This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json)
Hash identifier: a48CbA+KCFmo6diQd03l0dJuRtMFgBklpCxJII1Pz6g=
Subject key identifier: BD:13:72:EA:2F:31:95:F0:56:67:0F:40:19:B3:A3:82:23:5E:8C:CE
Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Certificate serial: 01B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
Manifest number: 01AC
Signing time: Fri 05 Dec 2025 01:26:27 +0000
Manifest this update: Fri 05 Dec 2025 01:26:26 +0000
Manifest next update: Fri 12 Dec 2025 01:26:26 +0000
Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: 2YiFj9ix1quAvK2DnsXvrrnwVLYh/2h21atA69iIRKc=)
2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: wUxQPb5MXG1WoNfvu2qlWFFygupmyl9Dg9T+dYAheO4=)
3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: 7+kogSfoA5KHnVdL5HUL3JnEUIAqvGpgOMdM8vTSlLs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E
Validity
Not Before: Dec 5 01:26:26 2025 GMT
Not After : Dec 12 01:26:26 2025 GMT
Subject: CN=693234c2-cad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:95:14:36:f3:83:42:53:56:be:d1:ab:e8:
7e:69:4d:67:8f:c7:e0:81:9d:8b:30:6c:32:66:2b:
b4:6c:20:64:31:e0:66:83:fd:42:f2:08:be:94:99:
a2:97:b9:c1:23:68:72:1b:d2:52:5b:59:cb:50:34:
c8:03:a7:fa:52:fa:ab:9a:c5:1a:96:3a:74:9f:11:
fe:ab:36:11:33:36:3b:e8:b4:4b:4e:1d:7c:e6:e8:
56:33:0a:2a:5f:af:f8:16:8b:f8:49:fc:17:2b:89:
6b:0e:80:83:3b:d4:c4:06:8d:ed:a7:34:7c:a9:0d:
83:67:ca:d7:fc:2e:5e:fe:1c:76:98:18:92:c0:15:
79:85:63:4f:47:e8:f0:01:60:20:8f:5b:bc:5f:a5:
a6:cf:67:12:cf:03:b4:39:c5:db:e0:44:82:67:59:
f3:cc:b3:6a:38:6f:1f:69:95:4a:80:59:29:27:ed:
fc:73:50:ac:08:fe:bb:c5:c0:43:b7:ad:9e:7a:a6:
0d:bc:7d:e4:33:3d:a1:00:45:59:20:6a:c2:da:0b:
1a:d7:ec:3d:4e:18:03:df:1c:3d:be:d2:4d:83:7e:
43:c8:e5:3a:8c:4e:31:77:ea:3d:2f:09:7d:f9:05:
65:0b:5a:ad:1f:3c:8e:aa:03:b7:d3:53:ba:a6:47:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:13:72:EA:2F:31:95:F0:56:67:0F:40:19:B3:A3:82:23:5E:8C:CE
X509v3 Authority Key Identifier:
keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:26:0d:33:87:d1:d3:de:e0:98:b1:e3:56:69:88:7e:76:df:
bf:75:8b:49:0e:c2:21:80:8f:ea:d9:18:96:20:ff:c8:7c:2b:
a6:69:4f:ec:ae:39:69:a0:c6:80:68:78:e5:f5:38:25:dd:fb:
b6:d0:87:7f:9a:3e:68:33:d1:76:42:3b:54:f7:fb:fa:11:b0:
d3:00:4a:29:98:5a:a1:62:ed:d5:e4:96:84:1a:b8:9f:ea:77:
5b:f4:5f:45:d3:da:59:ae:03:b8:e4:c3:2f:34:58:fd:c9:e7:
16:09:12:20:9e:b0:f7:4c:4f:dc:1f:64:1c:92:0c:1c:22:1c:
96:ca:64:e2:f4:a0:db:5b:0b:6d:91:68:1b:71:08:c6:99:0d:
5e:26:bd:4a:bf:0d:b3:04:7f:e5:8b:19:af:3e:fe:ed:4b:8f:
32:9d:f6:05:3f:2b:5b:34:c2:a0:43:8c:69:6e:f2:f2:49:32:
b5:00:11:bd:e6:17:27:5d:c4:82:eb:ad:ff:43:4d:07:d7:c7:
69:09:0b:83:72:da:49:44:d2:a6:ce:93:c6:5f:d7:79:9a:b8:
79:b9:31:3f:56:ae:4c:89:d8:55:c7:fc:da:f3:6a:92:c0:fa:
66:28:fd:da:f1:14:9d:75:a3:9d:6a:84:1f:4a:53:e3:69:a4:
08:c6:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:36 2025 by rpki-client