This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: FPt7q7Mr1zyogWeTlHoFTWf/qwbwn7Wk741mcggFzik=
Subject key identifier: C6:F3:87:EA:0F:9D:4C:AF:31:E4:48:CA:84:18:CD:65:9D:24:58:B8
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: EF
Signing time: Sun 07 Dec 2025 00:16:12 +0000
Manifest this update: Sun 07 Dec 2025 00:16:12 +0000
Manifest next update: Sun 14 Dec 2025 00:16:12 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: spbK8bX5BfqPpTMk8kMyvIayNtbUu+4TTId+RLwMny0=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Dec 7 00:16:12 2025 GMT
Not After : Dec 14 00:16:12 2025 GMT
Subject: CN=6934c74c-47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:05:a0:cc:72:f9:3b:47:24:05:fa:c3:58:
83:96:ed:2f:de:03:5c:62:ea:1f:b6:8b:12:34:6d:
82:21:25:38:69:26:93:14:16:ac:7f:8c:19:7a:33:
76:5b:d3:db:dc:cc:56:f8:1d:6f:4f:f7:3e:6f:86:
82:e3:f2:10:10:72:06:6f:5f:df:f1:b5:20:ef:05:
68:d2:92:cc:65:89:85:74:3e:6b:c0:69:b5:84:cd:
ef:96:9d:b1:2d:f2:a6:fe:a0:43:c2:7b:58:20:a4:
e8:a9:6c:16:fa:f6:1b:02:6e:2c:f9:b7:c5:41:ab:
c5:5f:3d:bb:ea:a4:28:cc:86:e9:d5:d1:38:14:6e:
77:c1:9f:ad:c5:3a:6c:a1:71:69:2a:d6:0c:39:ac:
b8:5f:f5:44:90:0e:0a:68:5d:ca:04:e1:cf:59:50:
80:fe:2f:47:18:cb:b6:7c:c3:fc:8a:82:40:4a:d2:
d1:35:c8:f8:1d:ec:a5:8b:1b:cb:90:0e:99:bb:36:
71:c3:57:af:b8:cd:cb:46:ae:83:57:5d:f4:dd:62:
39:9d:35:56:4f:8d:42:63:41:d8:d0:0c:08:b9:1c:
54:0f:bb:3d:49:b4:dc:cc:e2:6b:7f:af:e2:50:11:
39:5f:31:fd:34:26:11:b2:20:b0:f3:f5:2d:81:8e:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F3:87:EA:0F:9D:4C:AF:31:E4:48:CA:84:18:CD:65:9D:24:58:B8
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:3d:9c:bb:58:5c:55:29:e8:8b:64:48:4c:23:cd:37:44:b2:
bd:b1:3b:7d:82:6a:73:07:fa:ab:d3:8f:9e:33:d7:7c:e9:24:
9a:6d:89:51:65:4c:8d:9f:60:25:48:02:9d:f0:fa:96:46:b1:
2b:68:fe:69:5c:58:1e:44:06:0b:d8:b6:26:61:ee:81:c8:ca:
42:4f:85:2d:9e:01:07:b5:17:e9:bd:95:ab:79:f1:6e:90:c5:
43:76:38:29:d4:58:3c:5d:75:8b:df:d9:6d:b1:95:8a:c1:09:
cd:5a:55:14:2b:95:9d:5d:1e:4c:51:ad:54:fc:e5:fa:2c:90:
34:ca:72:d5:27:c9:c8:a1:fa:9a:ab:97:eb:9b:e5:3b:7d:b6:
76:cf:cf:5f:6d:25:71:f3:b1:b5:16:05:33:79:36:37:9b:1c:
3c:43:02:37:73:7e:b6:74:27:7b:6e:b4:c5:b1:3b:5d:ef:df:
06:3d:fb:d3:f2:67:a3:ab:4f:ec:14:b5:e5:69:7d:e7:6f:78:
85:ea:fd:ba:bb:30:10:6e:50:54:03:71:1b:1f:5b:bd:8f:9c:
8c:7f:e0:68:b6:00:17:80:9e:ed:81:09:9c:ae:f8:33:5e:0f:
0b:ad:e2:75:6a:bd:35:83:90:04:a6:da:c0:e7:1d:7a:a6:d9:
85:d0:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:39 2025 by rpki-client