This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json)
Hash identifier: OxfM7TW2O+fEnK0OooHKaB5TmVp1YHH2Cn5n7ivajCw=
Subject key identifier: 03:72:C3:46:1F:1F:83:C0:63:DD:4A:86:45:7B:7C:AD:22:89:0F:FC
Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
Manifest number: 01ED
Signing time: Fri 05 Dec 2025 01:03:47 +0000
Manifest this update: Fri 05 Dec 2025 01:03:46 +0000
Manifest next update: Fri 12 Dec 2025 01:03:46 +0000
Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: Z6lx06jVMiTHoKcEPJNTY62s51MyL+ONNOCeTmERh4I=)
2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 2Sk6qdac85J3PHWk8OUfv3qQs5GZrJRqheFoyWeSnOE=)
3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: T/t95RGiv+MhA6WaLbxmQnLnySE9uteSKwYbrk4jpmc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD
Validity
Not Before: Dec 5 01:03:46 2025 GMT
Not After : Dec 12 01:03:46 2025 GMT
Subject: CN=69322f73-6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:fa:5f:60:91:9e:e8:8c:69:62:18:78:96:
93:d6:5d:b9:70:eb:52:3c:3f:19:2f:f7:78:98:ec:
e1:18:d7:c1:fc:72:82:f3:07:92:2b:98:23:dd:45:
93:a4:cc:65:91:33:1e:9c:53:6d:4b:13:d6:e0:37:
af:18:a3:f0:e3:59:2c:de:80:c5:2a:60:26:7d:ca:
4a:52:13:02:da:5e:a7:c4:6b:97:af:70:bd:c1:81:
d7:f2:fd:59:e7:76:2d:2c:8f:08:54:fb:67:6e:e9:
62:66:2f:26:62:e4:bb:c7:aa:98:1f:29:2a:69:e0:
36:88:8d:23:37:1a:1d:e3:27:96:81:0e:8d:da:90:
a8:49:d5:62:7e:4d:86:58:ec:83:ef:1c:06:84:80:
0f:8c:04:31:30:93:8b:4e:e0:a7:81:05:ed:39:7b:
41:2a:8f:91:79:a6:17:d7:b0:33:39:d8:d2:c0:8d:
3b:b1:16:fb:d2:3c:c3:5e:68:9e:db:21:0c:c8:b4:
58:06:83:78:43:4c:e8:b4:2b:b1:28:e2:bc:f0:c6:
a4:f6:59:fe:48:f8:1f:c6:53:82:67:8d:04:11:c9:
41:e5:d2:b5:0b:47:d7:a1:ec:9f:8b:34:dd:71:d3:
b1:05:04:60:13:85:c1:1d:8f:4c:96:2c:59:ad:f6:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:72:C3:46:1F:1F:83:C0:63:DD:4A:86:45:7B:7C:AD:22:89:0F:FC
X509v3 Authority Key Identifier:
keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:79:fc:2f:99:6b:bf:8d:9c:fc:29:1c:d0:18:40:c1:c3:
8d:41:ba:e7:0b:8c:ea:f7:b8:83:56:aa:cd:79:75:3d:91:89:
5e:7d:f0:17:9a:96:70:4b:1e:38:a9:2a:db:3b:2b:86:32:ad:
60:f4:78:ac:72:73:7b:12:5b:bb:c9:be:e5:92:53:04:46:41:
df:a4:89:9b:ee:09:73:cb:dc:2e:65:fd:78:1b:2e:b1:d9:1b:
bd:14:82:2c:ec:66:ef:81:7b:fa:99:ef:3a:2c:2f:f4:8d:6a:
29:22:4c:13:4f:13:0c:a4:cf:af:53:c3:74:cf:2b:75:f9:56:
e4:66:05:4e:0d:26:01:c8:4b:4f:0b:56:2d:30:8d:71:86:f8:
fe:f4:49:55:41:30:69:50:9c:89:41:e6:46:57:1b:80:4b:24:
7f:fe:ea:82:5c:5a:e9:19:f8:76:b6:49:f9:11:b5:e9:8d:2e:
12:d8:6a:4f:f1:38:6d:3d:28:77:4b:22:e5:02:41:37:e7:bf:
70:3b:68:a5:70:42:f6:83:87:74:fa:78:36:09:42:08:2f:59:
85:b2:27:73:49:a6:31:d2:69:b1:94:d8:ee:9d:ee:65:69:49:
aa:83:fd:5b:26:4c:e3:ea:de:2b:3d:12:94:3d:b7:36:50:dc:
71:17:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:21:31 2025 by rpki-client