This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File: 57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier: aQvq0PntLbwou9GfIQUuIzVsMFKTzkpucfS2ugyzIiU=
Subject key identifier: 22:2C:FC:C4:74:D1:21:49:2D:99:DF:2D:10:A0:58:FF:BE:ED:EB:C6
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial: 0E5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number: 0E50
Signing time: Sat 06 Dec 2025 17:13:35 +0000
Manifest this update: Sat 06 Dec 2025 17:13:35 +0000
Manifest next update: Sat 13 Dec 2025 17:13:35 +0000
Files and hashes: 1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: 2grUnnEGjTOONjL2S3kpCdU4XGDfIr83j90wKhGIZeM=)
2: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=)
3: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3679 (0xe5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Validity
Not Before: Dec 6 17:13:35 2025 GMT
Not After : Dec 13 17:13:35 2025 GMT
Subject: CN=6934643f-6a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:4b:52:00:67:3a:28:f1:27:fc:74:4a:3e:
9d:c5:db:ad:01:cd:a6:47:2e:a7:e7:8b:3f:94:57:
74:0e:0e:cc:4c:bb:02:a0:f7:8a:ac:07:13:35:95:
94:db:4b:1a:e8:8a:c5:5a:59:4c:e0:3d:4f:48:7b:
65:01:3e:e4:3b:f4:15:62:e1:90:88:44:29:b1:a9:
1b:3b:2c:20:a7:b1:a2:98:20:a5:2c:9b:0b:78:83:
bc:a5:3e:b6:42:c5:1b:71:64:94:1b:47:52:77:f1:
be:9c:11:a6:43:d4:95:98:b4:ed:5d:0d:37:c9:b2:
67:9b:b6:c0:7b:09:23:14:d4:12:f0:e6:8e:79:65:
0c:f6:bf:d8:77:e9:14:28:8f:ed:12:39:37:83:73:
f3:09:90:bd:73:65:9b:71:40:33:b9:64:ce:e6:d4:
45:be:df:87:de:82:19:5d:32:45:a9:fa:39:bd:97:
6a:22:15:29:b9:8f:8c:56:5f:92:29:84:cf:a7:8a:
ce:58:60:00:f5:f4:e7:eb:cf:d5:c7:4f:ce:2a:41:
d4:f6:c2:d7:94:fe:24:6e:c4:32:b2:ac:08:95:fe:
d6:38:4b:66:b4:05:b4:39:2a:69:ab:33:df:5d:2f:
a0:07:58:33:ee:b1:17:00:af:8a:36:1f:ac:55:e3:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:FC:C4:74:D1:21:49:2D:99:DF:2D:10:A0:58:FF:BE:ED:EB:C6
X509v3 Authority Key Identifier:
keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
db:c3:7b:cd:8a:b4:c1:e6:72:ef:37:80:7c:70:9b:d8:a7:06:
42:e7:f0:2c:9d:7d:45:e4:2a:c2:29:38:67:b2:b7:25:ed:a1:
88:4e:8a:6b:bb:24:da:ec:5f:e1:36:2d:5c:4c:34:61:d3:eb:
3f:9e:11:b6:e1:3f:66:80:08:f8:0e:b2:01:ec:87:f2:97:4f:
fe:0b:42:cf:dc:be:ec:6c:17:c1:c2:06:56:e8:59:8d:c6:00:
b8:4f:0a:5e:a6:8e:d0:5f:8e:9c:a8:16:74:d4:01:6f:e7:60:
0b:88:ed:44:ba:d7:8a:5f:9e:c3:1c:6a:3f:8a:1f:08:51:d3:
d5:fc:4d:d3:88:3b:c0:32:45:2d:b5:3d:dd:2b:72:8d:cb:bb:
c5:8c:ae:94:5c:07:99:d5:18:09:c0:d3:10:21:76:f8:bc:83:
41:16:78:b1:4a:3f:6c:ba:d3:d7:74:70:d6:23:f7:13:95:89:
0b:cd:e1:00:c7:c2:2a:e2:3e:44:cb:29:24:1b:22:c2:b0:84:
62:0a:a4:3b:57:79:d5:ac:88:4d:44:3e:59:e9:80:bc:0c:40:
a1:a3:e8:6e:06:5b:00:96:a9:2c:1c:d5:e1:a5:39:af:ea:4b:
88:81:09:07:07:38:83:0d:a4:68:43:c4:00:b7:b3:40:5b:ea:
fd:ac:e7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:24 2025 by rpki-client