This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
File: 0m38xFnFMcUEmANsxs5nBrgGF1I.mft (raw, json)
Hash identifier: 9/ERvHRWQdH1uhJYyHJSqAOf615oAldPOjfIyx4tvUA=
Subject key identifier: FC:69:11:C0:10:8F:4D:B3:C1:E7:B5:85:0A:D1:AD:49:5D:A4:CD:06
Authority key identifier: D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
Certificate issuer: /CN=A91C1DA6/serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Certificate serial: 0D83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
Manifest number: 0D75
Signing time: Sat 06 Dec 2025 17:23:21 +0000
Manifest this update: Sat 06 Dec 2025 17:23:20 +0000
Manifest next update: Sat 13 Dec 2025 17:23:20 +0000
Files and hashes: 1: 0m38xFnFMcUEmANsxs5nBrgGF1I.crl (hash: 9UolhfziIBZQHMj1NJWdY20nYgBf9WU0+QvitiTDFHA=)
2: 3C46581E96C411F0AA8A5D32C4F9AE02.roa (hash: jEIejTZE4y5/nDEgx6mik+hQ7BxADqtxZpUBPhdWvAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:23:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3459 (0xd83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DA6, serialNumber=D26DFCC459C531C50498036CC6CE6706B8061752
Validity
Not Before: Dec 6 17:23:20 2025 GMT
Not After : Dec 13 17:23:20 2025 GMT
Subject: CN=69346688-7739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:19:18:71:c4:f4:32:33:5a:ce:3d:d6:aa:
f1:c0:82:ac:9c:b4:03:08:c8:3b:88:72:44:83:b3:
b9:3f:69:d5:1b:bc:e3:8f:f3:24:65:6f:af:3a:88:
05:af:6b:ac:b1:50:0d:83:a9:49:11:fc:6e:25:2d:
fb:47:c5:ec:e6:57:63:7e:01:9e:c1:25:b0:75:04:
85:b4:ca:8c:ae:b0:b7:e1:9a:d5:3a:65:1f:33:cb:
eb:f9:87:11:1a:e5:ad:7c:cb:38:51:ba:f3:a3:6c:
d9:47:0a:48:94:7b:87:b0:ba:3a:a3:57:5e:d6:80:
7a:ea:cd:fe:85:9f:f0:74:9c:db:29:e8:56:62:a5:
51:6c:a7:26:3c:fa:4b:01:ff:58:62:fa:54:76:d9:
66:66:70:e4:14:3d:a0:22:31:f7:93:9a:e1:00:c4:
d0:01:69:e6:e7:49:b1:9a:1d:24:ca:a0:f2:a8:fe:
17:10:5e:2c:31:4a:34:77:db:66:fc:a2:5b:13:e7:
79:2f:e7:10:c2:92:3a:6c:23:64:d5:97:a6:f1:b0:
0d:61:5a:c6:87:01:bb:e0:4f:e8:b6:ff:7d:2f:1c:
dc:b0:84:a0:3a:cd:ff:5c:68:56:e3:6f:c7:6a:86:
b6:f2:61:df:f6:89:40:c6:36:ae:6a:eb:ae:fc:8a:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:11:C0:10:8F:4D:B3:C1:E7:B5:85:0A:D1:AD:49:5D:A4:CD:06
X509v3 Authority Key Identifier:
keyid:D2:6D:FC:C4:59:C5:31:C5:04:98:03:6C:C6:CE:67:06:B8:06:17:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m38xFnFMcUEmANsxs5nBrgGF1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DA6/DB18B8E6DDDF11E9993CF265C4F9AE02/0m38xFnFMcUEmANsxs5nBrgGF1I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2b:f7:bc:d3:72:61:a7:84:d5:72:ce:21:7e:77:ce:35:9a:
82:86:e9:46:e4:9b:b7:59:88:b5:f4:ad:ed:72:ac:ce:23:17:
7c:93:cd:2e:9e:95:2c:0b:ad:eb:8d:b5:01:d7:0a:a3:eb:10:
14:b3:fc:44:7f:99:d1:a7:07:51:7f:9d:75:39:85:74:30:4d:
ec:62:34:55:7f:cd:9e:36:35:20:47:c5:13:54:e1:ea:98:74:
73:b2:4e:97:10:b7:6f:9c:a9:b4:a7:5b:27:ab:73:0c:b4:f4:
cb:12:c6:b6:af:f5:4d:14:2e:25:59:48:4d:dd:de:41:4e:ca:
85:3a:d1:43:3d:c9:7e:38:be:b7:4c:4e:07:51:d8:38:01:9e:
bb:5d:47:16:a8:2e:4b:b3:a5:4d:08:7a:40:94:fd:09:80:f3:
72:67:ac:63:0b:54:b5:d6:33:2d:c2:fe:10:d3:fd:3c:2b:ff:
59:33:9f:bf:b8:0c:2a:17:f9:c1:c0:3e:ad:dd:c4:7f:03:4e:
29:87:25:da:33:4d:87:80:34:c4:8a:6e:21:d9:48:86:7e:be:
ef:ee:6b:52:00:54:04:db:c0:06:75:8b:7e:a7:e8:25:af:8d:
2e:da:4a:5e:5e:40:a1:b3:15:82:08:5f:24:b8:c3:28:f0:db:
e2:f8:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:50:25 2025 by rpki-client