This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
File: -mfVMKhwCqjrfU9svpZHvlN_X84.mft (raw, json)
Hash identifier: 4vwFb4zKDRkXOh9pFF7c9THHzTLIdi8MLbDfmgNBwN4=
Subject key identifier: 86:06:3E:BE:5D:45:5F:68:FA:F8:7E:9F:2B:61:7D:36:B7:B1:FA:7F
Authority key identifier: FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
Certificate issuer: /CN=A91CD056/serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Certificate serial: 0388
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
Manifest number: 0384
Signing time: Sat 06 Dec 2025 23:25:47 +0000
Manifest this update: Sat 06 Dec 2025 23:25:47 +0000
Manifest next update: Sat 13 Dec 2025 23:25:47 +0000
Files and hashes: 1: -mfVMKhwCqjrfU9svpZHvlN_X84.crl (hash: zV4vAXm4Y4aHXV9nSOU7DhPJ38c/HpbpMXsP4M/UZ2A=)
2: 3E62F2ECC9EA11ECB6295B34C4F9AE02.roa (hash: mfXzwKGY7gUqiLkJW1SqazxLmJ2CAU7Yff9kCtQmKuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904 (0x388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD056, serialNumber=FA67D530A8700AA8EB7D4F6CBE9647BE537F5FCE
Validity
Not Before: Dec 6 23:25:47 2025 GMT
Not After : Dec 13 23:25:47 2025 GMT
Subject: CN=6934bb7b-356e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:f7:15:64:81:81:af:aa:5e:7b:08:6f:7a:
e3:ab:a3:4f:de:c9:be:eb:f1:8a:f3:38:46:16:79:
f8:63:79:00:f7:5f:ee:36:20:cf:b2:8d:85:9c:f6:
e9:c2:7d:ce:76:95:41:c4:7b:f5:a3:15:2d:fb:76:
75:64:64:61:f4:f0:e7:06:1b:99:2a:28:6f:6d:f3:
d5:11:26:86:85:39:ac:8f:8f:ca:8e:f4:bd:6f:63:
a4:5c:f2:58:4e:e1:34:20:7f:46:37:b1:8c:83:41:
8a:2f:20:14:79:92:0f:a7:5b:d2:c9:48:f8:22:db:
f2:5a:41:c3:7d:05:bc:54:1e:50:88:67:8f:2f:3d:
e6:d2:e8:be:f3:e1:f3:75:f9:4d:4b:a5:fa:05:eb:
f4:35:31:64:43:d5:bb:02:36:2e:36:92:f9:3f:7c:
82:35:33:69:f9:72:05:5e:15:35:59:4e:a8:cf:2d:
3c:2b:42:a8:32:95:af:4c:78:c6:fb:1d:2a:83:dd:
d4:a5:b0:56:60:b8:b4:1e:56:22:ff:e0:c9:aa:28:
7a:f4:ad:b4:55:33:5b:e0:12:8c:d0:5c:b4:03:c3:
86:df:3f:d3:3f:59:fc:7e:28:1f:79:91:7c:27:6a:
48:c3:ce:1e:5c:02:73:1c:2a:f1:41:03:44:ac:8a:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:3E:BE:5D:45:5F:68:FA:F8:7E:9F:2B:61:7D:36:B7:B1:FA:7F
X509v3 Authority Key Identifier:
keyid:FA:67:D5:30:A8:70:0A:A8:EB:7D:4F:6C:BE:96:47:BE:53:7F:5F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mfVMKhwCqjrfU9svpZHvlN_X84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD056/D70264AAC9E611ECAC228D30C4F9AE02/-mfVMKhwCqjrfU9svpZHvlN_X84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:11:bc:1f:b6:3c:ff:0d:a6:26:9f:fa:a8:8d:c6:d9:f4:
21:86:d5:5a:86:bd:6c:46:ae:6d:b1:63:2e:29:90:ce:9f:b3:
10:4c:af:c0:cf:ab:ec:ea:b4:7b:fc:89:50:2a:1d:21:1d:57:
f6:20:c0:37:bd:f3:ae:50:ee:b7:cf:70:fa:0d:ba:4e:fb:03:
ac:4b:d9:71:aa:70:9e:6c:50:93:b7:b9:bc:64:f3:5c:d9:01:
23:06:07:93:48:6f:3d:a1:8a:95:2b:c5:4b:28:d2:86:02:79:
18:e5:66:06:a6:aa:c9:b7:e9:21:83:0f:ce:6d:bf:7b:8b:f8:
fd:53:c7:b7:2e:e1:1e:a3:eb:36:c1:58:bb:5c:f1:55:fa:cd:
ad:13:19:fa:1a:78:54:f6:80:03:d1:2c:69:14:a7:d9:dc:79:
c5:10:14:96:96:3f:1e:84:13:67:5b:ea:de:b6:e9:4c:88:c0:
74:ab:03:c5:08:80:fb:48:d9:f2:a5:b8:3f:c5:37:1b:64:db:
94:04:c6:17:c5:a7:a2:10:b2:15:f6:8f:b6:5d:bd:4f:17:91:
38:36:55:4d:30:a4:f4:1f:22:98:46:ef:d5:b5:21:b0:33:c5:
06:45:dc:c9:fe:ad:37:1c:05:81:a1:b5:a4:f2:e1:26:ac:c1:
47:71:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:41:34 2025 by rpki-client