This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json)
Hash identifier: MNVD2HvyNS5lAuLPCuykK4awBsB6RjN7B0lbJDe249U=
Subject key identifier: CA:17:B2:D8:B8:F2:6D:B8:6C:46:43:A0:3B:D5:8B:C1:9A:82:18:C5
Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Certificate serial: 1825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
Manifest number: 180C
Signing time: Thu 04 Dec 2025 16:14:13 +0000
Manifest this update: Thu 04 Dec 2025 16:14:13 +0000
Manifest next update: Thu 11 Dec 2025 16:14:12 +0000
Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: VBLYWugDzwWGgXEyviyZiETGq5C8xADqigh4JrylGPA=)
2: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=)
3: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6181 (0x1825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407
Validity
Not Before: Dec 4 16:14:13 2025 GMT
Not After : Dec 11 16:14:12 2025 GMT
Subject: CN=6931b355-54de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:23:70:14:40:22:6e:ea:f4:78:dc:2d:f3:
d4:78:7b:a6:03:6d:5d:bd:96:e5:c3:72:d7:5b:07:
87:ee:09:65:2e:87:ad:b7:95:d6:14:6c:f9:05:98:
84:6f:49:85:a3:db:3e:32:6a:1c:40:12:77:c0:0a:
84:a6:46:7d:06:5b:55:5e:43:30:b3:7b:f2:6f:2c:
45:ba:e5:1e:4c:1c:82:b6:f2:a7:51:5c:4e:fd:81:
b9:f2:e0:98:5a:f6:d4:cd:bd:0a:d0:f6:b8:d2:60:
03:f5:0c:f6:4d:fa:f1:2e:ad:ca:2c:d1:d0:84:e0:
6c:9e:60:55:d1:fc:5a:e2:1a:4a:cd:03:7a:b8:c4:
2b:3a:c5:91:63:f7:f6:05:7a:25:7e:b5:92:b2:56:
16:89:68:6e:5e:5b:6f:a5:a9:f5:4d:e6:cd:1f:17:
c1:7e:21:3e:ad:e7:f6:4b:51:b4:f8:6b:c2:7e:a5:
41:4a:23:ff:96:d4:a3:4d:de:c3:a2:1c:26:f6:4b:
c6:f1:ac:f6:fb:91:f8:7a:d5:48:44:07:98:01:72:
43:96:0e:ef:25:6d:64:99:0e:da:c6:49:91:48:05:
e5:87:d5:cc:30:13:4d:2f:7d:26:73:3d:26:92:24:
17:22:20:c3:19:05:c8:a5:a2:85:9e:cc:33:fe:90:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:B2:D8:B8:F2:6D:B8:6C:46:43:A0:3B:D5:8B:C1:9A:82:18:C5
X509v3 Authority Key Identifier:
keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:06:65:8c:5e:f9:2a:b7:26:e2:84:40:a6:ae:4d:18:6e:16:
24:9c:cb:6b:19:5b:da:8b:7a:e7:ae:83:b6:c4:8d:fb:aa:ab:
2b:12:44:15:ea:88:32:a3:4b:ed:83:a2:a7:7e:ea:93:1b:57:
cf:7e:0f:f7:53:d9:a8:30:c2:e0:22:c5:4e:6f:ff:5e:f0:0f:
24:19:8b:2f:26:d0:5d:0c:5e:50:00:1d:c9:a9:94:4f:a2:87:
10:65:46:b9:37:9a:47:57:45:e9:65:15:ee:c6:76:2c:4e:40:
86:e4:0a:54:cc:25:a8:df:07:d8:f4:1c:c3:ab:47:8b:e1:5f:
42:02:e4:5e:87:41:6a:cc:02:cc:43:bc:ef:83:77:bb:b5:b0:
d4:0b:85:f9:15:5d:3c:c1:a3:c8:3c:3a:88:be:b5:ba:5b:59:
05:be:e3:45:96:73:3e:ed:11:e3:3f:9f:1d:54:22:54:df:2f:
91:a7:f5:2f:9c:9a:2d:87:a2:ab:c9:41:80:a3:b3:db:b4:69:
6b:5c:1f:d4:a5:90:1a:b0:5e:7d:62:5e:2d:f6:f6:51:7c:97:
77:60:a5:fc:65:d0:2f:b5:5d:75:ad:46:d7:9d:ba:3b:41:d4:
ec:6a:3b:2f:e3:70:3d:8d:66:b2:b1:00:53:a9:cf:bd:30:0d:
6a:8c:04:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:49:29 2025 by rpki-client