This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
File: IipN0tbRTG-_SJJOZqD4y98SVRg.mft (raw, json)
Hash identifier: 1zRSlEJoHzjssOw9mxBwoLPrKt9MlzbQPT3jUHyjL+4=
Subject key identifier: 45:86:A7:53:3D:BA:95:F9:CB:70:46:7C:09:94:0B:81:62:5D:3B:48
Authority key identifier: 22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
Certificate issuer: /CN=A91B9D33/serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Certificate serial: 074D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
Manifest number: 0742
Signing time: Sat 06 Dec 2025 20:43:39 +0000
Manifest this update: Sat 06 Dec 2025 20:43:38 +0000
Manifest next update: Sat 13 Dec 2025 20:43:38 +0000
Files and hashes: 1: IipN0tbRTG-_SJJOZqD4y98SVRg.crl (hash: jpVTp7Yj16Sd6JQMeku8l9BlRov6IHuwNgaJU7Jv52w=)
2: 1B047818141E11EFB957692CC4F9AE02.roa (hash: ZE0tBApDZzaQ+O4EZGcawrB6RxmvKTQ6iYLr+X4ZOpI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1869 (0x74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9D33, serialNumber=222A4DD2D6D14C6FBF48924E66A0F8CBDF125518
Validity
Not Before: Dec 6 20:43:38 2025 GMT
Not After : Dec 13 20:43:38 2025 GMT
Subject: CN=6934957a-7012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c4:e7:c0:52:45:9e:90:06:da:75:9f:b8:1e:
ea:00:00:d9:15:8a:e0:98:72:42:eb:82:d5:54:b7:
f0:a4:b7:c9:15:e4:42:29:47:bc:27:31:92:b4:cc:
5e:c9:1b:64:7d:08:86:b1:e8:98:df:3e:e9:c2:75:
b3:2d:e4:03:46:c4:e5:2e:f2:51:12:87:53:58:06:
37:e4:9f:bf:a2:16:84:8d:05:12:4e:00:69:80:07:
61:0c:3d:26:4e:e7:72:a3:ce:01:f9:1c:9f:08:cf:
62:8e:69:96:38:e4:5a:38:21:32:21:d5:01:9e:8d:
e8:b7:10:77:95:bc:c2:bb:67:53:b7:98:ce:c9:c4:
04:7c:96:9b:78:fc:a8:62:4c:a7:ca:8f:38:f2:d7:
be:6f:d1:49:32:32:d2:df:82:7c:e8:8e:a6:e3:15:
4a:6c:52:ac:60:f8:f5:82:bc:43:91:67:02:13:6d:
41:2e:d3:81:c6:fb:cb:da:87:3e:be:96:64:1e:df:
25:46:da:49:e6:a7:cb:c8:42:f3:5b:d5:34:b7:26:
c8:0b:27:38:9e:c1:a6:7c:48:89:60:5b:b5:24:98:
f5:bf:4b:d5:34:0a:25:0f:b3:b7:5a:16:04:7f:7e:
2f:e0:39:26:63:f0:4d:d5:f6:c3:85:dd:fb:2d:e5:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:A7:53:3D:BA:95:F9:CB:70:46:7C:09:94:0B:81:62:5D:3B:48
X509v3 Authority Key Identifier:
keyid:22:2A:4D:D2:D6:D1:4C:6F:BF:48:92:4E:66:A0:F8:CB:DF:12:55:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IipN0tbRTG-_SJJOZqD4y98SVRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9D33/C2E1CADC53C311EB8A188431C4F9AE02/IipN0tbRTG-_SJJOZqD4y98SVRg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:f3:17:39:97:b2:41:cf:d3:6b:e6:9d:b1:58:a1:fa:4a:
60:e6:bd:29:b9:e7:77:ef:62:69:50:35:f5:fd:39:ae:75:0b:
29:8e:f9:c8:06:fb:45:c7:2a:13:5c:5e:82:f7:23:28:24:76:
68:06:bd:66:ff:b9:3e:cd:a2:55:53:f8:1c:06:dd:62:99:79:
fa:ab:fb:18:e2:cf:f3:5f:ca:44:85:48:25:3b:f0:5f:49:e1:
6e:e5:5f:2e:fd:94:76:9d:dd:46:63:fd:f8:ca:90:85:55:74:
a9:35:f2:cd:79:fc:05:ee:42:c6:71:ff:71:e5:fd:d0:bd:1c:
69:fa:5a:bb:00:a0:4b:55:76:c1:7b:b2:b6:8a:0b:9c:49:82:
ce:3a:af:fe:1e:cf:9c:73:e6:7b:89:0a:5c:84:8f:5a:7e:fd:
d6:18:70:c6:d3:3b:14:7f:ee:9f:67:43:17:cf:75:8b:0e:f1:
ba:41:e8:07:ca:38:96:50:13:13:1a:1c:a0:5c:87:51:24:c1:
50:5e:b9:81:29:d8:b8:da:aa:d5:72:90:36:4a:f5:a3:88:80:
bb:b6:24:94:d5:da:fc:ee:95:25:d8:4e:06:16:19:f6:d6:6a:
03:c6:b6:65:39:17:89:9f:d7:d2:ca:3f:82:b0:65:b6:36:5c:
49:eb:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:27:49 2025 by rpki-client