This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier: RCjquTf3Ccf8kqFZrshZdmgXwhWjxx87o7QUp4v8gnE=
Subject key identifier: DD:2D:D3:A7:98:4F:64:37:11:51:52:FF:ED:F5:C7:6C:53:7E:C2:70
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 09C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number: 0958
Signing time: Thu 04 Dec 2025 19:33:52 +0000
Manifest this update: Thu 04 Dec 2025 19:33:52 +0000
Manifest next update: Thu 11 Dec 2025 19:33:52 +0000
Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: l/FYMW4ScoRw+x89I9UJyJlLuB4d8Gm1AXpfgo0mL1c=)
2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: 6eLBLTiRLG59b19Vh6VakQSbL4yifX/0CdBZxWB4WEY=)
3: 501941C093F211EEA029A113C4F9AE02.roa (hash: FhESrn/DCqUnNSrnrcCxTem1wxJCB6TNgEsA8vGhFD0=)
4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: /znaKV3KjWiiYiywi65esGpUip1B0gcKXgL7UimYW5U=)
5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: lwV/ynteCUHJi+p3z2mrWfc4T5PCrXOSxxmLmNk4dP0=)
6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: Y7HIfK+dgei476aRla7phi/541mDTNFxZ1eh4K1sDYk=)
7: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: xCyhd7BrMRSo37r2kc8C1tCVJGoR2T+Kqf1BZgUiJL0=)
8: 9672E862793811EE92C54834C4F9AE02.roa (hash: UGwpdFjyj5op9VWtjdDebDyJLyb7++gFQLq7ibC5Zo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502 (0x9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: Dec 4 19:33:52 2025 GMT
Not After : Dec 11 19:33:52 2025 GMT
Subject: CN=6931e220-37b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:9c:4c:1d:64:0c:d7:3c:00:6f:91:3e:b4:
9a:0a:42:b2:e5:66:84:71:19:ea:6d:a4:5c:fe:27:
a5:65:f8:75:b5:c1:20:a2:1b:39:ed:03:90:5b:9c:
b0:9f:aa:6b:35:d8:a9:a1:ab:d2:e9:fd:19:46:2a:
2d:53:e4:2a:c0:a8:75:86:30:7c:52:09:b8:cb:45:
02:63:9c:b8:ed:6e:ed:1f:8d:68:e0:46:a5:01:f4:
91:bc:fd:19:32:ba:16:55:20:ed:f6:99:1a:bb:99:
32:52:8c:26:89:e7:34:07:43:e4:e1:79:d3:ef:37:
16:8b:e3:38:48:c7:0c:fb:3c:39:97:c2:4b:b3:ab:
45:0a:b1:c2:3e:1d:44:69:88:25:ba:1e:21:02:e1:
1f:61:b7:fb:e7:ba:72:38:ef:2c:0b:21:72:1a:de:
08:53:c4:aa:b9:8f:85:df:9c:c0:3e:49:78:bb:2f:
9e:75:c7:ab:ea:f5:b8:a6:b0:a5:9a:ae:50:74:01:
dd:c7:2e:fa:12:bd:53:aa:1d:f1:34:84:a0:f2:9b:
26:96:77:57:2e:0e:f9:55:72:8c:58:a8:ff:39:f8:
aa:34:ab:5f:eb:0b:b1:09:6b:a9:cd:c2:6a:71:76:
e9:12:ba:6c:76:c9:68:5a:5e:02:30:2f:c4:49:70:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:D3:A7:98:4F:64:37:11:51:52:FF:ED:F5:C7:6C:53:7E:C2:70
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:1c:0a:ca:b0:5e:39:83:a9:e8:ab:14:3e:1a:c0:20:b7:a1:
f0:83:06:c3:7c:a6:fb:65:b2:94:96:7c:24:59:df:d1:c0:4c:
bf:59:da:2b:0c:8b:8c:da:4c:30:ae:0b:43:05:52:5c:af:50:
02:a1:c4:0e:16:08:27:b5:83:9a:cc:7b:c7:5c:82:31:1b:be:
32:d1:6b:ba:c9:db:03:59:be:99:d2:da:e5:07:4d:f0:7e:43:
0a:16:b8:f9:83:88:17:22:3c:9d:91:4d:c9:25:ee:00:72:11:
77:95:a0:5f:d4:ef:3d:51:d0:18:2e:22:73:3c:4c:34:bb:70:
2e:e2:24:f5:73:1d:41:13:14:8d:68:6b:20:bb:a1:48:77:c6:
2f:74:f4:7a:06:1f:ba:87:b0:65:57:c0:d9:85:87:96:1d:e0:
aa:81:c8:52:fa:51:41:56:41:93:43:70:d4:34:b7:5e:fd:f0:
ab:5f:6a:4c:77:3a:b3:31:e7:cc:73:cf:fc:0b:c0:88:17:c4:
b6:9e:3e:38:74:48:8d:ea:49:8e:4f:56:9f:30:93:0a:90:55:
a3:3f:c9:6d:87:f2:3f:0b:15:e0:5d:05:db:c5:cf:8e:f2:37:
38:22:61:09:28:24:c1:31:08:4c:71:b4:1c:75:c6:ba:9e:5a:
8b:81:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:47 2025 by rpki-client