This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier: Wqo5o37GMWuX3MlMGlpjcyc3QO/ZRUxTP6hre7rGmHE=
Subject key identifier: CF:21:F0:23:91:EB:A3:98:29:9D:AF:C4:81:E4:3A:84:7D:24:6C:0C
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial: ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number: EA
Signing time: Fri 05 Dec 2025 03:26:03 +0000
Manifest this update: Fri 05 Dec 2025 03:26:02 +0000
Manifest next update: Fri 12 Dec 2025 03:26:02 +0000
Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: jltQ7nKs9Cd4CP+pqZhMVTkUwUlyqqQFzGzhE5hEgog=)
2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Validity
Not Before: Dec 5 03:26:02 2025 GMT
Not After : Dec 12 03:26:02 2025 GMT
Subject: CN=693250ca-a407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:40:1a:b3:13:af:ab:0b:c7:ea:e8:e9:d3:86:
bc:e1:6c:76:da:25:35:cb:f6:a5:94:2d:20:9b:81:
43:ca:a1:75:f7:8b:83:f8:35:6e:16:3e:1e:46:c2:
6b:d1:11:61:95:7a:ad:5a:6e:da:96:10:88:d2:83:
33:9f:09:bd:f9:86:38:d6:2b:47:f5:54:51:73:29:
30:82:9a:92:7c:f3:e5:53:ca:65:bb:b6:5e:62:79:
3d:96:f4:47:dd:eb:90:0e:2a:48:c1:57:45:15:98:
f3:fa:a9:b8:ee:da:fa:36:b7:5e:e2:be:9d:86:d5:
72:f2:f3:2d:41:71:04:b7:bc:b0:37:7f:9b:cc:d8:
31:1f:57:69:1f:c7:61:4c:86:29:a0:88:8b:14:40:
34:b5:81:7d:57:6f:3f:34:f7:55:20:e8:90:db:d3:
bc:06:62:38:79:af:a2:62:d3:3c:c5:c8:d0:23:96:
66:a9:f1:d6:b1:19:0d:a9:17:ab:f4:7b:d9:dc:27:
a7:08:ff:ef:0a:b2:2b:7e:a1:0c:ef:1f:fe:da:3b:
05:9e:59:57:a0:a2:dc:11:fc:5e:71:a9:25:82:6b:
dc:60:9b:01:2a:b1:c2:a0:81:a4:a2:76:97:46:81:
2a:39:56:d1:76:bb:90:12:a4:a1:a4:c9:40:d4:8e:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:21:F0:23:91:EB:A3:98:29:9D:AF:C4:81:E4:3A:84:7D:24:6C:0C
X509v3 Authority Key Identifier:
keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:7e:16:b6:0a:ea:d5:31:f7:50:5a:78:1a:dd:ba:0d:d0:41:
1b:53:0f:d9:ba:19:c8:25:68:ab:ea:63:01:77:22:fc:bd:15:
95:26:00:77:99:62:56:53:e1:22:67:10:c6:9d:05:92:c8:a9:
35:95:10:72:08:6b:fa:10:76:79:23:6e:e1:8e:d9:31:9a:9d:
7c:28:51:b6:ea:7c:c5:0f:5d:59:a9:29:ab:a3:51:e1:3f:a6:
7b:ce:b7:b7:79:f1:5b:1c:18:74:b4:d7:c3:9d:67:ea:dd:8c:
96:50:ba:b2:75:89:56:7c:99:25:10:16:7d:49:25:9f:05:27:
05:c1:ff:fa:71:73:8f:66:40:aa:f6:a4:6f:54:b4:10:c8:49:
de:67:bc:7e:47:c8:f4:5e:fd:9c:a8:a7:b0:c7:9e:8e:fb:cf:
9e:81:88:29:dc:0e:9c:c0:08:a4:46:37:31:1a:e6:32:77:0b:
9f:9a:93:b4:f1:3b:fd:d5:4f:ee:79:26:f4:1d:83:86:35:55:
41:55:12:03:f9:e1:a7:30:04:fa:8b:97:6f:10:10:13:67:0c:
40:11:11:13:01:1b:9d:6a:f5:12:48:4c:f6:36:3d:fd:1e:27:
72:20:1f:84:19:9b:94:cc:6d:93:33:b7:c9:37:74:5b:06:45:
8e:ec:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:13:20 2025 by rpki-client