This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
File: 7mC-_JS8D3S9nREVbhW6I_fr5ag.mft (raw, json)
Hash identifier: TEDYJBhKsp+MasZ8+3HWCwTLXa5nLYQJECKDLQzcrrM=
Subject key identifier: D8:F4:EB:69:0E:6D:B0:A9:5C:EE:6F:CC:84:4A:19:CA:05:AA:2B:96
Authority key identifier: EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
Certificate issuer: /CN=A91B6DD0/serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
Manifest number: 0A
Signing time: Fri 05 Dec 2025 05:49:28 +0000
Manifest this update: Fri 05 Dec 2025 05:49:28 +0000
Manifest next update: Fri 12 Dec 2025 05:49:28 +0000
Files and hashes: 1: 7mC-_JS8D3S9nREVbhW6I_fr5ag.crl (hash: KTbGTS6Qht9HqfbDH1ndJI409jWXAhXAeMSPjrFZqdQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6DD0, serialNumber=EE60BEFC94BC0F74BD9D11156E15BA23F7EBE5A8
Validity
Not Before: Dec 5 05:49:28 2025 GMT
Not After : Dec 12 05:49:28 2025 GMT
Subject: CN=69327268-c4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5d:39:fe:2f:32:a7:de:7e:43:4a:39:3a:58:
06:f0:88:91:59:7d:49:d9:12:f0:f0:ba:31:fb:54:
3e:82:13:f6:5c:65:63:06:72:d1:c0:2c:15:15:b3:
b6:f5:36:6c:23:23:f1:c0:78:5d:16:b8:d1:aa:b6:
01:6d:0e:1a:ee:56:57:84:45:fe:2b:11:61:54:f1:
99:8e:19:54:6d:16:b6:86:ce:e2:16:4b:ec:7e:51:
d8:9b:4d:0e:3f:89:0a:39:6c:71:5c:60:4f:84:e0:
5b:31:4c:2b:ba:5c:19:80:27:6b:2e:9f:11:23:30:
fa:6c:af:2c:fe:14:01:20:6d:ae:27:e9:d5:49:38:
18:2d:20:f7:c1:c0:50:25:f9:ed:d1:66:86:41:f1:
9b:d9:11:d6:0a:19:2b:8c:9a:c7:e6:9d:ed:4c:9a:
24:e6:66:86:f3:cc:7a:b4:91:9e:37:bc:fb:30:06:
63:aa:c8:c3:17:b2:71:16:49:36:7e:d0:3c:f9:5f:
f2:f4:b8:28:11:e6:b4:5c:c3:22:8b:a7:44:65:ca:
16:03:8b:e9:4b:07:c7:76:da:da:f6:13:52:97:49:
a7:d3:b0:7d:d5:8d:96:14:b0:9d:6d:7f:30:8c:c4:
cf:6b:a7:26:12:fc:7a:6d:47:b2:f8:9e:16:2a:09:
20:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:EB:69:0E:6D:B0:A9:5C:EE:6F:CC:84:4A:19:CA:05:AA:2B:96
X509v3 Authority Key Identifier:
keyid:EE:60:BE:FC:94:BC:0F:74:BD:9D:11:15:6E:15:BA:23:F7:EB:E5:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7mC-_JS8D3S9nREVbhW6I_fr5ag.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6DD0/CA750ACAC47011F0BD5A6239C4F9AE02/7mC-_JS8D3S9nREVbhW6I_fr5ag.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:a0:72:20:a1:42:d8:b9:8e:8b:b0:7d:37:7e:ce:21:21:
2f:01:e6:20:21:fc:71:d1:53:a5:23:8b:e5:b3:eb:6f:ba:19:
12:46:f6:2e:52:c3:86:6a:b9:25:1e:f2:8d:23:42:3b:7a:16:
58:86:fc:c2:80:d7:d8:bf:94:c9:34:78:34:f5:79:4b:6f:bf:
92:4e:11:1b:70:91:dc:c5:af:33:ee:3b:97:b4:e1:e4:a3:a9:
35:4b:f8:b8:3c:a5:9d:82:46:18:47:81:e8:ae:32:02:03:8f:
e4:51:48:64:4e:2f:3c:ca:0a:80:f0:fe:be:ce:6f:66:c5:a0:
49:2a:ce:d8:d3:79:d6:f8:aa:cd:c4:83:91:c4:3c:bd:49:8d:
67:82:b5:7d:0c:16:24:0f:37:3f:d7:50:29:d9:bc:b2:c1:e0:
02:2b:47:bb:85:65:d2:b1:44:91:e0:ba:ca:57:ce:d1:ac:7a:
6b:5c:9a:62:83:8f:31:94:4d:02:9f:fd:6e:64:84:04:07:e3:
e8:c0:fd:c0:a8:7a:35:90:90:f0:92:d9:1b:ae:05:05:df:d7:
42:f9:29:24:13:9d:53:78:2b:16:22:19:58:eb:3e:ab:b0:06:
71:65:e7:cc:d8:92:79:ec:58:3d:a8:41:ea:1a:1d:34:93:59:
e6:5b:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:39:35 2025 by rpki-client