This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
File: kzrI56xL07WCmJ_Mty_JJ9cWQks.mft (raw, json)
Hash identifier: SJPWJG/Y0/TAuovpMjdcejTTYVstZ5uH9NbgOacjUtg=
Subject key identifier: AE:E9:88:25:7B:1D:C1:7B:5D:57:11:5A:63:28:A8:7B:DB:4E:0E:0F
Authority key identifier: 93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
Certificate issuer: /CN=A91C79E1/serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Certificate serial: 087D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
Manifest number: 0877
Signing time: Sat 06 Dec 2025 19:43:15 +0000
Manifest this update: Sat 06 Dec 2025 19:43:15 +0000
Manifest next update: Sat 13 Dec 2025 19:43:15 +0000
Files and hashes: 1: kzrI56xL07WCmJ_Mty_JJ9cWQks.crl (hash: T7W6JQFzeJWItHiGWK7eT+K39u6hXqGUkN0Ypw0ZsVw=)
2: 26D0F9B82A6611ECB12FB439C4F9AE02.roa (hash: o8uKSFAZOoKiAV/aw+gEXp611EqrXFJMlAGF3VnwD9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C79E1, serialNumber=933AC8E7AC4BD3B582989FCCB72FC927D716424B
Validity
Not Before: Dec 6 19:43:15 2025 GMT
Not After : Dec 13 19:43:15 2025 GMT
Subject: CN=69348753-d8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:c5:81:55:23:e8:ba:9a:93:85:04:9d:4a:
17:43:e6:ad:9f:29:ca:4b:ad:4a:6d:01:03:28:0d:
09:50:ec:0b:70:7e:02:00:42:37:45:24:72:d3:7f:
48:33:be:e2:0a:aa:3f:1f:30:82:87:38:71:00:c6:
39:03:0e:d3:ad:73:76:fc:62:2e:5d:76:48:d8:d2:
dc:0f:76:61:6c:79:d4:03:85:2a:12:f2:1a:7e:3f:
68:84:7e:4d:cf:9d:cd:fa:9c:b1:5e:5d:4d:13:f2:
5f:5a:1a:62:56:8b:77:d7:7a:dc:39:b9:96:dc:15:
f8:67:a4:4c:95:35:25:f3:73:eb:a4:19:b9:15:10:
69:60:6f:02:9d:ce:76:f8:bf:34:f7:e1:54:8c:72:
a1:bf:3f:11:bb:13:ff:56:fc:e5:f3:75:c1:61:69:
22:f1:cf:23:49:77:22:f4:82:83:9a:f2:55:e1:a0:
79:bd:a8:85:c1:2d:cf:18:b8:52:15:b4:0b:e7:b3:
7d:0b:83:3d:95:b3:8e:98:c3:7b:45:cb:0d:8e:7c:
f4:d6:f5:fa:68:26:b2:9b:14:00:80:a9:eb:6c:82:
fe:18:71:02:92:e7:c6:3b:4c:2f:22:08:b0:bf:3a:
c1:44:eb:ec:b4:ab:59:c5:a3:ca:dd:45:bd:ca:ff:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:88:25:7B:1D:C1:7B:5D:57:11:5A:63:28:A8:7B:DB:4E:0E:0F
X509v3 Authority Key Identifier:
keyid:93:3A:C8:E7:AC:4B:D3:B5:82:98:9F:CC:B7:2F:C9:27:D7:16:42:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kzrI56xL07WCmJ_Mty_JJ9cWQks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C79E1/6556F8DAD78411EA9C5D9640C4F9AE02/kzrI56xL07WCmJ_Mty_JJ9cWQks.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:bf:ca:78:df:e5:9b:ef:a4:c9:62:96:e1:57:bd:e6:88:d9:
03:05:e8:33:ad:85:29:8f:50:68:0d:95:a4:e5:7c:ac:73:ef:
1a:bb:9f:2f:2c:b3:96:07:dc:9c:b0:45:b0:e5:dc:19:0c:2b:
51:b9:f4:57:9d:b5:40:aa:7e:b0:65:b5:09:64:90:21:08:f6:
83:da:43:8a:12:8e:54:cb:21:96:1b:e5:1b:3e:f2:79:fd:b4:
19:d5:1c:dd:21:d8:25:8f:91:18:b0:23:2b:9b:6e:aa:df:a8:
39:7a:4a:9e:bf:99:bc:4b:94:c1:6a:93:12:ce:ae:bd:ee:c7:
14:22:ca:93:6f:59:eb:51:88:15:fb:3b:e3:70:87:c5:d7:d4:
5d:06:e3:d7:fa:e5:64:73:44:dc:5d:06:1c:c0:d8:04:3a:fb:
0a:98:e2:f7:53:58:aa:81:00:cf:55:aa:d9:12:ac:31:6e:20:
48:75:c9:55:d2:21:3a:51:c4:98:7e:c6:cd:f2:45:f6:73:ef:
00:c6:d9:de:6e:df:f2:01:0c:35:25:8d:a6:06:b5:bc:d1:8d:
9d:8c:c7:09:e0:d8:2e:d9:8a:ac:03:29:d5:5c:e9:1f:3f:87:
46:8b:da:45:b5:cb:a4:54:b5:ee:d3:03:a0:32:b4:66:58:89:
5a:3a:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:19:38 2025 by rpki-client