This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json)
Hash identifier: 4dS19q+F+71qFn99vEMzTasRSw3hLLqd5LqAJg2CtWU=
Subject key identifier: 0F:7C:0A:5F:B8:C7:8A:2D:10:FF:F1:4D:AF:86:A7:93:5A:D4:33:8C
Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Certificate serial: 02EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
Manifest number: 02C0
Signing time: Thu 04 Dec 2025 23:56:24 +0000
Manifest this update: Thu 04 Dec 2025 23:56:24 +0000
Manifest next update: Thu 11 Dec 2025 23:56:24 +0000
Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: bazcdNlnt9u8z+MC5i1fyElxsrJkYw/Zfj/a92QYRsY=)
2: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: XfF79hvTmc8NMCL/hID++kJM7536Tc7Eia39Bf3yFuA=)
3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: 3S7sTHQwNR4M05c/J0LAnFvlwfRaJo13g2aipeOM4II=)
4: 6E41DE08310A11F0AC8DF544C4F9AE02.roa (hash: MdnsK78f+RePT5EKFxzpSrHG7P2t5sm3+YBB1dYO5+4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85
Validity
Not Before: Dec 4 23:56:24 2025 GMT
Not After : Dec 11 23:56:24 2025 GMT
Subject: CN=69321fa8-b8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:e9:96:88:32:e6:ab:fa:a7:e9:79:9c:91:
14:23:30:7b:4b:3f:87:b7:3f:3a:85:6a:b5:f8:c2:
76:ca:d5:8d:60:82:8b:15:cc:52:88:0d:9f:71:48:
df:40:28:88:64:ef:ae:41:f8:c4:fa:e4:20:48:94:
33:82:11:78:47:8a:91:46:f1:92:5c:41:bf:c9:2a:
bf:84:73:70:41:e1:4a:e9:04:1f:b4:69:33:c5:e3:
d5:d5:98:5d:7e:47:e2:e7:e8:88:2b:61:5e:cc:e1:
d1:fe:09:b5:e6:62:f6:c2:18:92:73:d4:0e:1f:0d:
de:1f:ea:b7:25:7d:bc:7e:5a:0e:35:e9:8d:07:d4:
6b:a3:47:92:65:e1:a4:f3:05:83:8a:a6:30:da:b9:
01:7f:66:46:8c:97:02:fc:6b:e0:20:11:10:c5:8d:
35:ff:48:a0:1e:53:03:7b:14:c4:f9:d1:84:5e:d8:
1d:f3:4e:fd:5c:24:c0:a1:be:aa:04:7c:26:00:6a:
88:2f:fe:9b:68:f1:05:6e:d3:b1:31:15:07:86:3f:
25:9c:5e:e5:bd:ea:f7:ee:24:fa:0f:b5:67:85:03:
7c:ca:83:4c:13:a5:ae:2e:1a:a1:09:80:d9:bf:8e:
2a:87:bc:96:e5:d1:65:07:29:b5:e6:4e:26:56:42:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:0A:5F:B8:C7:8A:2D:10:FF:F1:4D:AF:86:A7:93:5A:D4:33:8C
X509v3 Authority Key Identifier:
keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d6:2f:22:31:03:bd:d1:3d:84:b3:3e:a1:bc:45:00:74:35:
78:00:40:d1:c8:5c:d7:c7:00:9b:88:4b:90:6d:83:6e:6a:7b:
d4:ee:d4:7e:25:5d:66:46:b4:76:3b:cd:62:8f:c4:ff:46:a8:
c6:31:1d:ed:2c:f9:16:73:5f:09:67:b9:7f:50:d5:55:f7:7a:
47:1e:06:7b:14:c8:e4:01:9d:95:c3:51:d2:1f:f6:39:2e:b3:
d1:b3:c6:d6:47:45:42:61:b7:ef:dd:c4:5f:b4:e5:13:d8:40:
53:e5:0d:54:fa:66:46:30:6b:f4:d0:2d:67:37:01:7e:12:ad:
b4:ae:17:35:e9:3e:c4:55:67:b8:72:d7:c0:cd:a1:1b:7d:01:
82:c5:f2:a0:b8:b6:25:f6:31:c9:72:6d:31:d8:a7:53:44:e8:
b6:1d:e8:25:2a:30:76:f5:dc:13:c6:e0:62:e4:fa:ff:eb:5a:
36:4c:7e:32:8d:48:18:40:b5:64:c7:41:fd:29:a8:cf:9f:c9:
aa:ad:3f:83:99:34:e5:84:75:89:13:97:ce:13:39:97:0e:29:
fd:db:88:fc:7d:fb:69:d2:91:57:85:a5:c6:89:8e:70:77:07:
34:4d:33:55:c2:0a:b1:37:83:67:35:67:0f:ae:67:87:d8:0d:
e6:9e:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:08:15 2025 by rpki-client