This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
File: ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft (raw, json)
Hash identifier: GoFtMYckdx3zItWGmJcwPsuLDWg/fSWn4Z0ZKxibFT0=
Subject key identifier: 7E:A2:E7:E5:92:16:A1:1B:09:9B:77:6C:3D:B7:E3:02:88:F0:FE:A9
Authority key identifier: 92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
Certificate issuer: /CN=A91CB8BA/serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Certificate serial: 0910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
Manifest number: 0908
Signing time: Sat 06 Dec 2025 19:28:30 +0000
Manifest this update: Sat 06 Dec 2025 19:28:29 +0000
Manifest next update: Sat 13 Dec 2025 19:28:29 +0000
Files and hashes: 1: ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl (hash: 1+kbIK42eqJQoEhdsOm+qq4YFqerFGWrlHxjkhZYAUE=)
2: 0B6B9DE6BAAE11EA8F1DA435C4F9AE02.roa (hash: Pjk7KOVj7H3BoAMc7NRiJiAFk/4ChSG9JZtPBtMlKPY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=922D60EA193967177BC6C39A4068598A3B75A6D3
Validity
Not Before: Dec 6 19:28:29 2025 GMT
Not After : Dec 13 19:28:29 2025 GMT
Subject: CN=693483de-653d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:b1:09:9e:a2:f0:7b:e6:d8:18:cd:1e:a4:
fe:1c:94:57:7f:16:90:e8:bc:71:c9:25:91:ea:52:
47:95:35:79:ba:fa:31:fd:e7:fa:21:18:5b:d8:b6:
8e:84:1f:dd:17:f8:e7:a9:c4:c8:18:02:53:81:fa:
4f:6e:8b:a2:e5:b7:40:dc:50:79:92:01:9e:e3:21:
26:01:68:a0:7d:89:53:57:02:7a:65:28:29:7f:26:
e4:e5:4b:3c:d0:a5:02:b4:3a:9f:44:8d:81:c6:ad:
a6:0d:30:52:f1:75:c1:66:9d:87:80:15:1b:ac:f3:
d4:14:07:4e:3f:de:83:13:9c:f0:75:c6:be:ce:2a:
c0:3f:1c:e4:27:7f:b5:78:ce:8c:b7:3a:01:b1:53:
e4:86:6f:fe:17:58:62:29:72:f8:a1:3a:e6:ce:4f:
ee:15:71:dc:58:8e:e1:ce:8e:02:f5:b4:68:06:b8:
b0:a6:bc:e8:d1:90:69:55:89:8b:cf:47:ea:88:6e:
b6:9c:8c:f1:4e:b7:df:4b:21:f4:34:7a:55:ea:45:
03:4b:3d:60:a1:74:19:bb:7e:7c:cc:50:a0:6a:b0:
e7:63:37:dd:62:75:80:e1:25:90:1b:98:9e:ce:f2:
be:e0:ef:f4:1e:84:44:c2:2f:6f:e2:b5:67:64:92:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A2:E7:E5:92:16:A1:1B:09:9B:77:6C:3D:B7:E3:02:88:F0:FE:A9
X509v3 Authority Key Identifier:
keyid:92:2D:60:EA:19:39:67:17:7B:C6:C3:9A:40:68:59:8A:3B:75:A6:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ki1g6hk5Zxd7xsOaQGhZijt1ptM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/320901C4BA8511EABA838E30C4F9AE02/ki1g6hk5Zxd7xsOaQGhZijt1ptM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:73:ef:c1:a9:5b:4a:14:7d:5a:14:12:ae:16:c5:13:bb:e2:
22:8b:83:a7:73:a6:e2:b5:65:b3:da:cd:08:48:2a:3f:89:03:
d8:a4:82:45:31:9a:0c:6a:c5:93:da:99:86:a7:b5:11:34:52:
c1:f3:c2:aa:0e:41:e8:8e:cc:b1:2b:e7:07:ed:ee:5f:1b:03:
7e:c4:ca:6c:d6:58:31:50:ac:7f:a5:9d:97:3f:8e:0f:1b:02:
8f:63:83:de:a1:1c:7a:d6:23:9d:2f:fa:77:05:4d:96:08:d6:
f4:eb:51:14:58:db:1c:48:e7:de:2e:83:32:ea:ba:a9:e0:ec:
96:58:35:23:63:5e:15:76:e5:05:4b:62:ca:12:cc:25:e5:b3:
1e:d8:48:0a:6e:e3:2f:a7:e9:9f:51:c4:8d:47:9d:53:40:18:
de:ce:2e:99:6e:0b:4c:71:bc:70:98:60:f5:99:3a:0f:09:7d:
b3:4b:a0:7b:c0:98:64:5f:4a:38:1b:28:43:75:b2:b0:23:25:
3b:9b:d6:92:24:54:2c:ea:00:8c:c5:41:5f:b2:b4:c4:e2:47:
9d:21:08:e8:d4:dc:87:5f:e9:7a:aa:5d:2b:d5:5e:6c:0d:91:
56:2e:88:24:d1:47:93:4c:3c:d5:de:bf:1f:42:73:9e:ca:02:
8d:3f:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:55:44 2025 by rpki-client