This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
File: 7N0mV0PpIRvOCq3LsCLObzO-CwY.mft (raw, json)
Hash identifier: DQY60KYsno6VMxGSALMLBosUaIWCIc8XW7NtZcJoZgo=
Subject key identifier: 5A:26:BF:DD:3D:21:62:26:94:66:BF:E9:5B:4A:06:CD:1A:11:44:D3
Authority key identifier: EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06
Certificate issuer: /CN=A91C1710/serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
Manifest number: 085D
Signing time: Thu 04 Dec 2025 22:45:16 +0000
Manifest this update: Thu 04 Dec 2025 22:45:15 +0000
Manifest next update: Thu 11 Dec 2025 22:45:15 +0000
Files and hashes: 1: 7N0mV0PpIRvOCq3LsCLObzO-CwY.crl (hash: ezzQifeOrMv84AdqYx5//jJfop1lDyfHTupc/e42ZeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl
rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1710, serialNumber=ECDD265743E9211BCE0AADCBB022CE6F33BE0B06
Validity
Not Before: Dec 4 22:45:15 2025 GMT
Not After : Dec 11 22:45:15 2025 GMT
Subject: CN=69320efc-5c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:a3:65:0e:f7:92:71:d9:0d:fd:0a:09:09:
13:94:b7:e4:f5:22:38:bc:44:b3:8c:98:1a:66:4f:
e3:5c:2e:0b:3c:65:75:de:68:64:fc:74:c3:b8:f9:
6d:c4:f0:85:e3:28:46:c5:88:81:e6:a1:ac:5e:d6:
ca:19:01:25:18:ab:a4:ad:4c:71:b4:49:50:d2:02:
90:0a:a7:cf:2a:e0:1b:a2:3c:43:e5:70:83:70:8a:
d5:30:c6:da:13:53:ce:e7:ac:af:89:6b:83:fc:b1:
8b:e1:5e:5e:1d:02:b0:75:0d:d9:0e:b4:cf:ea:f0:
93:3e:25:ba:34:bb:47:f1:24:c7:1c:9b:53:94:86:
76:47:c7:e2:56:3d:71:ac:97:eb:f3:7d:a0:83:6f:
98:88:9d:c5:99:c8:0f:28:8a:f1:32:70:cd:e2:e9:
1e:3e:6c:67:73:64:28:0a:e3:df:16:07:7e:2f:d6:
34:22:5a:6b:ab:59:f4:a7:a3:c9:64:1f:a5:fe:1f:
36:9a:f7:f7:ce:12:9a:2b:08:05:cc:37:21:cd:86:
ac:59:09:16:dc:57:2a:d8:dc:d1:49:d0:79:56:9b:
1e:ce:45:9e:7b:7e:61:6c:f4:61:d1:1b:45:b0:86:
2e:08:de:41:aa:ed:2f:7e:a2:9f:99:d4:22:67:e7:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:26:BF:DD:3D:21:62:26:94:66:BF:E9:5B:4A:06:CD:1A:11:44:D3
X509v3 Authority Key Identifier:
keyid:EC:DD:26:57:43:E9:21:1B:CE:0A:AD:CB:B0:22:CE:6F:33:BE:0B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7N0mV0PpIRvOCq3LsCLObzO-CwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1710/18229A86826B11ECA11BA52BC4F9AE02/7N0mV0PpIRvOCq3LsCLObzO-CwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:fe:6c:a4:77:22:c9:f5:a8:82:00:ea:85:c0:95:c7:a7:79:
df:86:13:af:ea:aa:f1:9f:9e:da:fc:9b:cf:66:7a:e4:3b:bd:
ec:d4:97:3b:7a:ec:6f:88:52:fb:d7:35:7a:56:5a:0d:fc:2e:
9c:13:4d:e5:e0:d7:2c:fc:49:29:61:2b:49:dc:fc:35:65:d2:
82:7a:20:9d:0c:69:5c:31:0d:14:ae:0d:65:91:7e:48:20:20:
54:d0:fa:65:26:89:69:32:9f:14:51:1e:4e:a2:00:05:3c:ab:
3f:92:be:e7:5e:41:45:6f:2a:3d:dd:c5:63:41:cf:3d:f7:8d:
ee:b0:da:d2:6a:0f:0f:7a:6a:47:8e:45:2b:72:05:b6:ea:7c:
6c:e0:07:71:99:29:69:ab:8a:6e:0a:7a:3f:c5:9c:56:b0:82:
2b:c9:34:34:69:84:e6:7d:97:5e:09:15:e3:70:71:3b:e9:99:
29:f8:c3:8b:63:3b:fc:0c:6a:40:55:20:69:73:72:40:31:ac:
e0:94:de:dd:a8:ed:50:ed:a1:0b:dd:60:f7:de:18:4d:af:80:
83:d2:b5:68:c1:d1:4e:9d:79:0b:5c:15:96:5b:be:18:3e:0f:
22:2a:5b:d6:c9:01:76:d8:d5:bd:f0:60:9f:20:c5:29:a3:c0:
96:67:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:11:44 2025 by rpki-client