This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json)
Hash identifier: QKv9Tc/S75rlx5PHWMzEGMR2FtLvC37r1XHlRkCMZ70=
Subject key identifier: B1:47:75:66:DC:16:27:AD:83:0E:ED:DA:DC:EA:50:36:E6:27:02:2C
Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Certificate serial: 0D13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
Manifest number: 0CFB
Signing time: Sat 06 Dec 2025 17:31:04 +0000
Manifest this update: Sat 06 Dec 2025 17:31:03 +0000
Manifest next update: Sat 13 Dec 2025 17:31:03 +0000
Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: XDloSmLmKRBoXiCRE9MBbGj3g718XcMW0KvzmkViLew=)
2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: Q8R6RdYUX7rY4VWbBZw5PBzAwbilsPbivqpkW+dr/Ec=)
3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: rkTwGBJDEcILt7naFyYrumMd/+qJZboX4q6K9aobNao=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3347 (0xd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B
Validity
Not Before: Dec 6 17:31:03 2025 GMT
Not After : Dec 13 17:31:03 2025 GMT
Subject: CN=69346858-d65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:ab:5e:94:82:d5:20:23:7b:e4:32:2a:22:
92:6c:89:b9:25:90:ef:cf:6a:4b:40:83:80:a1:6a:
a7:2b:a7:50:86:bf:ba:34:9c:b7:ff:da:9f:47:3c:
2a:85:2c:56:13:0f:3a:c0:b6:11:80:3c:0c:84:73:
3e:42:14:2e:64:14:b6:5d:42:de:53:2b:c6:2f:0a:
56:64:b0:a4:e5:db:f8:7e:76:aa:0e:cd:9b:b9:39:
eb:f0:61:f2:5f:d6:b1:2f:58:d9:a8:5a:52:d3:bd:
72:d4:92:9e:85:d0:74:7d:72:a8:69:c0:6c:8e:90:
fc:80:c3:3e:f1:a7:06:ed:9d:6d:38:66:fe:cf:cd:
5b:42:64:6b:f4:f8:b4:92:80:ce:97:70:12:da:93:
fc:e8:9f:fb:6f:53:3b:8a:2b:42:96:29:c8:05:11:
e1:a4:ef:31:83:fe:1c:b1:68:05:e6:17:92:2e:f9:
7b:c1:db:37:03:64:ff:ab:b7:28:7b:bc:b1:b2:0a:
d0:22:26:61:58:1c:33:dc:8e:03:36:e1:de:8a:37:
29:00:fd:d2:a0:a5:cb:1a:96:32:3c:28:a8:8d:6e:
7c:6f:d8:59:e0:bc:1d:93:54:c0:43:56:d4:71:83:
d9:1f:ca:5e:09:ea:c5:9d:22:8d:fc:42:58:d1:a2:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:75:66:DC:16:27:AD:83:0E:ED:DA:DC:EA:50:36:E6:27:02:2C
X509v3 Authority Key Identifier:
keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:36:a0:85:d0:e4:af:3f:06:a2:11:f2:8a:2f:ce:59:24:08:
e4:23:89:b4:54:eb:eb:7d:1e:7e:01:29:90:5c:01:9c:b9:b6:
9d:09:e9:79:b2:9e:82:14:b7:47:a7:10:90:3b:ff:c7:19:bb:
eb:a3:8c:b2:f7:9e:ac:a4:de:d8:0d:af:b9:62:fd:1e:3e:c6:
2b:28:51:f3:da:1e:5c:a2:88:ee:68:fb:a6:c8:32:f3:78:20:
fb:9c:03:fe:e3:c3:58:28:ca:a1:ce:31:df:03:cf:65:05:bc:
94:b8:af:ee:9a:85:0b:87:69:ec:ba:e5:3a:08:13:fe:f4:58:
59:06:b2:6f:23:6c:6f:07:b3:d8:08:01:74:48:60:93:23:87:
cc:69:fe:93:ca:39:0b:f2:bb:75:eb:64:cd:0c:30:21:92:17:
73:58:41:31:94:f5:cd:9b:90:a5:fb:8c:4e:5f:0b:af:3a:be:
c7:2d:62:e4:49:70:f8:f6:a7:2b:c2:4f:90:d2:89:81:05:a0:
78:bd:cc:ac:f9:c8:f8:28:0f:0f:c8:f4:38:ce:6a:00:07:bd:
b5:04:79:14:1e:11:17:7c:3e:25:7d:5c:d3:b2:91:08:61:c3:
35:d0:dd:cc:4d:40:eb:5b:05:a7:45:ee:5b:e7:b5:33:32:04:
c3:6c:bd:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:13 2025 by rpki-client