This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json)
Hash identifier: 68I/fAjx8MdM+/qBafv41+OTcKCoyNC7vkLNb0nMl4Y=
Subject key identifier: D8:58:57:95:51:FF:91:F8:E7:C8:90:B5:63:7B:31:06:9C:DE:91:9F
Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
Manifest number: 0ACF
Signing time: Sat 06 Dec 2025 19:23:50 +0000
Manifest this update: Sat 06 Dec 2025 19:23:50 +0000
Manifest next update: Sat 13 Dec 2025 19:23:50 +0000
Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: 4QJYTNR8gZaor6vEHwM0+uJJIsF8LmQSKX9GuVO6Jr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Validity
Not Before: Dec 6 19:23:50 2025 GMT
Not After : Dec 13 19:23:50 2025 GMT
Subject: CN=693482c6-5c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:08:d8:e4:ce:c4:08:0f:aa:a4:1d:18:5d:
79:41:e1:45:30:c5:75:f7:25:88:77:86:fb:76:6d:
e2:ba:fe:4d:14:0e:2c:0c:99:8d:a0:46:fb:21:32:
3d:9b:79:ca:f1:77:24:0e:6a:7b:f3:cb:11:dd:d2:
d6:6b:5e:a1:be:eb:44:f0:6f:8b:60:eb:ea:26:d0:
40:5c:7e:01:e0:2d:ea:be:7c:77:f6:26:b8:71:db:
fa:41:5c:37:c9:24:1a:57:1e:be:40:20:80:51:a3:
c8:21:cf:89:27:44:03:69:46:0b:48:e5:0b:4e:ee:
25:05:22:f8:96:7e:77:cf:4e:ca:71:3c:ce:a9:00:
43:3d:01:30:1b:9c:73:88:dd:67:d0:68:63:6d:6d:
51:62:c2:6f:a7:2c:91:e0:89:f8:e4:9a:e9:96:f3:
4e:34:87:37:61:85:b2:58:b9:68:b8:4b:0d:2f:49:
c4:8a:f8:a1:50:51:7d:01:e0:27:90:3c:b7:c8:4e:
02:1e:d5:6c:44:cc:7c:7d:f1:94:e1:d3:f6:64:df:
0e:c0:26:fc:65:0e:ee:8c:c1:0f:0f:7d:34:fa:de:
0d:6b:ad:c7:81:23:f8:82:3d:43:d1:72:49:33:91:
b0:dc:0a:5b:8b:ff:44:35:27:18:df:9f:bc:d9:4c:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:58:57:95:51:FF:91:F8:E7:C8:90:B5:63:7B:31:06:9C:DE:91:9F
X509v3 Authority Key Identifier:
keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:a8:c8:b4:4a:20:d4:ae:61:25:0c:b0:81:bc:bc:07:6e:41:
7b:cb:88:64:d9:a5:08:ab:b4:40:bd:4c:b3:66:77:ef:0a:04:
3a:05:ce:4b:c3:d3:b5:aa:13:88:67:ae:a1:07:48:ce:81:9b:
56:a2:05:a5:c0:16:46:a0:85:d7:c9:f9:ba:9d:11:8a:69:f6:
25:ec:5a:41:c2:b1:94:e9:3b:a2:6b:cc:fa:26:7c:15:86:ec:
1b:d1:1e:fd:67:e1:8d:1b:e2:04:44:5d:47:b9:9a:b1:7b:2e:
8a:63:d6:fe:1b:8c:4a:57:ca:4a:d8:da:ee:c2:d6:54:28:e3:
12:55:2b:ce:83:f1:8b:40:d1:78:ac:a9:4f:49:44:c6:26:31:
c9:02:03:0d:4e:9b:78:ef:e9:99:bc:3b:77:10:55:0c:38:78:
6a:93:01:91:fe:6d:a3:e1:01:23:f7:0a:f7:9d:a5:44:be:6b:
98:d2:52:27:7b:bd:bc:e5:28:77:44:04:71:25:7b:b5:d5:56:
35:1b:73:6e:2b:89:a7:d9:5e:a1:cc:2d:b9:d4:52:58:21:56:
20:fe:0a:8b:0f:ac:aa:c3:2c:9f:5d:b3:85:f9:f9:df:c2:61:
4d:83:69:9e:34:25:9e:5d:79:53:84:34:8b:c0:8e:40:1f:6e:
0e:f3:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:18 2025 by rpki-client