This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json)
Hash identifier: jdv+VJosa8oY/W5412ADO6e+wxzpCg7jnm12Tn1BJQw=
Subject key identifier: AE:0A:FB:A8:78:CF:4C:46:E0:BA:B7:85:1E:A9:BC:33:4E:9B:55:23
Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Certificate serial: 0BC4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
Manifest number: 0B66
Signing time: Thu 04 Dec 2025 18:39:37 +0000
Manifest this update: Thu 04 Dec 2025 18:39:36 +0000
Manifest next update: Thu 11 Dec 2025 18:39:36 +0000
Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: X27ejewbVF0WHCXk3GENwiYaKvlHItWtangTf8u00vw=)
2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: Gi3ZB3u4tIqQA57JWptzmGj4T0h+RzUq8o/c0VetBYI=)
3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: lgdsNT8nYBqcm8DCsobXOW7p2S7NgKOOoWUT5xQjbBE=)
4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: 3JOJzRv4irtlrsMwD4nhQQebwbICPddO6QXSBTA7ZXU=)
5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: eR1CwoT+DNfBY5Fom2xgTVdBct441pK1ZuTbHGG+Djc=)
6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: mu1iARnCi5kA2mbUie8M1ra9hiXhkaHe7HXaTEKFUdU=)
7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: TTlhGhUAD/2NGqtgzSrC9HKcOBdgmaTheq7ErX+FNZ4=)
8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: YF3wvRDD0dzUZakdeFWJrsLYoJUpMBgClY/hZFPMmvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:39:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF
Validity
Not Before: Dec 4 18:39:36 2025 GMT
Not After : Dec 11 18:39:36 2025 GMT
Subject: CN=6931d568-285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:ac:08:86:e9:fc:ca:47:4a:f2:08:78:6e:
52:98:35:19:6a:a3:48:0b:72:f4:23:2f:b3:a6:0b:
c6:dd:34:cf:b0:ae:36:50:2f:49:65:67:67:af:98:
69:6d:97:6d:94:9e:78:2b:86:27:1f:8e:30:0e:37:
1a:06:8b:ff:6c:78:15:ab:c2:a4:ad:9b:08:51:98:
7c:33:11:54:7a:53:28:03:52:86:d3:53:72:b4:c3:
71:7e:9e:de:d0:b2:91:c8:45:fd:9f:b2:6e:34:a5:
a1:e7:60:9f:0a:e9:ee:78:38:91:ec:9d:38:f6:7e:
5f:3d:77:af:4b:f4:a7:ee:da:72:ad:f0:19:21:ad:
26:54:4f:78:6c:36:ab:70:7b:43:6a:ae:e3:d0:43:
29:d3:97:36:79:7c:a6:54:e9:14:00:dd:7d:6d:d9:
06:0f:f9:45:85:0f:f3:4e:fe:31:2a:c8:cf:da:1f:
01:2b:8b:9e:d2:49:cd:b6:2a:e8:d0:c7:83:fc:06:
09:1f:bf:9b:6d:b0:56:68:89:8d:f2:bf:ed:a3:07:
6b:dd:34:8f:10:84:ca:ac:a5:f2:be:93:e1:25:b7:
81:ef:61:f2:7c:a7:8a:e7:fe:67:fe:04:76:7e:27:
d7:cc:e5:59:b6:01:70:07:53:f8:72:14:ec:ba:65:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0A:FB:A8:78:CF:4C:46:E0:BA:B7:85:1E:A9:BC:33:4E:9B:55:23
X509v3 Authority Key Identifier:
keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e5:36:0a:6c:a4:fc:ab:79:1f:e2:49:56:ba:29:5f:d2:0e:
6c:e1:86:e8:db:83:27:ac:e5:cf:df:80:fe:fe:a8:3a:e2:44:
9b:32:f9:25:8d:62:b9:46:e9:c5:47:e8:54:70:cb:34:de:c0:
4d:4a:b7:31:12:9a:b9:16:0b:9c:8d:4e:9e:8c:e4:00:88:08:
70:94:8b:d0:6d:3e:d1:cb:94:f1:f3:73:80:d4:08:39:ec:50:
af:6c:43:74:18:fb:b4:45:7f:54:db:d3:a4:15:b6:00:14:8e:
14:29:76:f3:2f:46:79:ce:8a:59:e3:1a:41:17:27:e1:e3:07:
d7:f4:42:ce:10:7d:0b:77:b0:ca:c1:59:bf:4c:9e:03:ce:ae:
3c:df:26:de:98:69:52:36:a2:22:0e:f4:46:0f:3e:d6:5f:a8:
f8:89:b1:54:27:44:e9:ab:6c:ae:99:73:23:49:38:a7:50:bc:
63:38:d7:97:73:b2:3b:84:38:0e:e6:e8:a3:5d:8e:47:f5:75:
a2:fb:fc:01:b8:d6:35:89:39:ec:df:50:43:08:55:c7:67:49:
3b:06:f0:56:ae:94:09:3a:92:9b:62:0f:c3:78:73:0f:88:3e:
14:90:e4:27:5c:21:3f:77:70:eb:6a:0d:f2:4f:97:e1:19:33:
50:3c:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:15 2025 by rpki-client