This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json)
Hash identifier: Z/fJgcqNvvugycTuNZLx8KXrQyKPbtwWGGc9Oz5KAE0=
Subject key identifier: FA:81:F2:84:CF:37:27:53:DD:5D:55:EC:33:D8:A0:A7:77:71:89:3C
Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2
Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2
Certificate serial: 16E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
Manifest number: 16D9
Signing time: Sat 06 Dec 2025 16:15:02 +0000
Manifest this update: Sat 06 Dec 2025 16:15:01 +0000
Manifest next update: Sat 13 Dec 2025 16:15:01 +0000
Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: r89/zFtNmXfmQSPmTpIxDpSwBtUShgJxn9t1V8W2M+0=)
2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl
rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5861 (0x16e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2
Validity
Not Before: Dec 6 16:15:01 2025 GMT
Not After : Dec 13 16:15:01 2025 GMT
Subject: CN=69345685-32f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:d5:0b:ba:9e:cc:c3:a9:62:97:2c:bf:9d:
21:32:fd:09:40:f2:1f:6b:6e:e9:07:e7:b9:36:99:
28:b6:b8:34:65:0b:6d:2a:ae:21:1f:64:bb:fe:0d:
8f:65:ee:a8:67:9c:2b:d7:47:09:83:ba:33:30:d9:
03:ce:c5:e8:ca:d6:15:a7:6b:b8:93:4e:af:2a:d5:
f4:99:2f:52:1c:c4:2c:5a:1a:ca:63:e6:9d:56:d0:
8c:d2:c0:36:4b:77:16:1b:d1:46:0d:29:ce:d0:9f:
6c:34:97:2a:c2:4b:73:b6:3f:92:da:84:fb:cf:80:
bc:83:58:e9:88:c3:a8:7e:a4:2b:9e:00:29:ff:f4:
56:3d:35:e9:d5:29:27:f1:f8:a4:cc:74:76:56:15:
3a:04:11:63:4d:3b:9a:de:cf:30:a5:9a:a3:60:53:
92:fb:10:82:7f:16:01:68:44:33:16:9c:bf:df:2a:
a9:fc:c9:e2:91:29:a4:88:88:af:13:5e:d5:f8:53:
14:85:83:3d:1d:e4:39:d2:92:27:b0:f1:3d:f3:3e:
db:a3:e1:c5:4b:d4:13:af:db:26:60:97:b1:43:58:
0e:94:4f:96:97:f3:8e:4a:15:9f:e3:f7:09:61:3d:
98:05:38:5a:04:3e:cc:7f:07:22:02:09:86:05:97:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:F2:84:CF:37:27:53:DD:5D:55:EC:33:D8:A0:A7:77:71:89:3C
X509v3 Authority Key Identifier:
keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:46:bf:31:19:b6:7d:d3:e8:7b:66:f3:c3:06:df:19:35:
a8:e4:f5:f8:c7:fc:6d:14:5d:32:14:1c:35:44:f9:41:91:a1:
43:6e:33:ec:3a:a8:6b:9a:08:fc:27:e3:a5:7e:3d:0d:46:d3:
46:68:3a:12:f9:2f:5e:4a:88:2d:82:cf:71:50:be:0e:18:92:
6d:dc:7d:73:21:e4:99:ab:14:b5:74:c1:f8:b6:1f:ec:df:72:
73:f4:2b:ad:a6:8d:a9:1c:af:0f:55:f5:99:fa:d6:13:08:95:
25:8c:4f:1e:a5:a1:9e:30:a7:1d:67:54:da:87:ea:a5:9c:27:
9b:33:8a:73:89:10:e1:38:65:f1:cb:ba:42:22:0a:85:c5:4b:
5f:68:14:31:05:63:85:86:98:63:97:b5:4a:b1:b4:6c:b1:0a:
4d:dc:90:c1:03:68:e9:48:a8:e5:32:a6:cf:2e:f1:65:00:47:
1c:02:87:e3:6d:24:9a:af:0f:a6:e8:4a:c0:ff:3c:f7:3c:5d:
f2:6a:1a:13:87:97:d1:ca:53:60:09:8b:f9:9f:6a:f4:c9:0f:
c9:1e:35:f1:26:4e:62:43:38:85:b9:34:a8:62:fd:27:e2:3c:
c1:b7:39:66:af:19:b6:51:36:1a:9a:01:0c:cb:90:7c:40:eb:
c5:32:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:37 2025 by rpki-client