This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json)
Hash identifier: LawV2SfsGHhC2r7Rpt1NcxtGsKBqCltIcDUozlF0B08=
Subject key identifier: 13:4E:9A:67:FC:99:D4:73:0C:76:EB:A2:42:9A:40:EE:1A:3B:F0:36
Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Certificate serial: 4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
Manifest number: 4D
Signing time: Sun 07 Dec 2025 05:20:54 +0000
Manifest this update: Sun 07 Dec 2025 05:20:54 +0000
Manifest next update: Sun 14 Dec 2025 05:20:54 +0000
Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: yoWrN7OTQZopNP/Vknolg0O/q+K4VDTShfE9SGze1SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:12:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77 (0x4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C
Validity
Not Before: Dec 7 05:20:54 2025 GMT
Not After : Dec 14 05:20:54 2025 GMT
Subject: CN=69350eb6-786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6e:46:52:cb:7a:db:c9:98:5a:46:35:34:3a:
03:31:9c:ec:50:38:5d:e1:c9:4d:ad:36:26:e7:99:
76:0d:46:27:f3:51:6a:87:e2:76:3b:60:0f:8f:a4:
b3:ab:48:82:b8:71:1a:35:64:11:f4:4c:6e:dc:0f:
2b:d7:7c:1d:31:34:d6:b1:07:4c:61:29:19:59:69:
4a:d9:4d:73:1f:fb:5b:51:bb:c3:98:86:45:3f:b6:
6f:12:c7:92:10:e7:aa:ec:0f:23:8f:fa:60:f7:20:
1c:61:08:26:09:ac:0c:17:37:11:2d:90:25:d2:77:
4c:49:cf:13:f4:69:75:fd:77:46:0f:b8:38:f0:6f:
fa:c3:1d:8e:4c:82:28:7e:22:f0:75:54:fb:bf:b0:
d9:07:38:71:65:47:9e:e8:5b:15:ac:87:d8:42:00:
d9:65:81:4d:3b:5b:bf:c2:e6:ea:6f:66:3e:c1:ec:
ff:92:0c:14:c3:65:22:e5:9e:8e:99:80:27:54:1d:
18:fd:b6:cf:37:3e:43:7d:81:1d:b9:ed:d2:53:df:
8c:0a:fd:1e:ec:53:9c:46:6d:71:e4:ca:bb:02:15:
69:1b:70:45:9e:ab:fe:da:fa:47:1c:39:e4:2c:fc:
70:07:a2:59:af:36:54:59:de:9e:88:5a:f4:93:1d:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4E:9A:67:FC:99:D4:73:0C:76:EB:A2:42:9A:40:EE:1A:3B:F0:36
X509v3 Authority Key Identifier:
keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:06:40:37:1d:73:ae:6d:e3:be:a1:d4:ef:86:1f:0a:38:d7:
90:cb:1a:63:69:70:aa:12:d3:4d:11:07:70:5f:88:28:ca:e4:
c4:76:ef:a2:c3:70:ad:04:85:53:b0:e9:03:c4:fa:42:96:08:
c9:95:88:77:2c:b1:48:bf:61:f3:51:c9:17:84:d5:47:38:96:
1f:9a:39:6b:88:2a:32:0e:1e:ed:ea:f5:64:c9:b9:48:6a:63:
bb:7a:7d:e0:b2:42:33:fb:fd:dc:20:8d:6f:b1:a6:2c:bb:52:
d9:ab:6e:07:ec:c1:70:a8:95:4a:a4:4a:a6:48:14:b7:24:1a:
cb:0c:a2:f5:9c:07:ad:8f:90:e2:d8:87:5d:a2:17:74:fe:a7:
a7:6d:d6:69:8a:7b:1d:c6:42:01:6c:3f:5f:70:36:c2:bb:d6:
75:b4:2f:d9:a7:8d:1d:88:5b:81:76:58:05:be:8e:99:8f:19:
01:db:b8:b1:40:56:8a:53:da:a5:d2:c4:c0:81:e9:47:e8:7c:
4c:1d:80:43:8b:2f:f7:92:44:b7:b3:65:f7:69:72:43:93:a6:
16:1f:c0:da:4a:54:07:cc:2a:36:f7:f7:d4:45:38:0b:aa:1c:
33:93:a2:6b:bf:55:1f:19:6a:17:55:89:dc:b9:6a:b5:1b:a9:
0d:98:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:44 2025 by rpki-client