This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
File: pih1evOkgoa9_fg6tOZOJNguDGs.mft (raw, json)
Hash identifier: njWNU6nQn23yjIoCkDyHu0RcSewMkVIvqGm6W5KZx/Y=
Subject key identifier: AD:49:C5:9A:8D:DE:A6:43:45:E9:FB:A0:F4:1F:66:99:7B:EA:8D:7B
Authority key identifier: A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
Certificate issuer: /CN=A91C4FBE/serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
Manifest number: 2C
Signing time: Fri 05 Dec 2025 05:32:23 +0000
Manifest this update: Fri 05 Dec 2025 05:32:22 +0000
Manifest next update: Fri 12 Dec 2025 05:32:22 +0000
Files and hashes: 1: pih1evOkgoa9_fg6tOZOJNguDGs.crl (hash: ++agSYg+REfEMvCJVC47rxJEwKFGdQYcMel78O7B260=)
2: 0B4BDC0E993311F08534326BC4F9AE02.roa (hash: Xax62WHpnxH02bV+GhSPo1Favqt7yKHwi+ro9f5anjI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl
rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FBE, serialNumber=A628757AF3A48286BDFDF83AB4E64E24D82E0C6B
Validity
Not Before: Dec 5 05:32:22 2025 GMT
Not After : Dec 12 05:32:22 2025 GMT
Subject: CN=69326e67-669c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:81:59:70:2c:1a:0b:55:dd:2d:22:c6:30:
01:3f:3f:39:73:9f:76:22:4a:c1:21:2f:64:c6:b0:
a5:57:48:4f:30:c1:06:5f:40:4c:e9:b5:0a:4a:6b:
ff:36:34:19:e1:9c:b9:84:cd:a8:ad:25:47:ce:87:
c3:93:71:24:b1:04:b4:61:49:69:78:85:d5:58:76:
b5:4c:f9:eb:43:b6:c5:b9:92:8b:97:06:31:35:71:
ca:3d:16:35:14:44:9e:d4:f3:69:ea:e8:18:30:10:
fd:dd:44:c6:4f:a5:32:a3:aa:3f:56:c2:6e:22:dc:
d3:1e:4b:37:20:1a:61:3b:35:b7:e7:7a:70:48:d5:
a9:14:da:85:61:b1:ac:75:a3:e7:ca:f3:cf:2d:f3:
05:5d:05:15:0a:d0:26:86:f0:48:73:ef:53:b1:83:
47:3a:51:ea:df:7b:44:8b:80:3b:db:3c:bd:c3:97:
e6:03:6e:36:0e:7d:d3:5d:9f:40:12:8c:fc:a3:c3:
ba:29:b3:a3:43:97:7f:4b:c9:3b:1b:7f:13:cb:dc:
df:ff:16:5b:3c:81:d4:6b:cb:ab:39:10:72:3e:a3:
1b:0f:84:f5:a2:c6:ed:4f:c9:80:b0:99:fe:4f:ed:
b9:bf:a2:b0:5d:25:bd:b9:34:42:9c:04:4d:f3:e7:
c0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:C5:9A:8D:DE:A6:43:45:E9:FB:A0:F4:1F:66:99:7B:EA:8D:7B
X509v3 Authority Key Identifier:
keyid:A6:28:75:7A:F3:A4:82:86:BD:FD:F8:3A:B4:E6:4E:24:D8:2E:0C:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pih1evOkgoa9_fg6tOZOJNguDGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FBE/25E826AE993211F0A354BA69C4F9AE02/pih1evOkgoa9_fg6tOZOJNguDGs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cd:ad:77:b9:35:33:47:80:a2:7c:55:87:7f:5d:ef:93:38:
bb:ff:45:5e:88:3d:80:87:73:79:e0:bb:a0:b6:9b:6d:68:ae:
dc:70:c5:85:ea:be:0d:6b:9e:6a:64:35:54:2a:a1:9d:e9:01:
fe:a9:12:9e:0d:e7:95:d5:88:dc:8a:2e:9b:74:f5:dc:07:51:
ec:84:86:41:e3:a8:f5:2f:a9:7d:f4:97:1b:80:16:8f:3b:47:
4b:f9:58:25:31:06:2f:93:ba:2d:d1:31:c4:61:7e:bb:54:43:
a4:6a:3d:52:e7:1b:16:87:b7:64:31:00:38:6a:9e:29:07:f9:
59:ce:93:a8:e5:d6:2b:38:02:a7:9b:f5:4a:fd:a8:e1:f9:fe:
8a:c3:f0:58:37:cc:4b:cd:1a:11:f9:8d:46:db:38:88:89:44:
a4:07:e4:bd:c3:6f:8f:fa:d8:7c:63:96:b6:9a:fe:26:cd:c3:
d3:38:af:8b:d1:a9:ac:88:98:47:64:ce:0b:e5:bf:64:9d:95:
af:81:cb:a3:be:ce:0b:79:d0:44:1c:75:0d:10:9d:58:f5:02:
76:be:8e:69:cd:5b:81:e4:31:44:98:43:dd:aa:7f:69:89:58:
fa:1f:b5:6f:fd:ee:6a:06:81:a6:96:8e:17:0a:ba:df:34:c0:
15:17:9d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:25:46 2025 by rpki-client