This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json)
Hash identifier: RFcvxk8ZYbC5kqUF3x/uf7C6N6ONaG+Fapu4zevgmgA=
Subject key identifier: B3:96:A9:76:8E:C6:34:47:2C:7D:6F:43:14:9C:11:6E:C3:29:41:53
Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Certificate serial: 10FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
Manifest number: 10E5
Signing time: Sat 06 Dec 2025 16:48:05 +0000
Manifest this update: Sat 06 Dec 2025 16:48:04 +0000
Manifest next update: Sat 13 Dec 2025 16:48:04 +0000
Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: QyNCC9PhvtZentFxNfcytagVip4oKAxP7NJv+Bq2lqA=)
2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: EbivVKsv2oyupGDtV6dF4T5ILVyhqV2iONhViZoJNxs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4
Validity
Not Before: Dec 6 16:48:04 2025 GMT
Not After : Dec 13 16:48:04 2025 GMT
Subject: CN=69345e44-9c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:6a:b8:05:95:d5:c0:39:05:5a:d5:7c:ef:
ca:0d:b4:95:14:0a:c6:ed:4b:99:25:8e:22:39:0c:
98:20:e2:8e:e2:8f:d2:5f:c7:57:32:47:16:bf:eb:
1f:ca:cb:37:38:96:eb:58:69:c1:39:17:d9:0b:d1:
de:1d:94:90:bf:70:32:10:9e:0c:60:52:aa:f3:a9:
3d:e9:e1:04:85:55:a6:1b:a7:f4:c0:57:25:1d:55:
42:18:6a:d4:20:a5:48:36:2e:ce:ae:af:b7:4d:f1:
32:96:16:f3:00:09:39:29:04:f1:a7:61:67:ba:66:
c7:17:89:9f:eb:20:f5:aa:d4:53:ef:7b:e4:39:38:
e5:19:0b:bd:88:cf:ff:04:c0:d1:2b:3d:33:1e:28:
3f:18:99:ce:81:80:12:68:2b:e2:4a:3c:fc:15:fa:
56:2a:18:ed:36:ab:9a:b1:d0:20:71:27:9c:b3:37:
52:6a:1e:f7:16:b2:e8:91:69:cb:10:1e:0a:7b:1c:
a0:f8:1b:ac:c4:76:b4:5e:2d:0d:8d:13:ed:95:24:
03:12:ed:f4:f9:6c:bb:74:1e:d9:e4:40:96:cf:85:
b2:34:3a:6c:65:42:e1:df:f3:ca:7d:27:5b:80:4b:
5b:2b:72:2c:5e:71:d2:52:34:2f:d2:2c:17:4a:e8:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:A9:76:8E:C6:34:47:2C:7D:6F:43:14:9C:11:6E:C3:29:41:53
X509v3 Authority Key Identifier:
keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:7e:a2:8f:93:3c:0d:3f:8e:ce:e3:5d:ad:fd:29:f8:3b:f8:
9d:41:4a:7f:2d:4e:75:eb:0f:2b:ff:a9:2a:2d:1c:f7:c5:c1:
83:93:13:64:fe:bb:cd:00:ae:4e:04:61:61:46:6f:4e:47:ce:
3b:41:ff:84:a6:ed:7b:e4:7b:97:c2:7c:84:9d:1e:71:72:f7:
3d:26:e3:5c:2f:f7:07:6c:22:b1:9f:0a:84:b9:cc:14:c1:14:
e1:67:5b:7b:6d:82:5d:7a:3a:d6:1d:d2:22:9b:39:83:27:c0:
51:5c:13:39:44:54:3c:fb:46:5d:23:99:de:0c:64:0f:f9:58:
5c:a5:7c:db:fd:1f:3e:c1:80:e5:9e:64:f5:a7:b0:4e:26:46:
69:0b:4a:61:18:3f:e5:1e:fd:18:60:3e:fe:90:88:b8:1d:64:
32:58:a8:ce:bd:3d:0c:4e:74:0e:b5:dc:29:bb:31:41:0a:6d:
3d:38:bd:5a:9e:62:f1:72:ac:49:41:26:ee:ca:be:8a:eb:61:
dc:bc:24:a2:8a:86:f7:a8:98:2f:54:1c:a3:28:02:8f:c6:d4:
34:0a:19:5a:78:ff:a9:48:65:f8:af:2f:68:13:b3:0e:6d:a7:
8d:b4:77:51:3a:c6:91:43:c2:0e:29:95:e0:45:6d:06:7f:e9:
86:66:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:24 2025 by rpki-client