This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
File: TK0nK60dhwmxbpl1AG4SJVIFyPY.mft (raw, json)
Hash identifier: fhyR26aucoYkUC/gbPm4W62u+XWfVumQjFI93cwjqfQ=
Subject key identifier: 6F:BD:CD:E9:18:25:1C:0D:42:ED:17:19:E9:E7:21:09:8E:AD:FE:2D
Authority key identifier: 4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
Certificate issuer: /CN=A91D9A6E/serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Certificate serial: 018C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
Manifest number: 017E
Signing time: Fri 05 Dec 2025 02:02:18 +0000
Manifest this update: Fri 05 Dec 2025 02:02:17 +0000
Manifest next update: Fri 12 Dec 2025 02:02:17 +0000
Files and hashes: 1: TK0nK60dhwmxbpl1AG4SJVIFyPY.crl (hash: 6tgaKypRP0Fyxq8jy68oHkYVD+7hUEvcLPWIylUKNeM=)
2: 34B484F49B0D11EEB69D6B1CC4F9AE02.roa (hash: LN+Bl9RZ1hirx8n/6IVVyjnDU7gxEMZFLl6YFsSXHSs=)
3: C4B561629AFA11EEB91A2174C4F9AE02.roa (hash: Ba1lgzMsQfqpR3ei0tOYxQcrh9RVC5oeP2BQeuQZDHk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9A6E, serialNumber=4CAD272BAD1D8709B16E9975006E12255205C8F6
Validity
Not Before: Dec 5 02:02:17 2025 GMT
Not After : Dec 12 02:02:17 2025 GMT
Subject: CN=69323d2a-deb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:ef:fa:0b:21:df:67:ab:0a:c5:d0:8c:7b:
38:60:63:97:fa:f2:69:46:91:1e:00:f2:42:b9:f0:
e7:86:25:2f:01:12:44:1d:a9:bb:27:d9:f1:85:ba:
ee:5a:32:f3:8a:07:44:ee:e3:65:c7:be:f8:a8:eb:
6e:e7:17:ed:5d:df:56:9a:6e:a6:bd:b8:ed:59:81:
25:7b:31:2c:13:de:d9:90:32:66:34:01:49:c3:ed:
f6:55:ae:5c:89:f6:3b:50:1b:a4:1c:21:87:b2:70:
9d:cc:9c:ee:2f:00:cc:20:87:12:8a:71:87:83:46:
42:4f:84:8b:dc:c2:8e:88:3a:a1:d9:1c:9a:bc:59:
8b:fe:39:10:6d:4a:1b:78:89:c9:02:b5:11:ca:a5:
26:58:af:83:a3:5d:99:0d:fc:1a:f0:99:7b:28:a3:
6d:9a:e1:c2:3a:23:dd:ef:47:71:3f:9d:39:8b:4a:
0c:65:f2:e1:d8:c1:39:69:82:7b:bc:8a:87:d3:61:
5a:c4:79:92:a3:09:d6:c0:19:cb:9b:f6:56:ac:de:
8f:aa:89:f8:2a:64:d4:40:4e:bd:ea:ab:fd:5c:a9:
63:a3:6b:ce:c1:39:28:ae:41:35:90:b9:e2:e5:08:
0c:35:9d:25:36:23:bc:70:e2:2d:8f:88:0a:20:5c:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:CD:E9:18:25:1C:0D:42:ED:17:19:E9:E7:21:09:8E:AD:FE:2D
X509v3 Authority Key Identifier:
keyid:4C:AD:27:2B:AD:1D:87:09:B1:6E:99:75:00:6E:12:25:52:05:C8:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK0nK60dhwmxbpl1AG4SJVIFyPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6E/F51FF8869AF911EEA16DBC55C4F9AE02/TK0nK60dhwmxbpl1AG4SJVIFyPY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:52:bd:e3:49:25:c8:04:53:de:72:9c:89:94:db:bb:59:8a:
a6:da:ac:95:5f:fb:97:32:19:45:56:ca:e0:73:fe:06:24:ba:
de:00:6b:e9:85:92:2f:be:ca:d8:7a:80:97:e5:05:4e:ce:ca:
b6:c3:e7:7a:af:40:a4:49:b0:aa:54:24:a0:a8:b5:37:26:46:
4a:1d:d7:55:eb:f3:95:44:9e:e5:5b:67:3e:9d:38:da:47:45:
0b:7a:92:52:4f:78:a8:16:dd:42:fe:b1:31:8f:8d:7a:08:24:
14:1c:d8:c7:42:28:22:bc:98:7b:98:0a:34:4b:2d:aa:37:5f:
44:2b:3d:35:c6:47:4a:8a:d3:f2:e0:96:2d:5f:f0:65:47:b8:
46:3a:ae:65:0c:ec:b7:ea:ba:3a:f8:35:86:a1:83:7c:7e:1f:
39:bc:bc:83:d9:64:08:db:f6:76:e0:9b:45:a6:27:39:a6:ab:
14:36:e0:38:60:76:1b:04:b4:b6:87:36:d3:1a:6d:24:77:84:
f0:03:56:b8:a5:d3:ea:26:80:d9:cb:08:13:5a:cf:f1:cc:c0:
f8:51:0a:45:64:a0:81:de:79:88:4d:6a:b2:e5:78:70:66:2d:
93:f1:1d:ac:c5:cb:31:f3:48:c3:14:d9:b1:ab:5d:d0:33:f0:
55:50:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:48:40 2025 by rpki-client