This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier: YYQ+irsw5ruqSaEII4ZUmiL+1IVImSs0w+MGPSl+Ww8=
Subject key identifier: BC:FF:03:1E:0D:3A:C9:8D:85:C9:AA:B7:AC:DB:E1:D9:94:82:4C:6A
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial: 06BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number: 06B9
Signing time: Sat 20 Dec 2025 14:45:16 +0000
Manifest this update: Sat 20 Dec 2025 14:45:16 +0000
Manifest next update: Sat 27 Dec 2025 14:45:16 +0000
Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: yAjMdjWnrpilY2SyaaQ26hRo6m0jhcwXG5krxplwfOo=)
2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: oxmHGKf/WSOT7WzpjdLiOn3oXWfHw/6ypS3n/mBbPHA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Validity
Not Before: Dec 20 14:45:16 2025 GMT
Not After : Dec 27 14:45:16 2025 GMT
Subject: CN=6946b67c-ecf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:54:98:c0:61:8e:ae:52:88:ff:a6:e8:55:
a3:52:5d:ec:80:0b:42:51:57:22:53:a1:9e:a1:e9:
6b:91:59:0c:9e:c4:42:9b:d5:9b:64:d8:c1:07:93:
1b:dd:ec:31:b4:8d:8d:a1:c9:73:96:06:1b:cf:30:
52:81:55:28:e0:d6:49:6b:74:82:c7:5d:2e:ee:5b:
3d:e4:3e:38:02:88:33:71:e9:27:ee:72:cf:4e:64:
7e:47:7c:50:51:26:b6:cb:f0:8f:48:15:3f:b3:80:
69:27:fc:2f:ec:6d:57:20:06:ad:9f:09:a4:bd:d1:
ad:75:a9:f2:e7:27:0c:90:54:69:13:31:c2:5f:9d:
8f:d8:7d:f6:44:7d:96:23:98:d0:24:46:07:51:2d:
af:cc:31:db:45:e6:ae:4f:fa:ef:c3:32:91:8d:9c:
08:f5:3e:05:a9:54:8f:79:24:0a:5b:4f:b8:66:2a:
ab:30:9a:ff:f4:e4:84:fd:77:a9:4f:88:3c:4f:51:
74:a1:6a:3b:4a:4a:03:87:83:0e:b4:cb:5c:dd:3c:
55:4e:ae:b2:4e:91:08:28:a7:3e:a0:87:37:a8:24:
c8:f7:e7:b1:4d:88:d9:71:e2:15:36:63:09:7a:72:
54:a6:30:35:a7:36:2d:25:f6:31:93:0e:fc:a7:8d:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FF:03:1E:0D:3A:C9:8D:85:C9:AA:B7:AC:DB:E1:D9:94:82:4C:6A
X509v3 Authority Key Identifier:
keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:9a:eb:b6:11:5c:33:5a:62:30:26:eb:85:3a:43:82:4f:74:
da:4c:89:9d:16:68:42:e3:2d:eb:85:80:1e:51:8d:82:a1:9a:
42:a9:a3:47:93:24:55:0a:1e:50:31:13:0b:63:f9:1d:ae:59:
42:33:83:42:78:7a:82:fb:87:be:80:c4:87:e5:e2:c2:cf:5d:
30:10:49:e8:80:3a:68:32:74:79:d9:6f:de:6b:5d:ce:08:ca:
a4:1b:33:d2:42:b4:02:ce:18:61:31:5c:00:85:c9:f6:e3:98:
a6:7f:19:fb:45:b6:ba:2a:b3:7c:66:6f:5a:df:42:73:ea:05:
32:63:f4:f5:99:77:6d:d4:91:59:71:56:f3:b8:d0:02:d7:ea:
70:01:e3:dd:c4:24:f1:b4:ac:5f:ee:dd:ca:ed:50:14:48:43:
07:33:20:6f:58:5b:9d:6e:d7:23:41:f8:4a:9b:f8:ce:29:7e:
1d:ab:87:5f:8e:af:50:1e:42:49:32:63:ae:98:11:fa:e6:de:
4f:bc:70:db:32:0a:15:9a:21:34:5e:7d:a4:4e:5d:a4:fa:11:
a5:f4:3c:79:05:f7:0d:18:cc:83:20:1c:a9:ff:cd:b5:83:56:
7a:ee:9b:0e:4f:e2:9d:ed:bf:23:5d:f9:50:5a:f2:5b:cf:42:
47:7f:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:32:24 2025 by rpki-client