This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
File: ixqAZb6Iqmwbo_7bVOCH59KttN4.mft (raw, json)
Hash identifier: fkBiIU63rgafGruKrs2e00Ehukuvt+ryW3z7KijyR60=
Subject key identifier: 55:A9:A7:24:56:FE:F4:89:E9:F0:08:A6:28:F9:A0:26:AF:F4:02:A2
Authority key identifier: 8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
Certificate issuer: /CN=A91DC068/serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
Manifest number: 014B
Signing time: Fri 05 Dec 2025 02:24:38 +0000
Manifest this update: Fri 05 Dec 2025 02:24:37 +0000
Manifest next update: Fri 12 Dec 2025 02:24:37 +0000
Files and hashes: 1: ixqAZb6Iqmwbo_7bVOCH59KttN4.crl (hash: Hn4phOSx5W6/4uXrZvwAz9p0nm3PuwvPzxAV5FU6EKQ=)
2: 4DDA8A18D5DD11EEA5B1C711C4F9AE02.roa (hash: FHRlsB48eK0jdLR0VwZXrRd3F+Rj548sH8y8zKsy5+s=)
3: 4D69D2D2D5DD11EEA5B1C711C4F9AE02.roa (hash: PAO2tzUE6VhuIQPWRUUuXZiVK/zRgbkDyCoIJqVq33M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC068, serialNumber=8B1A8065BE88AA6C1BA3FEDB54E087E7D2ADB4DE
Validity
Not Before: Dec 5 02:24:37 2025 GMT
Not After : Dec 12 02:24:37 2025 GMT
Subject: CN=69324266-d7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:f0:69:64:d8:62:4a:d0:d1:37:73:ea:90:
65:6d:5b:da:3b:b6:0b:90:6b:28:fe:97:36:3e:c5:
b5:a0:58:3a:01:2b:0b:fe:39:ce:a2:e0:3c:2f:b5:
bb:f9:70:e1:ae:87:0a:8c:ac:82:d4:f5:96:55:d5:
93:d1:50:66:75:5a:15:1d:64:7e:1a:46:27:b0:bc:
91:f0:df:11:be:70:64:3a:24:46:42:97:7e:d6:ba:
1f:db:7a:6a:7e:d5:fb:44:29:a1:fe:31:36:af:fb:
33:e5:de:f8:52:b7:ef:2c:70:c8:08:b7:8e:f8:85:
9d:30:f0:01:28:81:00:d9:12:f0:82:6d:ac:48:b5:
6a:a0:6a:9b:6d:f1:fc:fe:db:30:2d:84:bd:eb:bb:
8b:5e:85:06:e9:34:df:22:e2:24:23:89:e9:3d:03:
fe:1d:2e:fb:36:1d:f7:60:89:13:37:aa:39:2a:9d:
1b:fc:cb:b3:8b:c5:70:95:ef:da:3b:3f:e7:46:48:
cd:ca:33:e8:23:97:47:d3:f1:3a:26:60:21:85:37:
ce:ef:95:60:90:ac:7f:4e:08:5d:75:eb:0c:52:fa:
c2:c1:f1:2c:fd:66:a8:61:11:62:a8:4b:e9:aa:1a:
ee:05:ca:bf:38:56:f2:8b:63:d7:61:d2:67:ea:10:
f4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:A7:24:56:FE:F4:89:E9:F0:08:A6:28:F9:A0:26:AF:F4:02:A2
X509v3 Authority Key Identifier:
keyid:8B:1A:80:65:BE:88:AA:6C:1B:A3:FE:DB:54:E0:87:E7:D2:AD:B4:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixqAZb6Iqmwbo_7bVOCH59KttN4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC068/D77B9D66D5C411EE89C1970DC4F9AE02/ixqAZb6Iqmwbo_7bVOCH59KttN4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:d9:f9:bc:20:cb:f5:28:3f:b3:6c:98:a3:64:5b:33:32:3f:
43:60:b0:42:23:a1:3c:3c:28:10:fb:3b:33:b0:c0:a4:ee:ee:
c0:47:7d:7a:f7:91:7a:e0:75:08:c3:d5:c2:9d:fa:4e:48:87:
ce:a6:c3:31:54:38:c9:53:8e:f4:8e:d7:0d:1e:9d:25:72:ea:
13:11:df:70:4b:14:bd:78:87:d4:05:f1:6d:3f:3f:44:d9:39:
23:c2:65:37:9f:13:d4:cd:b7:a9:78:f2:ca:04:d6:95:05:b1:
0d:d3:66:51:53:1d:bc:ae:bc:af:54:e3:81:2d:70:22:65:42:
86:7f:91:aa:5d:75:c9:8e:4e:d2:cf:98:10:36:c0:b6:6b:b7:
90:a8:07:25:f0:5b:c5:9b:a2:a1:4e:c2:b4:98:10:27:54:81:
43:87:19:1a:07:72:94:31:d1:eb:88:7c:41:d1:58:4d:b2:f8:
95:ac:b3:0a:27:48:74:20:e3:f5:21:22:71:82:f1:55:18:d8:
5d:dc:b4:8d:cc:d2:41:e1:5d:1b:c3:3d:3b:18:c0:de:2e:19:
a4:cc:a2:f6:f7:3b:61:31:df:b2:69:e0:d9:88:12:e7:b3:9f:
df:65:02:6a:4f:a9:44:c5:f8:3a:ca:64:de:20:b8:c8:b7:20:
d5:8d:b5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:38 2025 by rpki-client