This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json)
Hash identifier: XDz/asnO5PZwr/r7YTklYCl1VVeJr7HDD+zW/BrQHwk=
Subject key identifier: 24:4F:CF:B3:30:34:06:34:D0:25:83:00:35:92:4D:06:68:4D:4D:0A
Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Certificate serial: 0168
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
Manifest number: 0164
Signing time: Fri 05 Dec 2025 02:10:16 +0000
Manifest this update: Fri 05 Dec 2025 02:10:16 +0000
Manifest next update: Fri 12 Dec 2025 02:10:16 +0000
Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: oPegD+kriyWmdHzRBNxoYs9cGheFQ+9sap2ZYgqOKus=)
2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 360 (0x168)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A
Validity
Not Before: Dec 5 02:10:16 2025 GMT
Not After : Dec 12 02:10:16 2025 GMT
Subject: CN=69323f08-1481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:ab:ca:df:7c:9e:b2:c7:54:7c:1e:31:82:
2d:cb:92:19:5a:b8:3a:6a:70:c4:9a:d0:ff:6c:59:
54:ad:cd:b8:c3:6d:2c:17:cb:c8:5a:cb:13:f4:44:
d2:76:4e:1e:33:90:14:a5:12:b4:06:46:e4:1c:ae:
93:0a:f6:6d:a2:b7:dd:d7:b0:87:73:c0:ec:eb:0a:
68:d9:d1:4e:f3:5a:0d:64:70:7e:fd:96:83:26:91:
56:24:e4:a0:37:3f:81:19:81:c7:81:5f:4d:67:40:
48:e1:cb:9b:56:97:ce:75:71:89:8e:59:0a:ae:d4:
67:c2:10:86:92:62:2c:6e:9a:c7:95:c2:00:0b:3c:
d5:5b:9a:be:0f:33:ca:13:ea:8d:e2:ca:cd:40:d5:
d4:da:9f:87:cc:81:d5:2a:28:7c:50:36:22:07:08:
c7:29:d4:3c:79:4b:32:0b:8a:d9:9a:36:ef:c8:54:
ce:c8:8a:9a:9a:96:ba:a1:29:44:18:94:d3:3c:42:
0d:3c:df:b8:56:8e:f7:03:36:a3:3f:fe:b6:25:9e:
2c:fc:94:68:0b:96:0a:4d:8f:ad:be:fa:87:be:25:
60:2e:54:be:e8:90:26:a4:63:a3:ae:f7:97:0e:2c:
b0:8b:1c:a7:6c:d2:7c:63:26:89:53:a4:d3:20:31:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4F:CF:B3:30:34:06:34:D0:25:83:00:35:92:4D:06:68:4D:4D:0A
X509v3 Authority Key Identifier:
keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b6:ff:dd:4a:64:4c:69:c4:17:d4:88:10:ff:bb:b7:bd:94:
78:25:e0:73:92:c0:22:a2:47:2e:90:c9:02:6c:4d:10:7b:40:
6e:09:cd:f3:88:bf:07:fa:41:4a:dd:94:46:de:36:e6:aa:41:
f6:b5:48:c5:53:7a:2a:25:8c:61:38:0c:5e:a0:74:77:db:2d:
4c:1a:be:12:44:e5:50:c5:11:ca:f0:b9:84:78:56:89:4a:3a:
5d:a3:c7:56:0b:d7:1b:5b:24:ae:7e:8f:cc:eb:64:5a:71:ba:
35:6c:3f:77:38:72:98:51:5a:50:72:c3:d2:26:f8:af:9c:cf:
02:48:fc:54:cd:2e:be:9a:48:e4:b9:63:8f:d6:fd:e3:c9:42:
6d:0e:2e:08:df:f8:55:e9:84:ad:59:8a:0b:6c:a7:e5:7c:01:
0a:a9:7d:bf:45:ce:87:e8:4d:14:71:02:48:ab:16:72:d0:6a:
23:fa:83:02:1b:5d:8d:ab:94:4f:3e:1e:f3:e5:07:a3:39:56:
7c:25:06:65:b5:51:27:cf:c3:88:e0:5b:fa:80:65:f0:53:0b:
5e:3d:0f:b4:26:97:f3:41:fe:41:b5:ba:e7:ee:50:97:7f:9f:
8a:61:a9:f0:69:d5:78:64:e6:f8:a0:11:1c:65:49:9d:53:65:
3c:27:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:01 2025 by rpki-client