This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
File: 1ABRvI3aYMky7gd2mrhnvvqNQvY.mft (raw, json)
Hash identifier: FU0GGwh+QFOu/UigXbh7t43LaOVajo2KCxaON62ANHg=
Subject key identifier: 4B:DF:48:5E:54:FB:E1:72:13:42:08:9E:E6:24:A5:96:AC:EB:4A:53
Authority key identifier: D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
Certificate issuer: /CN=A91D3F8E/serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
Manifest number: 01E6
Signing time: Fri 05 Dec 2025 01:15:06 +0000
Manifest this update: Fri 05 Dec 2025 01:15:05 +0000
Manifest next update: Fri 12 Dec 2025 01:15:05 +0000
Files and hashes: 1: 1ABRvI3aYMky7gd2mrhnvvqNQvY.crl (hash: BUk81WpuZJnTPIwEV1H8HLILVWKHWLzYYsG26XYS5Os=)
2: F8B64B2A97BB11EF9D4C9647C4F9AE02.roa (hash: pyGqakx6aToXl1NPvkP6t5S+uv8P5F7PIid49DfaOVg=)
3: C0E3BC02B8B611EFBD4C6F4AC4F9AE02.roa (hash: iK6flRTT/R1NX18TACntkfKJoThokFSeTRkG+bdqrmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:15:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3F8E, serialNumber=D40051BC8DDA60C932EE07769AB867BEFA8D42F6
Validity
Not Before: Dec 5 01:15:05 2025 GMT
Not After : Dec 12 01:15:05 2025 GMT
Subject: CN=69323219-ca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:ff:cf:65:d8:10:ff:a3:b3:7a:98:76:fc:
b6:69:42:0b:a9:db:47:a0:4f:3a:9d:97:1f:b9:af:
9d:01:f9:02:c7:c4:80:69:e7:ef:f3:a1:62:ea:43:
d3:6b:51:34:d2:e4:54:7e:17:83:09:14:ab:ea:c9:
b0:c7:23:b5:07:fc:40:57:46:42:dc:fe:34:b6:50:
19:0c:b8:fd:a3:66:c9:fe:58:1d:8d:af:f6:58:4b:
e6:86:b4:e7:61:66:cf:58:e7:ce:c2:a3:91:7c:75:
19:87:ce:27:05:cd:5c:57:67:be:ea:89:2b:cd:06:
76:8c:78:48:20:6f:8a:c0:c2:fa:cb:ce:da:d2:de:
9d:23:f5:08:7e:47:c6:c8:9b:46:a2:bc:f3:66:15:
50:42:ed:4b:2f:9b:61:d5:c5:32:61:2b:5d:09:16:
63:c5:8d:c4:fd:62:8d:e5:77:fd:a4:15:90:dc:5e:
bd:84:d7:c4:83:1d:32:5c:a8:3c:15:a2:08:a3:8e:
6a:f0:d6:c0:d5:5a:5b:83:6b:d7:1e:76:6c:03:19:
20:f6:d6:97:34:ac:fb:dc:5d:b5:59:6d:98:bd:17:
48:6b:c5:8a:1f:0c:5d:84:22:6f:c3:c1:56:e7:2f:
ee:cd:06:1f:7c:06:93:93:a0:87:57:1f:c4:7e:83:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DF:48:5E:54:FB:E1:72:13:42:08:9E:E6:24:A5:96:AC:EB:4A:53
X509v3 Authority Key Identifier:
keyid:D4:00:51:BC:8D:DA:60:C9:32:EE:07:76:9A:B8:67:BE:FA:8D:42:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ABRvI3aYMky7gd2mrhnvvqNQvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3F8E/6C4089BA216C11EEB28BF24CC4F9AE02/1ABRvI3aYMky7gd2mrhnvvqNQvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:45:72:c0:d8:b6:bd:92:20:5a:67:78:c6:f0:6f:4b:73:4b:
0f:96:b1:1c:2a:07:57:18:f8:1c:4b:40:1f:a2:66:4a:c6:62:
d5:cc:6f:35:7b:79:7c:f8:2c:1b:8b:0d:c7:7c:3b:87:3f:07:
9f:72:04:32:5d:ed:9c:c7:81:3b:48:60:0b:5c:a4:f3:38:9e:
68:66:2b:c8:11:1c:7b:7a:4e:b9:6d:b1:4e:e5:5f:aa:60:d0:
65:8c:b6:40:f8:60:3e:35:a4:81:91:75:73:d2:e0:af:01:a6:
8b:60:11:d8:cc:51:16:bb:57:1b:bd:a6:07:d6:c1:a7:fc:e3:
38:a3:ae:fe:55:c6:18:2b:7b:92:f8:19:24:da:5b:19:4f:ce:
19:81:dd:56:a6:3a:cb:40:d9:6d:11:a2:4b:9a:b2:aa:9d:44:
7a:d8:ae:41:bb:17:0e:f5:0d:06:0e:c3:dd:7d:56:f3:d3:1b:
05:e5:40:93:b2:46:32:88:8a:4d:d4:81:d1:f5:68:13:77:7f:
3b:08:a8:71:15:20:78:3f:af:85:97:5b:7e:42:fe:ab:ec:80:
df:68:d5:d6:8e:93:d7:57:45:bf:73:00:b2:1a:c4:b4:9d:04:
7d:64:02:7a:bf:66:22:4f:0f:ac:f1:41:a5:3b:a0:d6:b9:70:
a5:5f:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:54:03 2025 by rpki-client