This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
File: 05fnjG3TxpaFEzQVMschiNd1Z68.mft (raw, json)
Hash identifier: OtFZG+c+HGb78iTvrc8hmiF0OAn40RaBYAy8WA0Bofo=
Subject key identifier: 23:94:F0:C9:68:15:C6:9F:55:05:D3:E5:4B:58:6A:C1:90:E8:C6:2D
Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF
Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
Manifest number: 031A
Signing time: Sat 06 Dec 2025 23:41:11 +0000
Manifest this update: Sat 06 Dec 2025 23:41:11 +0000
Manifest next update: Sat 13 Dec 2025 23:41:11 +0000
Files and hashes: 1: 05fnjG3TxpaFEzQVMschiNd1Z68.crl (hash: tRbJbFmmDo+7V7BjBLFIBXX6nk0ccgyFCa9NErAWKNE=)
2: DE183F1CF46611EC815F7283C4F9AE02.roa (hash: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl
rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3CA7, serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
Validity
Not Before: Dec 6 23:41:11 2025 GMT
Not After : Dec 13 23:41:11 2025 GMT
Subject: CN=6934bf17-ad08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:a3:c4:a1:a2:49:e2:e5:b3:37:be:b0:bd:
db:21:48:5f:3e:05:4b:cf:1a:73:54:d2:b2:b8:e2:
e9:a7:64:60:37:32:c1:07:72:7a:d0:9c:b2:fa:7a:
90:d2:fe:d2:65:25:95:d4:74:50:af:2a:93:91:0b:
f2:69:ba:bc:eb:e4:7a:93:9b:81:14:8e:c2:60:17:
20:37:06:18:73:87:16:ca:fe:54:4f:45:aa:41:e6:
15:cd:79:95:98:e0:76:5e:74:9d:51:1e:47:40:6c:
8d:40:be:62:91:a3:f8:f3:d9:a1:70:c4:56:89:28:
dd:e6:f7:86:57:b0:43:f2:39:a9:6e:b1:ec:19:14:
e0:a8:bd:95:99:0b:10:ea:f0:a6:25:7e:69:e0:80:
6c:26:6c:eb:fa:82:81:31:80:40:b8:c6:26:47:ff:
71:6c:06:73:42:6e:c8:ee:f6:02:68:dd:c3:09:07:
8d:39:b7:01:fc:19:0b:de:75:03:c6:0d:08:b4:4b:
71:4a:ff:40:61:05:ef:0a:4f:0c:1a:b5:80:5a:10:
68:ef:69:2d:f5:17:79:4d:b2:48:a9:f7:07:68:69:
43:af:f5:d7:f0:20:2d:f2:b9:7e:9e:33:ae:d1:da:
53:47:e5:6c:78:b8:73:5d:c7:2e:5e:fe:25:de:61:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:F0:C9:68:15:C6:9F:55:05:D3:E5:4B:58:6A:C1:90:E8:C6:2D
X509v3 Authority Key Identifier:
keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:38:6d:85:de:8b:84:c2:3b:71:66:d5:7c:1d:dc:5d:d2:53:
e6:0f:5c:29:d0:c7:47:c2:41:29:51:c5:91:59:76:28:9b:93:
88:be:76:cf:32:08:22:e8:9f:da:a9:d4:81:e7:c6:b5:71:7a:
d8:a3:ff:3a:17:5c:86:ff:b0:30:dd:4d:45:d6:23:77:9d:ab:
f0:b8:8a:c9:e4:a7:a6:1e:94:6c:a9:e3:3e:c0:c9:cf:45:4d:
16:09:13:ae:f4:70:55:f2:54:c2:50:2c:97:61:cb:71:9c:af:
ea:3f:78:04:0e:00:79:24:37:b4:2a:09:26:84:2d:f8:f2:3b:
7a:f5:d4:4a:56:95:eb:e7:11:dc:ad:96:f5:49:6c:0a:a8:e2:
4d:0d:ec:b9:5e:ca:b8:04:0b:d2:31:ea:a0:99:ab:28:d4:a1:
69:ff:f8:41:a4:2b:1b:b5:50:53:63:07:5f:77:3b:1c:ee:b0:
7f:d0:d9:59:e5:a9:6a:c4:02:26:a8:40:62:34:8a:a3:2d:57:
3e:d5:a3:7f:5e:84:23:94:36:0d:52:d3:08:cb:71:86:c9:24:
f4:61:b8:c2:5d:ab:c6:5d:d4:f0:6a:40:49:50:02:bc:6c:f0:
cd:76:d8:a0:21:e6:31:44:7c:c2:3c:2b:b9:7c:7a:c1:d5:01:
d4:e4:cd:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDNDQTcxMTAvBgNVBAUTKEQzOTdFNzhDNkREM0M2OTY4NTEzMzQxNTMyQzcyMTg4
RDc3NTY3QUYwHhcNMjUxMjA2MjM0MTExWhcNMjUxMjEzMjM0MTExWjAYMRYwFAYD
VQQDEw02OTM0YmYxNy1hZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyXujxKGiSeLlsze+sL3bIUhfPgVLzxpzVNKyuOLpp2RgNzLBB3J60Jyy+nqQ
0v7SZSWV1HRQryqTkQvyabq86+R6k5uBFI7CYBcgNwYYc4cWyv5UT0WqQeYVzXmV
mOB2XnSdUR5HQGyNQL5ikaP489mhcMRWiSjd5veGV7BD8jmpbrHsGRTgqL2VmQsQ
6vCmJX5p4IBsJmzr+oKBMYBAuMYmR/9xbAZzQm7I7vYCaN3DCQeNObcB/BkL3nUD
xg0ItEtxSv9AYQXvCk8MGrWAWhBo72kt9Rd5TbJIqfcHaGlDr/XX8CAt8rl+njOu
0dpTR+VseLhzXccuXv4l3mGGXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOU8Mlo
FcafVQXT5UtYasGQ6MYtMB8GA1UdIwQYMBaAFNOX54xt08aWhRM0FTLHIYjXdWev
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEM0NBNy8zRjBFMEUwNkY0
NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhwYUZFelFWTXNjaGlOZDFa
NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA1Zm5qRzNUeHBhRkV6UVZNc2NoaU5kMVo2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
M0NBNy8zRjBFMEUwNkY0NjExMUVDODIzQ0EwN0NDNEY5QUUwMi8wNWZuakczVHhw
YUZFelFWTXNjaGlOZDFaNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMOG2F3ouEwjtxZtV8Hdxd0lPmD1wp0MdHwkEpUcWRWXYom5OIvnbP
Mggi6J/aqdSB58a1cXrYo/86F1yG/7Aw3U1F1iN3navwuIrJ5KemHpRsqeM+wMnP
RU0WCROu9HBV8lTCUCyXYctxnK/qP3gEDgB5JDe0KgkmhC348jt69dRKVpXr5xHc
rZb1SWwKqOJNDey5Xsq4BAvSMeqgmaso1KFp//hBpCsbtVBTYwdfdzsc7rB/0NlZ
5alqxAImqEBiNIqjLVc+1aN/XoQjlDYNUtMIy3GGyST0YbjCXavGXdTwakBJUAK8
bPDNdtigIeYxRHzCPCu5fHrB1QHU5M2e
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:48:19 2025 by rpki-client