This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
File: R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft (raw, json)
Hash identifier: w5mWIcmLVQmoEyig7KYUqWwz5DekEj6xBGaQfg1x7ZY=
Subject key identifier: 22:8C:3C:F7:10:D3:B9:62:31:46:14:04:BE:44:63:F8:76:4C:44:12
Authority key identifier: 47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
Certificate issuer: /CN=A91BB000/serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Certificate serial: 25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
Manifest number: 24
Signing time: Fri 05 Dec 2025 05:33:41 +0000
Manifest this update: Fri 05 Dec 2025 05:33:41 +0000
Manifest next update: Fri 12 Dec 2025 05:33:41 +0000
Files and hashes: 1: R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl (hash: +oZPLSKq8Bl2VPvAwAIsx87th7jxdIaqQbUspLEHOlo=)
2: 98F8A43C9D2611F0951DD30BC4F9AE02.roa (hash: OC380MFsyyoyM7tX6fVQV1xbBPX87Cl75OkK9UhRng4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=47B8543685D301FEEF90CD12E5158F740D6B6CB1
Validity
Not Before: Dec 5 05:33:41 2025 GMT
Not After : Dec 12 05:33:41 2025 GMT
Subject: CN=69326eb5-4dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:6d:29:aa:7c:b1:5c:10:3e:3b:f1:82:87:
a8:5d:c0:80:c0:94:99:1e:53:4c:29:b2:08:f7:02:
e5:84:38:32:c1:a0:69:2f:63:19:95:c4:26:7e:75:
76:05:9e:b8:8a:e4:51:f7:0a:58:f0:0d:ce:2d:02:
15:32:b7:f7:0c:57:06:7a:5e:07:95:9b:b0:8b:79:
b4:3b:e2:8a:9e:7b:ee:23:49:fd:7d:4b:8c:0a:83:
d6:06:60:c3:2f:77:15:cf:d9:94:a4:88:c1:52:f0:
4d:63:3d:23:0a:4a:c3:b7:09:ba:3b:da:8a:27:f3:
3e:de:cb:c5:14:cd:44:d9:5e:14:7e:7e:c5:76:a3:
81:7c:ae:cd:24:1b:84:0b:5b:fc:81:c4:d0:e0:0b:
ba:12:f4:be:83:35:5e:b5:2c:34:65:4c:bc:a7:cf:
b0:c8:41:5c:82:bf:79:6b:55:ad:31:00:9a:6b:1c:
66:f0:28:08:a1:3d:8d:4f:7e:c1:13:05:78:58:ed:
89:a8:cf:02:97:39:21:e8:18:af:80:90:4b:d8:6a:
ec:7f:aa:40:a1:c1:6f:ea:7a:f6:97:7b:4f:9c:f4:
30:1c:ad:e7:f8:77:09:34:63:45:d0:d9:2b:c6:84:
a5:8f:77:8d:a2:88:b8:a1:ce:c6:4b:86:c0:8b:3f:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8C:3C:F7:10:D3:B9:62:31:46:14:04:BE:44:63:F8:76:4C:44:12
X509v3 Authority Key Identifier:
keyid:47:B8:54:36:85:D3:01:FE:EF:90:CD:12:E5:15:8F:74:0D:6B:6C:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7hUNoXTAf7vkM0S5RWPdA1rbLE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/EEB808B89D1711F0B42EF034C4F9AE02/R7hUNoXTAf7vkM0S5RWPdA1rbLE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d6:d8:e6:a9:92:84:02:a7:2f:b9:50:28:60:57:51:ca:2d:
c9:40:0e:3b:0b:d9:1d:ca:b7:91:3e:e7:8e:3f:c6:67:74:c7:
e8:a6:aa:b4:d4:97:a0:1a:63:a3:2b:13:bc:61:f9:86:fa:eb:
8d:bd:d7:85:16:bd:59:07:06:cf:a9:3f:a0:8d:52:e2:a8:2a:
6d:8e:ea:35:f7:cd:5c:62:fe:52:6b:73:d8:c2:f7:05:06:66:
1f:cd:fa:3d:c4:c7:6f:b9:c8:25:49:16:ca:99:85:b3:77:86:
62:a6:6c:b3:65:69:79:b4:4a:f4:e5:ca:ac:dd:43:ce:d0:f5:
96:f3:08:d5:02:33:62:51:eb:ec:fc:59:29:5f:00:bd:d1:f7:
cd:da:d4:f5:45:b1:46:28:7b:39:db:53:08:d6:30:15:2f:45:
db:43:46:e2:ae:f5:3b:5e:db:9c:ca:92:db:e2:e3:54:59:54:
ce:5b:75:6a:79:7a:f7:8e:6c:d8:bb:66:a7:8a:7b:34:65:99:
7d:88:a2:fa:32:09:09:d1:e1:14:21:e6:4b:d9:ac:26:3d:0f:
a2:05:ff:e0:ef:c5:94:c7:a6:bc:cc:3b:da:f8:3a:ba:2c:48:
fb:76:1d:d2:c8:6f:78:d0:5b:de:d8:ce:5a:3a:07:3e:1c:63:
50:c8:ca:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:03 2025 by rpki-client