This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File: S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier: L2sk1hi2M0Yjg3Bbi2NJuYZUIcL4s6SRzKSlf1wXAZI=
Subject key identifier: 3A:1D:8A:F5:02:EF:94:A6:37:18:36:00:6A:0E:6C:A4:0D:22:49:61
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer: /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial: 0228
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number: 0225
Signing time: Fri 05 Dec 2025 00:24:45 +0000
Manifest this update: Fri 05 Dec 2025 00:24:44 +0000
Manifest next update: Fri 12 Dec 2025 00:24:44 +0000
Files and hashes: 1: S630I4efFU256siNFgtOEW9mzak.crl (hash: VvPTIDWol7NZMgFGaVXQgLmMLlqPPEzJsDuWf+I0iUc=)
2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: aGKXoopb0arb0ntbaAeX9hZshlxruOuTWjBQoFMqiCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Validity
Not Before: Dec 5 00:24:44 2025 GMT
Not After : Dec 12 00:24:44 2025 GMT
Subject: CN=6932264c-37a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:ab:07:4b:13:66:5c:04:cf:2b:44:04:4c:
d1:38:84:ec:01:da:8f:66:4d:d4:bc:ec:28:eb:3a:
85:2e:c3:fa:23:e2:59:37:7a:a4:ce:60:c7:8f:b7:
fc:6a:40:dd:5f:af:b8:05:5b:fe:f8:c8:ad:7b:47:
35:80:30:06:81:f0:ae:7a:f3:41:f9:5e:cc:9c:5e:
0f:88:80:4b:4f:de:ea:e2:6a:fe:bd:66:15:64:5d:
9b:e7:bf:10:0d:cc:31:ce:48:43:e9:b3:52:bb:78:
88:90:0f:4e:f3:0a:a7:ea:85:45:27:bb:d2:d9:0f:
16:b9:bf:57:c1:a9:70:03:c9:f7:bf:3c:25:4b:ce:
09:91:f3:24:23:71:19:fb:82:5a:63:ab:40:e6:38:
61:e0:62:29:6f:53:dc:3b:29:6a:0b:45:60:0b:de:
51:e5:08:1f:47:d6:e3:2a:ba:34:6b:d9:24:bf:19:
0c:32:c9:4f:00:8f:f9:ab:c2:56:5b:91:4e:dd:e4:
c2:54:6e:83:d3:3e:fe:a7:fb:d2:f0:58:39:5b:19:
ba:39:f6:d8:29:ae:32:7b:9e:09:92:8d:cd:88:91:
ab:ea:0b:97:a5:16:5a:e6:eb:20:6d:ca:b9:d6:fc:
75:1c:44:e7:c1:06:25:49:29:e0:30:cf:8a:a2:b7:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1D:8A:F5:02:EF:94:A6:37:18:36:00:6A:0E:6C:A4:0D:22:49:61
X509v3 Authority Key Identifier:
keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:c6:e8:8c:0c:fe:bc:80:24:77:de:d4:16:01:71:8c:cb:bf:
25:be:5b:79:e0:fb:b6:a7:59:e5:d2:8e:b4:32:f9:9a:cc:a9:
9a:5e:bf:84:aa:03:43:6a:b9:86:8c:14:e4:7a:2a:47:a2:74:
12:af:8e:80:a6:8f:e5:0b:75:d5:19:6c:8b:71:10:d3:5a:fc:
a6:ed:ba:c1:df:26:fc:b3:c2:66:bf:31:f4:55:c6:7b:4a:63:
6d:cd:fa:ae:ad:c1:95:75:35:2a:56:f5:3a:25:83:8e:c1:df:
f9:74:70:41:d8:c9:70:3a:cf:38:4b:a1:0b:68:5c:bf:7e:0c:
f1:ac:3a:62:63:23:f8:45:d3:37:d3:8d:99:6f:31:db:ea:5e:
89:2b:16:76:5d:4d:8c:35:c4:79:d6:cd:e1:b6:31:26:b9:4d:
d5:18:92:91:14:4b:a3:65:85:71:4a:a5:27:0b:7b:97:71:48:
39:46:8d:1a:3a:26:93:1a:23:e6:1c:af:4d:76:0c:78:c2:dd:
3d:6e:c8:50:12:a3:17:7d:46:b6:f3:9c:67:45:28:72:13:49:
08:0e:59:b2:7d:cf:c2:34:b2:c7:52:ea:eb:74:d0:b6:ed:9e:
22:63:05:62:67:48:55:6c:a9:cd:5a:82:df:f3:5c:7d:98:8c:
23:a4:f1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:23:27 2025 by rpki-client