This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier: l82CwKqmYVvRq4/67iwnmEVzkHtcSHQJc2LKY3pMczc=
Subject key identifier: 9E:78:15:5F:E5:7B:54:A5:32:D4:F4:EB:81:F3:E1:54:65:0F:27:19
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial: 34F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number: 34EE
Signing time: Sat 06 Dec 2025 14:29:52 +0000
Manifest this update: Sat 06 Dec 2025 14:29:51 +0000
Manifest next update: Sat 13 Dec 2025 14:29:51 +0000
Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: PgbKee8q1zNKuZD6simypmNKl8yQwHnwy6ZHQyumKrU=)
2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13554 (0x34f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
Validity
Not Before: Dec 6 14:29:51 2025 GMT
Not After : Dec 13 14:29:51 2025 GMT
Subject: CN=69343ddf-e36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:b5:42:e0:1f:4c:ef:84:ba:85:3c:1c:34:
b2:3e:65:fc:a1:0c:19:50:d8:04:16:f2:09:5a:3a:
a7:ad:25:19:50:79:3a:41:fd:11:6e:90:a7:32:bb:
5d:62:ab:bd:1f:96:17:7b:fc:69:e7:75:cd:a5:20:
28:05:e7:f2:c0:d2:35:ea:42:dc:62:5b:91:bd:69:
44:20:83:65:c2:75:16:16:04:6e:95:b6:a5:b7:b4:
ec:34:00:f4:63:0f:8d:36:76:20:da:fe:b5:ca:50:
90:1b:bb:45:f5:31:1f:34:44:0e:5f:7a:c0:8b:b3:
59:dd:0e:ad:fe:a0:26:b2:40:c8:eb:dc:ea:67:1c:
a7:24:2f:17:2d:f8:1f:84:96:f3:81:9f:25:dd:4e:
ee:b1:ef:84:7f:5a:4c:a7:66:bf:de:f6:c8:33:0f:
40:f6:46:14:52:a8:98:93:5d:55:ea:6b:bf:a3:eb:
66:7e:6c:65:5a:9b:d2:2c:f4:18:02:af:78:52:73:
d4:cf:46:b1:34:fa:da:f7:05:18:28:1e:85:f7:4d:
e5:a0:e6:bc:9f:2d:f3:47:cc:e5:65:31:f0:2d:fe:
cf:50:17:de:2f:a3:bd:d4:a1:e5:cf:e4:b6:3e:e0:
a0:5a:7a:cf:ad:2c:f7:bc:44:96:14:d9:65:43:5a:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:15:5F:E5:7B:54:A5:32:D4:F4:EB:81:F3:E1:54:65:0F:27:19
X509v3 Authority Key Identifier:
keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:c6:03:ff:9d:5f:bd:bf:39:49:df:50:3c:45:5a:4d:83:9c:
bb:12:9d:95:10:7a:4a:0c:12:af:02:5a:15:93:44:a0:de:c7:
d8:10:39:34:fb:4c:3e:71:97:31:e0:94:de:72:93:dd:66:5a:
9a:6f:0d:60:72:97:00:dc:e4:d4:d4:04:87:25:f3:ff:5c:56:
b0:55:29:cf:8e:1a:3a:6b:4e:4d:be:11:ef:db:53:04:72:b7:
a4:00:28:6a:ff:86:53:d0:cf:d7:e3:0d:87:c2:bc:97:10:0b:
c0:4d:a7:4c:ef:7d:58:f2:ff:93:e8:8b:a1:c7:7e:b9:e0:f5:
4c:20:b6:cc:0c:ca:69:8b:0c:98:28:92:9f:7c:46:cf:b5:08:
fd:4e:68:2b:a5:07:94:6a:6e:10:c7:72:b1:65:48:3d:67:d1:
07:8b:de:08:e2:43:af:d5:2e:7b:90:ce:3b:f0:e1:d2:d2:d0:
df:0b:b5:e3:ab:51:af:cb:b8:77:47:d7:c1:40:f7:fc:43:c3:
6b:da:48:61:f0:d9:42:9f:3d:86:ad:bc:96:39:bf:19:73:39:
2d:72:83:b5:b0:e8:5a:96:25:a8:01:30:04:b7:07:e9:91:98:
d3:c9:9b:d6:a0:97:af:8d:14:de:3e:fc:40:bb:dd:17:d4:dd:
8c:1f:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:08 2025 by rpki-client