This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
File: fvLsMxvWVD0y25gMUGJsBAfKiYI.mft (raw, json)
Hash identifier: bFtk1INbEc6URreEAjtx3AuQ1qKO/j1LCrdR2B0lw8I=
Subject key identifier: 39:F1:FF:7C:AC:F8:AA:59:03:37:CB:9E:43:C9:F2:5E:66:E0:36:C4
Authority key identifier: 7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
Certificate issuer: /CN=A91D5E23/serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Certificate serial: 0941
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
Manifest number: 093B
Signing time: Thu 18 Dec 2025 19:44:27 +0000
Manifest this update: Thu 18 Dec 2025 19:44:27 +0000
Manifest next update: Thu 25 Dec 2025 19:44:27 +0000
Files and hashes: 1: fvLsMxvWVD0y25gMUGJsBAfKiYI.crl (hash: B/IVk6nt/z+lgbszEtaOVp8wZ/j2yhA6VhIlPwCa4h4=)
2: 70C35E88B07511EA8C0EC372C4F9AE02.roa (hash: uh8Xk70gWxRTmNYaCNUAB+Hh9CL9zqsYHo9ULlX8dpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2369 (0x941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5E23, serialNumber=7EF2EC331BD6543D32DB980C50626C0407CA8982
Validity
Not Before: Dec 18 19:44:27 2025 GMT
Not After : Dec 25 19:44:27 2025 GMT
Subject: CN=6944599b-07c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:13:65:5c:1f:bd:43:04:de:da:77:f2:4e:9d:
7f:2e:c4:d8:7f:6a:da:1f:31:27:50:e7:3c:9d:85:
5f:41:ac:ae:d4:cb:c0:55:9d:2d:ba:ea:81:6f:0b:
81:e9:e5:20:86:f6:d5:46:4d:db:1a:e3:60:8b:5a:
03:ba:d1:e6:f6:f0:ab:19:30:88:13:4a:31:00:f4:
ef:fe:88:fb:43:58:9f:8c:ee:a4:9c:b0:c1:9a:9a:
b3:16:80:ef:5a:f0:40:e0:1d:a2:c3:8b:ea:e9:a0:
34:28:a1:21:1c:22:f0:5e:0d:9a:ce:ed:55:c3:f3:
f9:95:c2:6d:77:f3:74:b8:a4:cb:86:4e:e2:9d:f7:
0c:2b:7b:3b:f6:80:f1:f8:57:94:51:86:76:ad:8d:
2b:8e:e5:2f:90:1c:fb:62:34:21:e9:38:e7:0d:e1:
fc:3e:12:cd:69:bb:e3:80:51:54:53:6a:49:5d:7e:
5a:2b:97:d0:cb:17:ed:35:4e:f5:b8:4d:ca:86:62:
01:55:15:8c:d6:d6:b4:dd:e0:20:fc:55:a7:19:9c:
5a:0a:93:1d:15:8d:db:b2:45:6b:fc:f0:c1:6b:41:
1b:57:4d:cc:70:bc:2c:b5:f8:08:7b:5d:fe:b0:55:
ba:0b:c6:ba:bb:1d:17:5e:44:28:c7:c2:d9:2b:7f:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F1:FF:7C:AC:F8:AA:59:03:37:CB:9E:43:C9:F2:5E:66:E0:36:C4
X509v3 Authority Key Identifier:
keyid:7E:F2:EC:33:1B:D6:54:3D:32:DB:98:0C:50:62:6C:04:07:CA:89:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fvLsMxvWVD0y25gMUGJsBAfKiYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5E23/862A83CAB07311EA90EC996EC4F9AE02/fvLsMxvWVD0y25gMUGJsBAfKiYI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:85:a5:46:f0:df:9b:d2:c3:27:04:c8:ed:f2:48:b2:39:97:
1f:85:24:f5:01:28:e8:6d:45:da:f4:7f:2a:fb:22:10:46:da:
d7:67:bd:e6:6b:6e:63:e4:b9:4a:d1:8e:12:26:07:e7:dd:71:
32:b5:1c:48:96:91:8d:69:ea:1b:42:8f:f0:04:e8:db:e6:08:
93:40:07:4b:80:57:b9:b7:5d:eb:f6:2f:52:4d:f5:28:28:6e:
e8:33:c6:81:61:fb:6a:3b:59:ca:41:18:3d:af:86:25:2b:4c:
ae:15:3d:eb:00:c4:59:68:d5:1a:ac:65:34:03:86:c9:2c:63:
da:2e:05:b2:50:e2:cc:7b:4e:93:7e:c1:d7:d1:83:ae:97:fe:
50:be:96:b2:64:00:c9:4f:b2:02:af:cf:0a:cf:5c:b0:16:a7:
7c:59:0f:dd:f7:51:7b:3a:38:aa:45:2f:83:ba:87:e0:d2:77:
4e:87:36:d5:97:62:21:79:e6:6e:11:4f:fc:e3:33:bf:8d:b9:
73:e0:cb:7f:dd:ea:63:6b:f7:cb:5b:05:de:99:75:7a:74:32:
8c:aa:1e:5b:4e:9e:2c:93:c7:cb:d5:eb:33:d4:8d:ad:a0:4d:
a2:28:15:c1:03:a1:c6:80:c1:dc:b6:3b:3a:68:99:a6:36:83:
6a:f4:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 06:20:10 2025 by rpki-client