This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
File: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft (raw, json)
Hash identifier: Nus71Q4LKbQIHJEeVNkRR3Yr9GliOhuYHz0okzreyx4=
Subject key identifier: A6:EF:55:FF:90:42:47:55:DE:2A:9D:3E:39:F9:E8:92:93:D9:6A:1E
Authority key identifier: 05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
Certificate issuer: /CN=A91D795B/serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Certificate serial: 058E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
Manifest number: 0588
Signing time: Sat 20 Dec 2025 22:33:11 +0000
Manifest this update: Sat 20 Dec 2025 22:33:11 +0000
Manifest next update: Sat 27 Dec 2025 22:33:11 +0000
Files and hashes: 1: Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl (hash: XkGgVL8GNmrVLPKcsp5KHjY5o4fGKYYp4Hd8ppBIHE8=)
2: 7C05ACEE75B311EF83EC6F78C4F9AE02.roa (hash: i9keOrGgDPDdpLU7sFp0e9zDGCL/M7UVsmnKpkq7UPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1422 (0x58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D795B, serialNumber=05BEF3B7646356CE409FC563F2A6907867795EF7
Validity
Not Before: Dec 20 22:33:11 2025 GMT
Not After : Dec 27 22:33:11 2025 GMT
Subject: CN=69472427-39a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:88:e2:78:b4:fc:95:fa:93:83:4f:16:1c:99:
34:e7:50:5a:0b:32:01:dd:78:af:a2:04:d0:f9:5a:
a5:4b:08:44:ed:21:08:c0:ac:4e:44:59:77:4f:c9:
75:10:a6:59:52:91:ab:9b:90:a1:dd:1a:1b:d5:32:
b2:c2:8c:69:71:cf:14:f6:8b:8a:49:8e:fc:ba:1b:
7d:e7:73:86:cc:71:0e:36:6a:5e:1c:c9:88:2f:5b:
ba:b8:d1:bc:83:15:17:1a:cb:9b:a2:a3:d7:6b:a2:
59:87:31:3b:23:bc:a7:52:79:bd:9f:f5:76:20:af:
3d:5a:66:ec:4f:b6:7f:c2:72:ac:2f:8b:6f:9a:b3:
39:3f:51:97:8b:94:99:c0:13:4c:08:a8:35:56:6b:
53:ec:a1:a8:c3:bb:ac:01:85:52:75:60:ba:cd:8f:
d0:47:a9:57:6c:4c:02:f9:30:d0:97:dc:1d:77:e3:
1c:71:83:d7:53:35:bc:8f:fa:23:84:f1:d0:72:0e:
60:53:41:4a:7d:ba:45:28:45:90:48:b5:59:bb:91:
98:d0:8c:f3:e8:8f:df:cb:96:bf:e4:09:cc:51:84:
02:5e:e6:fa:18:88:df:8c:49:40:14:d1:4d:c3:14:
7a:6b:9d:d2:9a:3f:ed:8d:93:96:f1:85:a8:eb:43:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EF:55:FF:90:42:47:55:DE:2A:9D:3E:39:F9:E8:92:93:D9:6A:1E
X509v3 Authority Key Identifier:
keyid:05:BE:F3:B7:64:63:56:CE:40:9F:C5:63:F2:A6:90:78:67:79:5E:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D795B/A88FB3E200C011EC96C2D583C4F9AE02/Bb7zt2RjVs5An8Vj8qaQeGd5Xvc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:78:51:ac:67:8a:9f:c8:f1:ae:80:7f:2a:80:c9:35:b9:23:
9c:20:aa:cb:bb:92:a7:ef:85:4c:40:3a:d3:74:25:10:86:c3:
d3:7d:85:ad:cb:70:97:ca:16:b1:a1:46:3a:0f:3e:32:e9:2e:
9c:36:55:53:ea:87:b8:2a:85:bd:d0:46:93:13:bf:ab:3b:b1:
9b:16:ce:bd:94:51:61:4f:45:26:4c:25:ea:d4:bf:8f:b2:5e:
bc:da:c1:46:08:d9:d8:e6:89:21:ce:6d:75:00:ad:d4:9e:70:
f2:8e:45:fd:ab:e0:32:59:79:e5:64:b6:50:e8:c4:6c:56:f1:
f8:39:62:e3:46:68:a2:f5:93:6c:2c:ac:a9:a3:94:2a:72:ea:
39:56:f0:c4:49:d2:22:12:36:11:dd:72:05:16:60:c1:e6:85:
e4:bf:29:ef:30:2c:69:fd:ab:c4:07:02:22:9f:c2:db:55:85:
53:1c:2e:c5:8a:1d:ad:7d:14:20:b5:48:b8:7b:56:f2:d3:59:
f0:11:3f:34:94:73:24:ee:f3:04:80:7c:07:a6:ae:ec:d6:d7:
42:1c:68:51:e2:b0:7b:5e:e2:a4:eb:a6:6a:13:e0:74:71:ed:
f8:88:e3:c9:8d:a4:d7:76:d2:8a:cc:97:49:98:e2:2c:b4:27:
f5:c2:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:11:44 2025 by rpki-client