc:30:cb:53:fa:f7:0e:5c:40:69:57:
0d:e4:1f:96:5b:7a:4f:a0:01:f2:55:97:29:52:b8:a7:fc:49:
87:11:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:53 2025 by rpki-client