This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
File: ak27o21Mdn1b1ytu6XCoAA_FSV4.mft (raw, json)
Hash identifier: olJWSu1aOfpigKmMuupxqL6+bVZmnKCQ1koIqR6iDWQ=
Subject key identifier: D0:3D:46:A5:76:22:E2:D1:AF:B2:8B:B4:23:58:E7:86:9A:35:FD:5D
Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Certificate serial: 0833
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
Manifest number: 081C
Signing time: Sat 06 Dec 2025 20:03:40 +0000
Manifest this update: Sat 06 Dec 2025 20:03:40 +0000
Manifest next update: Sat 13 Dec 2025 20:03:40 +0000
Files and hashes: 1: ak27o21Mdn1b1ytu6XCoAA_FSV4.crl (hash: tYEXFr7oQYuIyFt1IvtdvHgbqu+rWTwArnvLqUnqVmg=)
2: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (hash: 9BCurgsmPpYkZs9pPB9R4G/BbkWck+cVJq8Vox5uiKY=)
3: A1D678CACD1D11EEBBCDB72BC4F9AE02.roa (hash: zemkN5BROCdSUhbupRjiSnNtwcSlinI7FQCHVicj5PI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2099 (0x833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF8C3, serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E
Validity
Not Before: Dec 6 20:03:40 2025 GMT
Not After : Dec 13 20:03:40 2025 GMT
Subject: CN=69348c1c-2098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:a4:f2:e3:55:86:91:93:89:1e:4b:6d:03:
56:30:2b:6b:47:f0:02:05:f7:b3:53:a9:fa:0a:0c:
de:01:5a:22:b9:01:34:8c:bc:ca:c3:77:78:2f:d4:
b9:92:80:40:a0:70:a6:e7:62:c1:5e:41:29:33:b3:
55:3b:55:b0:ba:2a:69:29:9c:96:e3:3b:ad:96:b6:
ca:dd:eb:e4:06:5b:67:88:1d:93:db:f1:a5:ee:21:
16:06:96:ca:11:34:77:00:08:1f:0d:a8:7e:d9:52:
79:9a:39:07:2c:d5:79:98:cf:46:ad:f2:3e:2f:a4:
d8:a9:25:b1:1a:65:dd:c7:6d:9a:c0:c2:78:10:28:
10:7c:37:c7:45:62:51:6d:ee:30:99:7d:b0:e9:1a:
4c:3e:56:f0:8e:75:ed:32:88:c3:95:95:31:77:13:
18:60:63:50:46:55:99:be:ad:49:77:f1:cd:61:bd:
75:b9:99:72:88:dc:48:dc:35:55:e3:8e:f9:51:ae:
5d:9a:2f:b3:21:52:5e:1f:fa:7d:fa:30:a9:b6:ce:
bc:82:56:d6:49:bd:a8:fa:c4:71:96:a7:07:43:bc:
55:d9:79:f4:9b:22:c2:ac:40:d9:b9:38:2e:d0:64:
30:ac:06:06:e8:64:42:41:f1:50:06:3d:dd:0a:5d:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:46:A5:76:22:E2:D1:AF:B2:8B:B4:23:58:E7:86:9A:35:FD:5D
X509v3 Authority Key Identifier:
keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:b8:eb:6f:7a:2f:2a:e7:f7:db:f8:a6:b0:f9:fe:58:91:30:
7b:bd:9c:72:42:ec:98:b2:27:f3:f7:61:dc:9f:0c:fe:83:3b:
8b:9b:bf:2a:db:07:3d:62:88:9d:df:d8:ee:28:76:55:83:5e:
d6:96:85:01:01:5e:6e:2e:aa:33:77:77:89:15:f6:dd:64:85:
05:b3:73:fa:d1:1b:d4:1a:5d:cd:2d:21:8b:e8:2b:cb:b7:47:
47:ba:56:27:29:9f:fb:15:8b:0e:c5:fb:66:3f:da:b8:db:3a:
42:92:dd:b8:2a:14:d2:2c:36:4a:4f:1c:e6:5d:16:9f:4d:be:
7a:30:8c:dd:14:a1:89:cf:25:41:b5:76:78:11:ad:c3:4f:93:
61:c0:8c:00:42:6e:ad:b4:df:33:0a:1e:e0:c4:c8:05:52:5d:
db:58:9e:62:84:b8:27:12:a5:ce:c7:5c:e0:23:57:57:9b:fb:
df:8c:de:13:c3:63:da:7b:ff:23:45:de:be:39:56:c8:b4:b6:
50:3b:dc:c7:16:b2:53:2f:59:c8:d8:d3:5b:06:fb:e3:4d:c7:
55:0d:68:d1:d6:4d:7b:6b:18:cd:2b:4b:f4:4e:13:31:9a:e9:
29:4a:6b:aa:74:db:db:7f:f6:04:0d:52:92:39:38:dd:20:98:
f1:2d:d1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:00:47 2025 by rpki-client