This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json)
Hash identifier: xSntosfq0B6M3ATzEwCv2QarwQFzk7paKSqv7tGSA9k=
Subject key identifier: 87:69:56:D0:CF:C0:B4:32:2D:3C:4D:A7:22:38:CC:59:FF:8F:98:4C
Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Certificate serial: 222D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
Manifest number: 220C
Signing time: Sat 06 Dec 2025 15:37:04 +0000
Manifest this update: Sat 06 Dec 2025 15:37:04 +0000
Manifest next update: Sat 13 Dec 2025 15:37:04 +0000
Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: roRPht0s3alaxSg5GO07ui/IHHkFlKEGevbsG8wT+xQ=)
2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8749 (0x222d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A
Validity
Not Before: Dec 6 15:37:04 2025 GMT
Not After : Dec 13 15:37:04 2025 GMT
Subject: CN=69344da0-c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:db:48:f9:b6:7a:2e:a9:98:99:9f:ee:0f:
49:8d:8c:d3:7c:cc:6d:6c:a2:36:6a:fb:30:ef:32:
9e:7a:40:a0:d4:1c:82:7d:78:fc:b5:44:f8:79:79:
8e:53:77:bb:90:2b:34:9c:ac:57:f8:39:69:85:8f:
87:9e:7f:bb:b4:e9:ac:74:fc:ca:da:9e:7f:1b:8e:
17:37:f8:c8:45:d7:cd:15:57:9c:10:a1:1c:c9:29:
f6:1c:51:3d:05:e1:ae:ed:22:af:91:1e:2e:30:18:
db:04:bb:6d:98:42:6c:f1:9d:7d:cf:4e:e7:73:b6:
77:1a:cf:20:15:98:f4:14:f7:2c:5d:83:d3:c2:51:
b1:e2:2e:68:38:09:62:7d:ac:c6:3f:3e:07:21:1f:
63:23:f3:10:a3:53:99:47:26:91:ac:24:bd:2c:17:
17:26:f5:99:53:5d:6b:bf:8c:5d:95:fa:cc:c4:93:
4f:6a:ba:e4:ee:f0:77:5a:50:4f:75:1c:8c:db:47:
36:ac:df:6c:73:ab:73:4f:61:c6:e0:32:4f:ac:a5:
47:26:d9:09:67:2a:77:db:38:8b:13:b7:99:3e:ef:
69:49:74:7d:6b:12:ca:a8:2b:17:5f:0f:bf:9d:50:
21:4f:55:5c:70:fe:33:f2:44:c7:0a:f4:ac:4e:13:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:56:D0:CF:C0:B4:32:2D:3C:4D:A7:22:38:CC:59:FF:8F:98:4C
X509v3 Authority Key Identifier:
keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:df:29:97:da:9c:a1:8e:ce:0c:43:26:57:cf:55:9a:3e:3b:
d0:4c:a9:4b:f8:b2:47:49:3c:1d:c2:9f:0c:04:3a:da:80:fe:
c4:4a:69:4c:f1:23:1c:8a:a3:ce:cd:67:96:d2:58:21:47:6b:
bb:f6:62:ac:c4:02:b9:06:8c:16:cd:e8:bf:a0:d5:13:2c:59:
e6:a8:14:38:c3:e0:d0:df:d7:90:ce:96:56:83:2c:98:a6:b0:
8b:34:6e:b2:5c:2b:cc:89:8a:16:f4:21:05:83:4d:71:f0:43:
3f:75:8e:ed:94:06:17:d2:16:33:6a:08:93:4d:4c:07:2f:c9:
5f:a8:df:d6:3b:10:d2:75:9a:cf:ae:9e:2b:60:0e:e5:07:7f:
4d:bb:51:88:e8:01:22:3e:e1:5d:c1:8c:6f:ca:32:8e:0e:b4:
d4:fb:6e:20:b7:b6:33:13:6b:33:e7:3f:6b:87:a0:4f:58:5d:
72:da:1f:35:66:13:d1:38:d7:80:ef:2b:87:fb:a4:3f:2e:9b:
94:57:08:84:be:88:f6:43:bd:66:14:79:fe:94:ec:28:77:5e:
2c:db:f6:9f:15:92:b2:8a:ea:06:c1:df:df:bc:d5:e8:39:88:
40:63:4f:0e:5a:e4:f4:f5:5a:fe:a0:3b:b9:1c:0e:49:03:c2:
17:c8:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:02:40 2025 by rpki-client