This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier: F83UQsQ7LtfaILfBbnMRIjLyATGMl9CxR47patBXIYg=
Subject key identifier: 71:D9:FE:04:C4:2A:74:59:62:C9:02:17:D5:98:B2:EB:53:C6:F2:A0
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number: E0
Signing time: Fri 05 Dec 2025 03:31:07 +0000
Manifest this update: Fri 05 Dec 2025 03:31:06 +0000
Manifest next update: Fri 12 Dec 2025 03:31:06 +0000
Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: xOoCjLT3nZbfVjelT6aUiRTZ7TJRCteuwfzij+lAz4w=)
2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Validity
Not Before: Dec 5 03:31:06 2025 GMT
Not After : Dec 12 03:31:06 2025 GMT
Subject: CN=693251fa-f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:84:56:38:e3:49:4d:06:46:9f:28:3e:b1:
fd:77:1d:96:85:1b:92:5a:20:de:d9:5c:ef:bc:81:
71:12:56:70:ae:4a:b3:f7:13:fd:2f:49:42:5c:d7:
f8:d4:f0:dc:ce:a9:e7:f5:2f:3d:21:90:45:e9:fa:
d1:08:2b:cb:7a:88:0b:0d:00:07:36:9f:99:95:81:
9a:2e:1e:ac:5f:8b:d5:e5:de:2f:02:8c:6a:fc:b6:
d6:28:0e:27:6f:81:8d:fd:95:0e:4b:d3:7f:25:57:
69:fe:4d:79:da:0b:35:0d:12:f5:8a:e4:c6:7b:8e:
2e:e6:91:f0:7e:dc:e3:21:bb:83:6e:2d:8d:7b:51:
75:f7:99:2c:53:6b:6e:ac:f5:cc:40:cf:cc:83:83:
78:00:bc:22:29:a0:0c:d8:a0:53:43:21:d6:da:b0:
d2:57:b0:b8:b7:7e:b4:8c:bd:50:a9:f1:20:9b:d5:
18:4f:a9:75:25:c8:eb:d3:49:d1:62:a9:d8:a3:cf:
8a:1d:e1:b7:76:b4:4e:1d:4f:97:e9:0b:8b:06:4d:
c3:f2:69:05:ac:f5:03:30:c8:a2:8c:0c:91:f6:f2:
c1:13:3f:1b:b6:03:ea:49:c6:6e:c7:20:b6:04:63:
af:60:90:2b:b1:e7:53:42:ea:4d:70:5f:77:b3:ee:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:FE:04:C4:2A:74:59:62:C9:02:17:D5:98:B2:EB:53:C6:F2:A0
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:69:8a:45:87:c5:f8:db:1c:5a:1b:87:20:ae:f6:ab:8e:ac:
0c:43:51:7d:32:f5:11:67:6d:df:ba:01:5c:5e:e4:c5:fe:28:
c3:13:ae:55:ec:00:f6:f7:8c:74:e4:b0:b8:85:58:76:12:fb:
f2:5c:1f:a6:a6:e4:7b:e3:5e:af:82:7a:ae:bb:a2:99:d3:6c:
d9:b7:0f:35:b7:de:98:fb:d4:43:91:08:37:4e:8c:8a:9e:d1:
8f:d2:ed:59:20:e2:dd:1d:1f:b5:d9:93:5a:35:08:06:e6:d5:
a0:91:83:35:f6:28:47:a0:3d:7a:62:b6:4c:5e:d8:e6:81:d9:
68:6c:0a:8b:91:d1:2b:80:5c:34:e3:db:67:be:43:69:04:0c:
a3:49:8e:4a:4e:fd:89:b1:f0:38:c3:82:2e:a0:ef:a7:51:c2:
af:b7:10:aa:61:92:24:55:f9:72:73:8b:e0:4b:d5:50:6c:2e:
17:6a:9f:74:ec:8c:9f:eb:bf:a0:4b:40:5b:b4:bd:9f:05:cb:
2f:cc:e3:e1:cc:0c:87:91:51:8e:da:f9:59:07:21:16:f7:9b:
e7:24:61:58:15:17:62:71:02:c6:03:23:43:c0:8e:d6:ed:76:
ac:e2:f8:00:ac:79:bb:8a:84:f9:84:91:11:9a:55:e2:16:77:
50:f1:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:58:38 2025 by rpki-client