This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
File: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft (raw, json)
Hash identifier: QrZjSEHYRXXinC3Sjp9Rs3M9YsU99ljIDqE78/Ksfu8=
Subject key identifier: 02:A8:50:65:C7:29:F7:39:9D:64:70:15:D9:F0:40:7F:23:F0:53:16
Authority key identifier: 08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
Certificate issuer: /CN=A91C941B/serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Certificate serial: 0553
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
Manifest number: 0544
Signing time: Thu 04 Dec 2025 22:03:37 +0000
Manifest this update: Thu 04 Dec 2025 22:03:36 +0000
Manifest next update: Thu 11 Dec 2025 22:03:36 +0000
Files and hashes: 1: CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl (hash: gRLMqE+cdL8ZZuTU/dz+Ddoo0kpwKdYFOyuqvx4tMkk=)
2: B3883EE61A8C11ECBD6CCF18C4F9AE02.roa (hash: K6zEQIX3Xs70jZXyUBIkq7itCCV+/w4+T7TPTazGJDw=)
3: F719961A1A8611ECB908E939C4F9AE02.roa (hash: K4Tk1pgMDNh5SKenYzBLQtmFUIf8LUH33Tf6G2W39As=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1363 (0x553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C941B, serialNumber=08025B9B44EED8AE0B76F11E0372CE961877AD9F
Validity
Not Before: Dec 4 22:03:36 2025 GMT
Not After : Dec 11 22:03:36 2025 GMT
Subject: CN=69320539-6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:18:24:f1:de:2a:c4:56:e9:d2:92:b4:c7:
d3:c4:98:d3:16:7c:97:b1:b4:cc:42:6b:d1:ac:c7:
dc:bd:0d:02:8a:56:56:f4:b4:4d:67:a6:78:eb:04:
a1:98:5c:cf:77:b9:86:62:41:51:0e:d6:b3:c2:fa:
9c:fb:1e:84:67:69:39:b2:26:d8:34:f9:ad:1f:b0:
00:7f:c7:24:af:0f:2e:5b:87:72:34:d5:e9:e4:86:
20:ac:81:66:e7:b9:d8:f1:76:2e:c8:34:03:f9:21:
a2:b6:48:55:78:2c:56:ac:de:67:49:3e:59:8c:96:
6d:6b:ea:6b:f2:51:03:8c:e5:cc:1a:12:76:bb:7e:
00:7f:a4:f1:75:a5:de:d1:a8:9b:2e:a8:ff:ca:70:
b5:7f:ca:ac:87:0d:ea:06:f0:ae:75:c4:55:79:bf:
17:b7:eb:d5:95:a8:6b:e8:9d:6a:43:05:8d:d4:19:
2d:5e:25:38:22:e9:4b:2b:f7:69:c9:cd:d6:7b:32:
ae:97:95:23:eb:6f:52:36:98:f5:6a:06:59:0d:c4:
ae:da:86:19:bd:61:1f:cf:16:aa:75:a1:e1:94:43:
3f:70:8c:64:5e:e4:7b:18:60:ae:f1:d9:3e:e5:94:
06:15:95:fd:c6:09:fe:a0:b6:6f:f1:45:b1:80:af:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:50:65:C7:29:F7:39:9D:64:70:15:D9:F0:40:7F:23:F0:53:16
X509v3 Authority Key Identifier:
keyid:08:02:5B:9B:44:EE:D8:AE:0B:76:F1:1E:03:72:CE:96:18:77:AD:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C941B/69F6B7DE1A8311EC8C922229C4F9AE02/CAJbm0Tu2K4LdvEeA3LOlhh3rZ8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:59:ce:36:3a:5d:90:52:0b:76:ec:0b:e9:7d:12:e3:6c:44:
d7:16:27:94:00:68:93:04:22:8b:89:eb:d8:08:9d:23:14:f7:
2f:e0:08:cc:29:51:4e:da:3d:ee:bd:ab:ca:a0:90:2e:9b:17:
cf:09:75:19:a7:c2:e0:28:a8:ec:a5:7b:82:71:90:ca:f9:50:
f7:11:5e:ca:ed:94:04:a6:8b:76:9b:47:8a:08:97:e8:5e:96:
82:85:fd:c8:a3:c7:b4:ff:48:78:e7:2e:7b:7f:73:70:48:f3:
44:fe:99:7d:3a:58:2a:90:6b:e3:86:d3:a1:17:90:eb:65:03:
ac:b3:c5:39:20:55:ca:28:ed:f0:f7:a0:cf:e2:11:20:db:4e:
24:93:47:df:48:62:1a:25:c7:6e:55:44:f6:63:27:35:c5:3b:
59:98:ee:05:c3:92:eb:cc:12:ae:67:0f:64:7a:da:27:95:d3:
32:61:46:8f:81:ae:02:a2:8e:a8:5d:4e:bd:d4:51:c6:a9:1f:
19:9c:3e:78:ff:df:64:19:d1:c0:6e:52:d0:62:aa:5a:c3:18:
31:70:69:c0:c0:cd:d4:0d:ad:9c:a8:74:cb:7b:35:e1:e3:0b:
e5:a2:c0:af:9f:a2:7c:e7:88:f7:7e:35:68:3c:39:3f:3b:a6:
d9:68:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:34 2025 by rpki-client