This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File: 7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier: PXEjAvhuo1OcuW2vpjokbOuO87/1rn6X6YvU6XPzce4=
Subject key identifier: 50:D1:DB:10:1D:05:31:CD:E9:45:39:21:65:D2:F6:E4:C7:8A:6A:2B
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer: /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial: 34E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number: 4081
Signing time: Sat 06 Dec 2025 14:43:42 +0000
Manifest this update: Sat 06 Dec 2025 14:43:42 +0000
Manifest next update: Sat 13 Dec 2025 14:43:42 +0000
Files and hashes: 1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: MFYlM6eXuEz+8azZr4C29jJ05+l38+s7oIUACK275x4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:43:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13540 (0x34e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Validity
Not Before: Dec 6 14:43:42 2025 GMT
Not After : Dec 13 14:43:42 2025 GMT
Subject: CN=6934411e-7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:10:ba:8d:c7:5a:74:8f:ed:4b:46:c0:c9:
a6:71:49:ed:c7:31:7c:79:6d:93:52:32:c1:27:f0:
0a:a8:a9:45:52:1c:d6:e2:ed:07:4c:61:8e:9f:2d:
7d:c6:bd:1f:bc:cf:32:43:08:d6:62:87:15:fd:16:
99:e9:e8:86:ba:5b:67:6f:6b:db:98:a8:ed:d4:14:
4f:c5:b6:9f:cd:cf:20:45:40:25:5c:22:14:41:74:
12:c1:d5:33:2f:ad:f0:43:57:5c:8b:eb:e7:bc:ca:
9b:94:24:98:83:c1:3c:7b:d4:10:10:d8:ab:eb:66:
11:1e:89:e8:43:fc:f7:f5:15:75:30:20:d1:45:27:
d7:81:08:16:c9:9a:fc:19:3a:fc:bb:ae:e5:13:27:
9f:90:5c:42:6a:e3:4b:11:8e:6c:e8:11:af:ff:d8:
bf:9d:bf:ca:60:52:7d:1b:70:63:f3:6d:96:a9:ee:
1b:0e:e4:ab:bc:c6:aa:03:6a:a7:c6:56:23:7d:81:
74:af:9b:95:a5:56:fb:ec:47:5b:1a:bd:2f:49:66:
12:0f:95:6e:33:5d:b9:01:06:f9:c0:ae:47:3d:3b:
90:50:d2:95:e1:92:c5:47:7d:41:26:6e:37:bb:4d:
a6:ce:ed:f3:27:3a:ca:d1:67:62:c0:f6:29:e2:43:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D1:DB:10:1D:05:31:CD:E9:45:39:21:65:D2:F6:E4:C7:8A:6A:2B
X509v3 Authority Key Identifier:
keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:65:d7:f2:4e:74:fe:9c:18:b5:4d:46:37:f0:88:d0:02:b0:
1e:5e:7e:2e:6d:46:70:c6:32:5f:87:e0:fd:40:09:d1:76:40:
c8:74:f8:38:49:c7:06:24:29:fa:8c:85:f3:86:df:a5:46:fd:
b3:ce:2a:bd:58:10:3a:4e:a6:59:74:f7:2d:5f:65:f6:45:33:
bd:29:a6:c8:84:9b:bf:95:11:8d:23:1c:02:da:33:36:29:97:
12:a7:e0:3d:79:75:b5:5a:f7:37:0f:b1:b6:7f:18:eb:4e:b8:
10:5a:f8:9b:16:10:9b:d5:d1:ea:db:ef:f8:7e:ec:21:7b:2e:
14:dd:f7:33:7f:de:b0:76:d2:bf:f9:ca:8f:2c:ee:df:1f:a8:
88:10:c6:6a:3b:79:27:0b:79:76:0e:92:1c:69:96:26:1c:f7:
63:22:0b:de:da:ab:74:8e:01:11:2e:2d:47:e8:01:62:53:1a:
c4:cf:c7:00:e2:de:83:4a:bc:2f:10:36:19:73:cc:08:fe:1a:
29:ba:f1:4c:af:5f:37:6b:8f:48:d2:a0:c5:2f:4c:6a:9c:b4:
a0:9c:42:87:6e:13:89:10:92:42:29:3b:7f:b9:b9:8d:35:03:
eb:1c:1d:08:b2:dd:84:2d:07:e1:4d:5e:0b:31:94:e3:02:ba:
6f:16:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:44:42 2025 by rpki-client