This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json)
Hash identifier: 9KIaYT+to4Pq1LX+QDQR3WLDQeV+0INwzyuD+AgArzo=
Subject key identifier: F5:93:16:84:DE:12:39:D2:90:99:9B:69:39:0C:65:94:00:B2:99:82
Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Certificate serial: 0285
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
Manifest number: 027C
Signing time: Thu 04 Dec 2025 23:58:35 +0000
Manifest this update: Thu 04 Dec 2025 23:58:34 +0000
Manifest next update: Thu 11 Dec 2025 23:58:34 +0000
Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: SLnOFJZKjmg3xP056EB4ZaDD/sDZfV0BBK+R2o9Pk3c=)
2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: s/TAy9epcEKTC12lHA/WIlwW4b4QaIyA/jvIAJ5W4eQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 645 (0x285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C
Validity
Not Before: Dec 4 23:58:34 2025 GMT
Not After : Dec 11 23:58:34 2025 GMT
Subject: CN=6932202a-f04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:45:56:bb:99:4d:d6:76:d0:15:e2:6c:73:
be:97:e7:bd:55:ea:82:17:d2:df:8f:7c:59:92:db:
a7:09:70:22:b0:f0:24:be:2d:f4:47:ee:e4:70:3f:
03:61:b7:8b:cb:c0:a6:d5:81:ad:f8:11:ed:ae:86:
3b:92:da:26:99:06:90:7c:fe:38:39:0b:f9:c8:b7:
b0:e7:94:40:26:6e:77:1c:34:c0:47:2d:2d:5f:04:
c9:2d:ad:29:fa:c7:58:fb:de:75:c3:6e:19:2f:c9:
de:29:42:e1:4e:b9:7d:ac:23:ac:d7:2c:85:de:d4:
7e:da:63:78:ec:85:95:8b:48:9e:09:40:22:ed:02:
0d:9e:de:26:66:80:a1:08:55:75:61:f5:57:65:0d:
c2:fa:c6:a6:48:21:26:ef:dd:dc:59:1a:04:cf:f9:
f5:a1:b9:5d:c4:1a:fa:d2:2d:e5:c1:08:f9:d5:69:
28:85:48:70:46:72:0f:37:ad:57:aa:73:d5:eb:f3:
8d:5e:c8:49:75:61:30:64:e9:48:7b:73:1e:37:76:
ea:7e:f6:19:8c:66:8b:74:e7:38:04:cb:30:02:1f:
72:66:ef:66:90:fd:9a:c6:f5:9c:a8:12:78:8a:c3:
13:41:02:ea:6f:ce:ef:cd:de:ef:13:00:a2:1c:b5:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:16:84:DE:12:39:D2:90:99:9B:69:39:0C:65:94:00:B2:99:82
X509v3 Authority Key Identifier:
keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ee:e8:94:33:0f:1e:2e:af:d7:0a:33:8e:a7:15:d8:3a:e3:
0f:c3:94:04:58:5b:8e:ec:4d:13:65:aa:d3:f4:21:8b:c6:f7:
28:b7:1c:3b:29:2a:82:72:98:be:f4:66:b4:a1:d0:5d:5d:44:
c9:94:b2:ab:c8:2d:70:bc:f1:b2:53:05:47:4c:27:51:32:32:
dd:45:02:7f:0f:ab:9a:72:02:ee:61:0a:fe:96:68:c0:11:3c:
89:f0:bc:0a:3c:fd:92:33:c2:57:64:e7:34:a1:2c:97:66:82:
88:c3:5b:00:cb:6d:63:47:2e:8a:7c:92:71:16:7a:1c:50:13:
8f:06:77:19:3f:30:48:4e:67:5b:d7:26:e4:12:e9:a2:34:4d:
98:38:48:d9:be:a3:a7:12:0c:8e:7c:ff:10:a6:65:44:e9:50:
45:23:b5:06:18:8e:d2:89:40:c6:dc:69:f7:47:39:6f:91:1a:
3f:cc:7d:53:e8:1a:31:36:a9:19:94:2f:af:ad:88:7e:5c:24:
08:5c:e8:8e:ac:80:d3:85:32:e1:74:3d:01:db:35:9d:cd:21:
24:42:8a:11:0b:02:60:7f:ed:0e:9d:4f:8a:d9:c4:b5:19:16:
c3:e4:f8:41:28:ed:38:58:23:71:5d:3a:c2:96:59:f9:2b:93:
b3:24:7d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:09 2025 by rpki-client