This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
File: KTvwacT02DHu52nVsTnjAh2zSwA.mft (raw, json)
Hash identifier: 1cWvTdYOxqHeWs2QfJTlwe48gS2F7Ov9yM276c8uHBE=
Subject key identifier: DC:68:4D:33:90:88:46:D8:A4:A5:8E:17:56:68:B2:7B:CF:45:B9:C1
Authority key identifier: 29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
Certificate issuer: /CN=A91CE65A/serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
Manifest number: 0105
Signing time: Fri 05 Dec 2025 03:09:52 +0000
Manifest this update: Fri 05 Dec 2025 03:09:51 +0000
Manifest next update: Fri 12 Dec 2025 03:09:51 +0000
Files and hashes: 1: KTvwacT02DHu52nVsTnjAh2zSwA.crl (hash: 7P/RJfR0WXv9vNXYHMwtqe7ncb/ZVTJQIc1t68bs85o=)
2: 62959E66682B11F09ECB0C24C4F9AE02.roa (hash: QteYiqxagttieW0gH2HjsmgjmoFz+n9ylxq8eEuUcDA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:09:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE65A, serialNumber=293BF069C4F4D831EEE769D5B139E3021DB34B00
Validity
Not Before: Dec 5 03:09:51 2025 GMT
Not After : Dec 12 03:09:51 2025 GMT
Subject: CN=69324cff-25d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:39:b8:ab:64:fc:18:74:12:6c:57:29:82:75:
71:e7:cf:cf:38:5c:2a:ac:62:4b:8b:92:d2:43:b1:
fe:96:fe:53:78:63:af:21:3c:0c:60:34:12:25:ed:
5b:23:ba:85:eb:e8:4c:89:7a:db:56:37:5d:5a:dc:
86:59:94:bb:32:b4:9e:5b:00:e7:65:51:18:65:74:
1f:b8:b3:a2:2c:cb:87:0e:60:ff:28:03:32:aa:1e:
c2:d4:d0:03:b7:d8:86:66:bd:0b:c9:b6:0b:e9:f5:
27:92:dd:63:0c:44:5a:32:c6:45:ce:16:f2:c6:16:
00:92:4e:c4:11:ed:30:ae:f8:25:b9:ff:81:a1:fa:
22:f6:db:01:ef:01:52:56:c1:f6:b9:f3:b8:f2:dc:
00:79:32:6a:5c:9b:bc:dd:e7:29:f8:ce:89:a3:03:
4d:f7:52:0f:eb:c1:0e:09:2f:41:ef:62:f0:f5:f4:
93:42:b4:f7:00:0a:40:57:ba:e1:bd:41:8a:83:e6:
f3:bd:7d:07:b6:1c:23:a5:bf:c5:fc:04:39:48:c9:
54:5e:5a:09:f1:fd:3d:6a:26:3f:38:e9:30:af:6e:
37:92:db:e3:12:90:32:bd:32:30:84:a1:8c:4d:bd:
95:ec:c3:80:e2:9e:66:b8:f0:67:52:ae:74:ec:03:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:68:4D:33:90:88:46:D8:A4:A5:8E:17:56:68:B2:7B:CF:45:B9:C1
X509v3 Authority Key Identifier:
keyid:29:3B:F0:69:C4:F4:D8:31:EE:E7:69:D5:B1:39:E3:02:1D:B3:4B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KTvwacT02DHu52nVsTnjAh2zSwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE65A/66E6FE36497A11EFAF551842C4F9AE02/KTvwacT02DHu52nVsTnjAh2zSwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d0:12:4d:8e:8f:a3:31:74:c7:83:01:2f:2e:a7:19:5b:db:
21:27:4c:d1:47:23:97:4f:7d:74:98:ae:98:b5:3a:34:b0:ca:
be:34:60:fb:ad:64:91:54:b5:33:07:fb:9a:d6:a2:61:49:b9:
26:ba:3e:b9:40:19:ea:af:e1:78:bc:d8:09:a1:43:5e:5e:ae:
c0:fb:59:0b:24:59:4a:d6:b5:97:29:56:f3:0d:dd:46:10:e3:
30:96:e4:dd:d5:2d:a0:d9:27:e6:35:11:15:63:33:94:1e:4f:
08:22:96:75:79:e3:a3:2c:62:3b:81:52:5f:19:1b:db:8c:80:
49:5b:b4:97:63:6e:57:0c:fb:05:37:70:61:6f:9e:65:ab:e5:
13:93:2c:ef:dc:ab:a7:55:dc:6e:7f:8b:2b:a9:a4:0a:13:51:
ef:58:63:02:e2:ec:b2:2d:ab:79:b0:56:02:bd:96:aa:00:d9:
7b:b0:45:2c:5f:bd:d2:27:f3:07:0d:21:96:e2:c7:89:86:4e:
fa:db:de:7e:8a:83:82:a7:ef:93:69:ff:b7:f3:4a:1e:0f:46:
43:50:01:7c:aa:3c:87:af:06:9d:b4:ee:61:a6:a1:6b:60:33:
02:35:41:81:ac:b0:03:58:f0:0a:c4:32:ba:aa:83:d9:38:ca:
44:34:91:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:42:05 2025 by rpki-client