This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
File: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft (raw, json)
Hash identifier: BQG6NUrrv2CwwUkVc29l9aogpAoRCNLjige1RosPJsg=
Subject key identifier: 96:4C:49:7A:6B:49:07:9E:63:43:5F:77:B1:B5:0A:E9:6D:D4:EF:DF
Authority key identifier: 75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
Certificate issuer: /CN=A91C72E6/serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Certificate serial: 01E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
Manifest number: 01DE
Signing time: Fri 05 Dec 2025 00:59:10 +0000
Manifest this update: Fri 05 Dec 2025 00:59:10 +0000
Manifest next update: Fri 12 Dec 2025 00:59:10 +0000
Files and hashes: 1: dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl (hash: CACZQnROwqbBB69UXNlsVr8z2EXzPBebWRG7SLyzFys=)
2: 2340D07AF2F111ED91F08A4FC4F9AE02.roa (hash: VgWfSFvnBqBZBBT7n2uea4PCFkDi3gg2tHZzpCuKDJA=)
3: 23EE2B76F2F111ED91F08A4FC4F9AE02.roa (hash: gpne2Z9eCccwlEkyZjX90RD5Y2MRSV5puraHdA9qCqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C72E6, serialNumber=752533B1852F7D2AC6E70DCDEBFD547DDC438F94
Validity
Not Before: Dec 5 00:59:10 2025 GMT
Not After : Dec 12 00:59:10 2025 GMT
Subject: CN=69322e5e-1ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:26:1a:96:72:8f:f3:d7:93:98:70:42:6e:
26:98:3d:d3:47:da:04:0a:10:14:b4:bd:c1:b3:e5:
bf:24:59:2a:a6:36:0f:5f:eb:1c:e4:c7:44:27:ba:
d3:0b:7f:4e:00:41:43:a4:03:66:2c:20:0b:f1:5b:
e2:7f:3d:47:cc:21:a7:4f:37:1b:f8:b0:15:57:2c:
92:9b:17:ab:be:13:d5:25:37:5e:d1:ed:8a:02:95:
67:7a:96:a9:b7:85:96:6c:3e:eb:02:d6:7e:be:83:
e9:55:8c:35:28:7d:fb:76:d2:7a:94:6e:fb:70:50:
6e:54:49:f2:66:8d:1c:26:cf:fd:ba:5e:30:da:65:
8f:2e:87:7b:76:09:95:08:ce:18:db:90:4e:d3:65:
af:02:d2:94:39:d2:1a:47:f6:4c:2a:69:47:d6:11:
42:e7:34:f0:f3:ad:24:2f:40:ab:d9:1c:f9:b5:a0:
2d:07:18:8e:df:44:80:22:3d:93:7a:c6:75:0b:b1:
19:7c:ba:91:60:be:33:d7:c3:47:d8:19:5e:63:c7:
e3:dd:34:65:70:e1:98:62:c8:b1:17:bb:bf:36:92:
d8:19:87:7c:1b:89:08:bb:83:9f:1e:93:66:fc:43:
ac:d8:c6:b9:61:3a:13:b6:97:5a:f1:86:4d:f9:c6:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:49:7A:6B:49:07:9E:63:43:5F:77:B1:B5:0A:E9:6D:D4:EF:DF
X509v3 Authority Key Identifier:
keyid:75:25:33:B1:85:2F:7D:2A:C6:E7:0D:CD:EB:FD:54:7D:DC:43:8F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72E6/E6E6FB32F2EA11ED9099004AC4F9AE02/dSUzsYUvfSrG5w3N6_1UfdxDj5Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:43:aa:be:88:5a:19:c7:c6:28:b3:93:94:95:12:6e:53:02:
14:d1:2c:e9:bf:c3:3f:92:c3:f3:c8:b7:6d:1f:b3:4c:dc:ea:
e0:70:ac:c0:14:e9:dd:cd:16:59:ac:96:b0:03:b2:ef:22:4d:
91:9a:cd:f3:c3:e3:50:d6:72:21:cb:5b:9a:88:83:1f:d1:6b:
8a:b3:5b:7c:37:de:7d:87:ed:18:c6:2d:14:1b:cc:c8:ff:62:
3d:f5:37:bd:dd:aa:da:94:94:8f:88:3a:4e:ba:ca:29:58:58:
8a:11:6e:c4:fe:f2:84:29:d9:31:aa:3e:61:1d:5f:1d:a8:5b:
7e:a5:e5:42:2c:3b:a1:23:7a:76:10:ba:05:04:1c:ba:ba:05:
45:6a:3f:fd:26:48:77:36:b0:6d:0b:a6:9e:1a:69:a4:69:06:
b3:dc:f9:ab:c2:ac:c7:e2:1b:4c:9b:4c:7a:fc:4f:9a:b0:46:
c9:c1:72:bf:e7:40:82:a3:1e:87:66:2f:3a:53:59:e7:fc:f2:
39:eb:07:4c:df:8f:bf:64:df:b4:7a:d2:a6:7d:a4:fa:6a:63:
e2:b6:46:0a:ef:34:66:01:38:e4:b7:5e:8d:b9:02:9e:88:d0:
85:a9:f5:f0:5d:df:a5:4e:31:0b:4e:e9:67:23:43:b2:ee:13:
37:a9:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:07:45 2025 by rpki-client