This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
File: m1pTZdorJfppi3Awk8-9wqLCP88.mft (raw, json)
Hash identifier: rgw1Nq2kBQ4JFXaC9Vkve5PCzLb+mSXGIHfTUDymL/A=
Subject key identifier: F8:A6:D0:89:3B:0C:A5:07:E9:70:6F:EB:98:04:31:32:E4:F0:D9:73
Authority key identifier: 9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
Certificate issuer: /CN=A91C7B68/serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
Manifest number: 0AD0
Signing time: Sat 06 Dec 2025 19:23:53 +0000
Manifest this update: Sat 06 Dec 2025 19:23:52 +0000
Manifest next update: Sat 13 Dec 2025 19:23:52 +0000
Files and hashes: 1: m1pTZdorJfppi3Awk8-9wqLCP88.crl (hash: LscpwP/raZZML058CNtnCHTCgJvLXhddlrN08BjftRM=)
2: 048E963C92B611F0841D2F21C4F9AE02.roa (hash: N4gw2f/bDc4vAICNgZt17fcv5vKiGHjdnsBTX4dpjPM=)
3: 05287CD492B611F0841D2F21C4F9AE02.roa (hash: aZPKGOPG+1Lf391VuMHJv72RD5TC+yEcx6KaYkumZxA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9B5A5365DA2B25FA698B703093CFBDC2A2C23FCF
Validity
Not Before: Dec 6 19:23:52 2025 GMT
Not After : Dec 13 19:23:52 2025 GMT
Subject: CN=693482c8-0b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:86:6a:5c:3c:3a:86:a9:24:92:a3:fe:a7:
c6:79:76:31:9d:67:ec:71:f0:d9:50:f0:25:cb:54:
7e:2c:0c:68:72:56:82:85:f6:ec:e1:ae:2d:d1:13:
79:57:af:d7:9f:46:90:09:41:2a:ef:13:32:fe:c1:
98:42:9b:83:07:1f:55:0c:32:60:95:fe:d2:15:ab:
a1:c7:2d:5a:4e:b6:4f:37:9f:2a:6b:94:be:ca:7f:
38:b2:3c:87:44:bf:1a:fc:08:71:e3:58:a7:77:8c:
2d:ea:cd:21:2f:45:c0:cf:42:80:61:04:c4:67:d4:
5e:8c:0b:7f:bc:59:ce:26:66:f1:e1:53:67:1d:a4:
fc:62:77:de:97:68:a3:1c:83:14:a3:b7:32:54:8d:
a7:f0:a4:6e:e6:28:4d:0b:59:49:37:c6:4d:11:02:
a2:dd:21:a4:b8:ef:e1:7f:b5:0b:5a:19:c8:ad:22:
a7:c8:64:25:78:e1:9a:77:88:2c:b4:83:fc:7f:32:
dd:a3:57:cb:6c:d0:84:6b:17:46:d8:9b:e4:df:e1:
36:72:5d:0c:97:af:a6:4e:73:b1:69:4b:b8:fc:00:
ab:e0:e5:a4:3a:94:2e:39:67:da:c5:dc:85:aa:4c:
dc:b8:e5:e1:8c:99:37:e4:8e:1b:43:c8:66:a5:60:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:D0:89:3B:0C:A5:07:E9:70:6F:EB:98:04:31:32:E4:F0:D9:73
X509v3 Authority Key Identifier:
keyid:9B:5A:53:65:DA:2B:25:FA:69:8B:70:30:93:CF:BD:C2:A2:C2:3F:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m1pTZdorJfppi3Awk8-9wqLCP88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/m1pTZdorJfppi3Awk8-9wqLCP88.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:f4:79:74:ba:5e:8b:b7:81:a6:e2:1f:a4:0c:c7:88:df:5a:
fd:2b:fc:2d:80:e2:10:71:1c:eb:a2:e3:43:f8:2e:96:a5:12:
66:92:84:6a:26:b7:d8:3c:93:65:fd:c4:04:b5:27:12:d2:09:
2c:3c:8c:00:b3:38:52:f0:2f:71:87:cf:00:51:9e:be:ff:de:
df:d6:4e:7e:64:27:09:98:ea:3d:84:a1:1d:c3:03:ce:92:37:
09:5b:c8:2c:0d:01:21:85:f2:45:68:2a:17:68:03:63:2a:27:
d7:ce:15:24:60:ef:cb:fb:dc:7c:c8:d5:56:a9:c3:1e:be:8f:
5a:3d:fe:b1:fe:b7:58:e3:a2:77:af:9b:59:03:5b:8d:1a:56:
98:57:a3:fe:cb:fd:f4:bc:26:59:d0:e4:d1:53:c0:31:cc:14:
86:81:a0:72:0b:06:98:7a:7a:6b:37:27:76:c5:55:cb:9e:56:
ac:86:28:c7:29:65:d4:69:d1:81:77:69:63:85:36:b0:58:06:
b8:04:0b:cb:bd:86:56:07:cf:d4:3d:84:9f:a0:30:24:28:8c:
29:f2:57:7c:dc:c9:5e:ec:18:53:0f:91:0b:b9:d4:24:7b:24:
1d:7f:cd:da:3a:42:98:61:e8:ac:73:9f:ee:b9:bd:f8:24:c2:
08:73:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:57:31 2025 by rpki-client