This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
File: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft (raw, json)
Hash identifier: DIV9TJX86vVN7QF3kR1z4IhogxD8JcPsOzFzpOsxTiI=
Subject key identifier: DC:C3:0D:5F:D6:8A:D8:A7:0D:B4:F9:6B:FF:4F:D1:2D:72:AB:38:AC
Authority key identifier: 15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
Certificate issuer: /CN=A91DBF0C/serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Certificate serial: DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
Manifest number: D7
Signing time: Fri 05 Dec 2025 03:39:39 +0000
Manifest this update: Fri 05 Dec 2025 03:39:38 +0000
Manifest next update: Fri 12 Dec 2025 03:39:38 +0000
Files and hashes: 1: FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl (hash: ymvBA1q1ch8gNhd2tw9Pkg/wQCAW0VPTfbrD9NzHdZA=)
2: 71DD0A968C8311EF81E2B476C4F9AE02.roa (hash: WDCx6Ip1deSWt5iJM0Hi3bLb60Rhv0AeoIkm86a38ho=)
3: 8A06894A8C8211EF85B3A572C4F9AE02.roa (hash: ppK8IQbIjJy1TkRWpxD5OmbmR02WCjcZqCZR//S3hJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl
rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0C, serialNumber=1548F1095F1E0F9B784B1B7FDD8F0E759C842DFE
Validity
Not Before: Dec 5 03:39:38 2025 GMT
Not After : Dec 12 03:39:38 2025 GMT
Subject: CN=693253fa-5f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:66:2a:be:60:67:b9:8c:5a:71:06:ae:1b:
68:4c:d4:9a:1a:d9:b4:41:51:ef:68:4f:a7:dd:d9:
d5:e9:a1:bd:e9:27:4e:16:d8:32:34:87:a2:56:a1:
b7:bc:17:d2:d9:b8:a9:ce:d6:ef:43:3f:bd:3e:0a:
61:e8:2a:7d:33:67:0d:2d:60:64:75:c3:21:5b:72:
3e:9a:1b:e4:33:3a:0e:87:e1:bc:5a:15:2a:36:11:
ee:62:af:7b:38:95:31:d0:92:3c:9e:0f:30:35:b0:
45:ed:44:d4:1d:66:3f:1c:16:a5:b2:1b:26:4d:ed:
17:87:5c:b8:8a:3b:85:6f:0e:cd:6c:7e:33:49:d1:
f1:bc:87:84:c3:1a:91:09:f5:15:5b:e2:b0:6e:2e:
f0:72:ef:bf:f1:8a:4b:5f:f5:cb:a6:33:49:9d:b6:
24:c8:8c:a2:a8:84:7f:1d:85:f5:40:43:f8:1f:66:
ff:bc:c9:57:ff:50:85:38:2a:51:de:82:3e:de:85:
96:36:3e:53:94:93:a0:2b:8b:78:c0:b0:0d:cf:53:
e8:c1:f1:2d:b6:e1:ac:5e:a3:f8:9f:ac:e4:98:89:
0c:4d:45:d2:15:9a:59:7e:d7:6a:2a:1e:6e:9e:ab:
73:39:b1:33:21:18:94:1f:ba:a5:cc:7b:93:9b:46:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:0D:5F:D6:8A:D8:A7:0D:B4:F9:6B:FF:4F:D1:2D:72:AB:38:AC
X509v3 Authority Key Identifier:
keyid:15:48:F1:09:5F:1E:0F:9B:78:4B:1B:7F:DD:8F:0E:75:9C:84:2D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0C/4A0FFA968C5B11EFA706757FC4F9AE02/FUjxCV8eD5t4Sxt_3Y8OdZyELf4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:2a:e7:7d:04:fe:57:d7:da:fe:e2:7b:41:5a:d6:8b:2f:ed:
dd:67:cf:7c:47:c5:c2:90:94:23:d6:88:ad:11:aa:79:c2:2f:
98:34:a9:16:8f:9c:5e:b3:4d:3c:ea:cf:b7:7e:6f:3f:3e:b6:
17:4c:33:92:e0:be:3b:b6:97:30:b3:75:dc:af:01:14:3b:bc:
cf:fd:a1:b8:25:f1:84:b7:14:ff:97:09:59:89:8d:86:ea:e9:
2c:34:fd:be:2b:d6:b8:81:89:d5:c1:c9:03:8f:5b:c4:b7:98:
21:4c:34:03:0e:90:67:f2:1f:e1:32:68:53:9d:05:2f:cd:10:
3a:4b:7c:c0:c7:ff:cc:4c:24:62:9a:d1:cc:e3:de:79:e8:76:
59:c4:e6:9c:7f:8b:05:2f:52:99:69:53:b7:29:ae:d0:3c:f4:
e2:ae:37:6f:9d:dd:4b:88:7f:08:7d:30:1c:46:df:c4:97:67:
6f:9e:a8:ab:56:cd:3f:6d:c6:39:5b:9e:da:8c:c2:68:97:16:
77:15:12:81:ec:32:b5:2c:b8:58:8b:fe:57:4c:a3:66:04:ee:
62:e7:b3:35:25:ca:af:18:cf:de:39:53:52:d0:6a:58:86:61:
5a:e8:17:a5:f2:a9:7c:64:45:d9:f1:ce:72:51:ff:f1:b4:8a:
63:fa:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:16 2025 by rpki-client