This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
File: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft (raw, json)
Hash identifier: qk8VGMQWwAmVBBlH9W+sdzDeaUA7NFc9Bd5R3eR9d04=
Subject key identifier: 26:AB:C1:54:45:99:86:8C:63:3A:CE:97:C5:F7:56:B7:E1:9B:22:F8
Authority key identifier: 93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
Certificate issuer: /CN=A91C4EE6/serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Certificate serial: 26EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
Manifest number: 26E9
Signing time: Sat 06 Dec 2025 15:26:25 +0000
Manifest this update: Sat 06 Dec 2025 15:26:25 +0000
Manifest next update: Sat 13 Dec 2025 15:26:25 +0000
Files and hashes: 1: k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl (hash: P7Vcw9Z9+pLQi6vSL1p3HTzZ3F7PbDxL1DJt3gfWyYY=)
2: 2E078068008111F0AB00F337C4F9AE02.roa (hash: VJHoTPQ0jea+ijUJEtlYJDCyIW2/0tYaKWZJwfLhYW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9963 (0x26eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4EE6, serialNumber=93574441B4169F5CBE331C2EED56E883DCEF4523
Validity
Not Before: Dec 6 15:26:25 2025 GMT
Not After : Dec 13 15:26:25 2025 GMT
Subject: CN=69344b21-8213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:4a:e0:ec:88:bb:ad:86:96:c9:8f:22:7d:
54:e4:87:4c:da:ee:77:81:74:c5:fa:f3:06:87:a9:
62:4f:8e:1f:ce:17:8b:74:65:6f:74:70:12:ac:ca:
ad:08:a4:91:3e:1e:ad:56:a6:80:a0:49:2f:1a:8a:
a6:81:fd:aa:77:27:c2:e1:10:aa:68:eb:d2:37:81:
52:f2:c6:78:ba:9b:fa:02:d8:92:a5:bc:37:57:b9:
04:01:a9:1a:98:17:0c:86:a4:e1:2f:e1:90:5a:0d:
3b:c5:7d:f7:ee:b0:0e:a3:30:04:b8:71:46:68:f3:
3d:2b:2d:81:4e:54:75:64:d9:27:81:1a:6e:d4:93:
b9:7a:27:fd:a3:68:c9:63:47:e0:3e:37:2d:ce:d4:
e7:4c:e5:6e:11:f6:25:f9:00:8b:7f:3e:a7:b5:77:
0c:db:34:11:fa:91:5f:90:fa:d3:38:3b:84:6b:66:
38:e2:0c:18:5e:03:7e:30:27:67:80:6e:2a:aa:a0:
4f:07:31:dc:e0:5e:56:dd:39:e5:35:e7:0b:5e:5d:
66:94:4b:ab:e1:92:f3:59:5d:e0:b5:d3:42:d9:49:
74:a4:14:0b:9f:fb:43:5e:0e:c6:20:83:2a:ab:00:
4e:b8:17:4f:e3:c9:af:81:8c:0c:1b:ed:a4:23:6c:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AB:C1:54:45:99:86:8C:63:3A:CE:97:C5:F7:56:B7:E1:9B:22:F8
X509v3 Authority Key Identifier:
keyid:93:57:44:41:B4:16:9F:5C:BE:33:1C:2E:ED:56:E8:83:DC:EF:45:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EE6/9570B2E6DCD911E48D789A54C4F9AE02/k1dEQbQWn1y-Mxwu7Vbog9zvRSM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:fd:52:89:93:85:4f:68:30:13:dc:1b:24:b4:ad:01:81:a6:
92:e7:fe:c2:72:ca:cc:bc:e0:b9:c6:6f:03:ed:fc:b9:b0:5e:
17:6c:ce:a7:06:9c:71:b5:9b:e2:38:01:6b:b5:94:ff:22:fb:
ea:85:52:82:24:01:68:26:a9:a2:40:7c:44:5e:20:d5:3f:13:
08:96:a9:97:85:ae:44:ef:31:e2:ad:99:0e:0d:3c:b3:1a:74:
d2:cc:27:4f:0f:f8:91:b4:e2:8c:24:f1:1b:b2:53:60:42:fd:
62:c8:e1:ff:1b:4b:62:7f:f2:c6:61:a5:f5:5b:0c:7e:6a:de:
38:ed:86:f0:dd:42:4f:85:e4:e1:10:6c:c8:15:c0:a1:77:8e:
a4:40:a6:5a:1e:a9:b6:f4:56:5d:c4:10:f6:b1:70:3f:1c:54:
48:5d:5d:85:18:d3:a3:00:a2:f7:4f:28:9d:4c:57:0a:45:a9:
39:a1:7b:64:5c:9f:96:55:11:88:60:c1:4e:18:12:d6:7f:d8:
35:bc:af:9c:16:5e:0b:8d:3a:37:4a:a2:29:9b:2f:31:09:71:
d0:2e:db:fc:95:00:49:76:d7:05:83:ed:6f:4a:46:7b:6f:8c:
51:67:df:8f:82:ea:e5:82:b4:4d:9f:e3:c4:2d:6a:0e:87:da:
58:34:0b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:41 2025 by rpki-client