This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
File: akl-7V9P4sFRZN0tB_xN1SvOiSE.mft (raw, json)
Hash identifier: vrxz84Z59PdXGmhUa1lsAIDWBT1b7MG7WrHO1GWkMYk=
Subject key identifier: E5:15:2B:EF:4A:D2:5F:EB:86:7E:20:87:11:C8:8C:97:6F:FC:C4:41
Authority key identifier: 6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
Certificate issuer: /CN=A91C7EF2/serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Certificate serial: 4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
Manifest number: 49
Signing time: Fri 05 Dec 2025 05:13:03 +0000
Manifest this update: Fri 05 Dec 2025 05:13:03 +0000
Manifest next update: Fri 12 Dec 2025 05:13:03 +0000
Files and hashes: 1: akl-7V9P4sFRZN0tB_xN1SvOiSE.crl (hash: g17Dp/ldwyHldUdiHniQtoBVMirENuoP3ko5lrh4szM=)
2: D2B93B4C638211F087594469C4F9AE02.roa (hash: Pu8GeUQM5zPY/klLoi38DXyDw9LChnXWL5CaLmbea3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7EF2, serialNumber=6A497EED5F4FE2C15164DD2D07FC4DD52BCE8921
Validity
Not Before: Dec 5 05:13:03 2025 GMT
Not After : Dec 12 05:13:03 2025 GMT
Subject: CN=693269df-21c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:15:0d:ae:6b:7e:65:97:49:32:f6:84:a0:
64:d0:ab:35:16:b3:8b:b1:d3:76:d4:7a:e5:0f:c6:
fe:6b:75:ed:d4:84:e3:48:2e:68:1f:3b:62:41:b2:
d4:e7:49:e3:b0:51:fb:28:21:d4:12:0a:6b:ac:cd:
e6:f5:09:93:76:66:5b:ba:03:c7:c9:3a:71:9f:e9:
42:ef:7a:74:30:2a:2a:f7:8b:de:31:4f:ae:ec:02:
0a:1c:a0:5e:62:7a:e4:28:6a:b6:50:76:93:aa:31:
27:b5:59:21:c7:35:fd:78:2a:b4:42:0d:bd:ee:59:
9a:81:f1:f4:bd:c2:fe:72:65:af:13:15:9e:5a:98:
ad:d7:75:69:9d:0a:26:a2:77:ea:f5:e1:6e:56:8d:
46:f4:00:bf:5c:07:b4:2f:6a:96:03:d9:80:f8:16:
0d:8d:8f:a9:aa:47:70:02:18:af:6f:48:47:2c:d9:
09:d9:8a:c1:28:86:74:8b:93:95:95:3f:ce:f1:9e:
2e:e1:88:3a:03:8f:b7:26:9d:2c:65:fd:b1:54:89:
36:4c:50:c8:12:72:85:57:58:e4:36:b7:02:b4:3d:
2e:9a:6c:0a:53:3a:9b:a9:d6:4b:3d:6f:dd:37:19:
3f:f4:8b:2b:7d:21:cc:19:5c:9e:49:08:00:a4:2e:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:2B:EF:4A:D2:5F:EB:86:7E:20:87:11:C8:8C:97:6F:FC:C4:41
X509v3 Authority Key Identifier:
keyid:6A:49:7E:ED:5F:4F:E2:C1:51:64:DD:2D:07:FC:4D:D5:2B:CE:89:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akl-7V9P4sFRZN0tB_xN1SvOiSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6AFBE44C638111F0A33D2364C4F9AE02/akl-7V9P4sFRZN0tB_xN1SvOiSE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:20:b0:2c:e6:6d:e2:65:f8:8d:4c:c7:6b:ca:7b:d5:4d:fe:
6b:5d:7d:1a:9f:0e:c2:f6:d5:7e:6f:0e:42:eb:76:10:25:b7:
26:ab:11:74:20:f9:fc:dc:79:74:f3:fa:55:9a:62:47:38:3d:
dc:41:c0:d2:03:0b:17:9b:c3:76:28:47:6d:25:ad:c0:40:49:
de:38:82:c5:e7:a4:1c:90:3c:62:bd:c3:23:f9:f5:b6:26:d0:
1d:74:d5:ae:61:cd:2a:73:56:a8:66:6d:ca:94:a6:87:4b:7f:
30:09:59:1e:97:65:d5:a2:47:85:f9:99:66:51:38:d1:73:9c:
b1:c7:fd:a0:fc:b6:05:53:08:29:b8:d1:18:35:e2:15:0e:c6:
4f:ec:bd:99:e0:ec:d0:9c:d6:af:94:aa:a2:37:8c:b7:4e:19:
90:f1:94:68:7c:50:f2:ca:c9:d9:82:30:c0:5a:8a:75:31:99:
21:de:d5:57:ac:e0:23:8d:49:ad:f7:0f:94:ca:f3:3f:3f:31:
37:db:d6:44:36:2c:76:39:65:a0:f9:da:0c:6a:37:61:45:64:
b0:97:dc:f4:3c:26:5f:38:54:d7:22:0e:9e:3b:d3:0f:73:c5:
6e:09:b5:36:dd:1d:cb:ec:19:ec:3f:71:ae:af:e7:50:ef:0a:
8a:ff:8e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:26 2025 by rpki-client