This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json)
Hash identifier: AMIQB+YXCF+pBxQhuBbOtwROi+VyHVke2pE7luv9J7Q=
Subject key identifier: D8:12:CD:46:5A:33:4E:AA:2F:B1:BA:7A:EF:14:4C:68:09:E2:D0:79
Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Certificate serial: 01A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
Manifest number: 019C
Signing time: Fri 05 Dec 2025 01:37:15 +0000
Manifest this update: Fri 05 Dec 2025 01:37:15 +0000
Manifest next update: Fri 12 Dec 2025 01:37:15 +0000
Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: lEtFdrCnUpTlnhWNqLzvhrntAbPNMUupBPicS3cweCQ=)
2: 71014290D87411EE97234F5CC4F9AE02.roa (hash: fakP4GJLKmnyVMCfkqZinteG0/CZYTZ4JdvjAch5f+A=)
3: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: pDlIkunYLeVqqqSF0elUnTy2XYUeAlfMdaUFeXZ9gcI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 419 (0x1a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B
Validity
Not Before: Dec 5 01:37:15 2025 GMT
Not After : Dec 12 01:37:15 2025 GMT
Subject: CN=6932374b-d1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:73:cd:9f:11:92:fe:47:7a:b2:8b:60:bc:41:
5b:08:50:ac:c1:cb:f6:3f:3b:79:02:11:2a:96:29:
fa:7b:3f:8b:62:4c:2e:2a:e2:dd:de:6a:98:9e:7f:
03:e8:9f:76:e1:79:50:1e:3b:80:e5:d4:6f:4e:1d:
a2:ab:8e:e0:0c:92:a6:cf:7d:51:db:3e:09:85:b0:
27:3e:80:97:ce:64:1d:b1:33:55:72:1c:15:18:0f:
e8:1f:80:fe:30:8d:19:72:4e:f8:10:a7:27:26:4f:
50:f5:f1:7a:78:d8:46:33:86:f5:c6:0e:41:53:50:
17:7a:0e:0e:14:20:cf:21:a8:f3:ca:92:05:23:21:
24:bd:b8:ac:96:33:93:32:58:be:04:61:ec:59:54:
f3:db:d7:5d:61:5c:e2:7e:0c:d3:4a:b3:71:c0:1e:
3b:66:2d:9d:ab:da:d4:cc:2a:1c:0a:7d:77:5b:7d:
c3:aa:dd:a1:a0:b6:91:2e:86:29:21:f8:be:7d:df:
4d:98:e8:52:70:d2:62:a4:2c:67:75:de:d2:23:9d:
7f:73:81:85:ea:61:15:1d:a9:cb:b4:ad:66:bd:a0:
7f:fc:69:3e:54:69:03:ee:76:b4:60:bb:00:26:53:
0c:bf:2c:41:d5:08:b6:f1:fa:f3:ae:46:c8:fc:1f:
bf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:12:CD:46:5A:33:4E:AA:2F:B1:BA:7A:EF:14:4C:68:09:E2:D0:79
X509v3 Authority Key Identifier:
keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7e:d7:e9:06:dc:7e:e5:42:ff:78:c0:92:d4:19:e8:b2:93:
9a:97:40:9e:a0:39:e9:21:e2:1d:c6:57:40:67:5d:d8:90:e0:
17:3a:8e:ad:e2:cd:0f:e4:09:dc:93:67:20:18:4c:44:f2:f4:
ff:f7:8e:7c:34:7a:ec:e3:d6:d1:b3:96:f0:1e:8a:e7:0a:98:
13:d3:25:9b:8f:ec:00:f0:48:4c:8c:ca:ca:a8:6d:21:3a:1c:
57:68:db:87:25:ed:39:dc:c7:ad:4e:8f:7e:6e:f8:f6:44:5f:
60:81:15:b1:e7:4e:cd:ae:cb:b3:ac:24:1f:29:ad:1a:07:ba:
ef:62:12:cd:58:2d:09:99:41:48:6b:3c:74:e3:a7:5e:92:1b:
3e:c2:67:60:9f:7a:52:06:d2:41:df:3c:f0:e2:60:85:90:2f:
54:3d:d2:36:a0:9e:d5:d2:c0:0b:c3:53:33:ec:92:3a:34:11:
e9:53:17:9b:21:00:8b:5e:59:5e:a2:d4:c4:d6:80:f9:03:6c:
4e:4b:a0:6b:e3:54:ec:e6:ae:d0:aa:db:04:aa:96:e9:b1:15:
b1:f8:f1:6a:6d:a6:b1:3f:e3:d0:3c:a1:de:ca:7a:2e:0a:48:
70:19:9f:85:4b:20:36:73:73:2c:7d:27:06:63:b1:15:a7:fe:
14:c0:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:46 2025 by rpki-client