This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json)
Hash identifier: cdbZDHbypiXkuVQMyNzIaVNSQzVcsFVzqufTMEkrCA4=
Subject key identifier: 8C:C7:57:28:0C:B5:C8:19:4D:3E:2E:CC:E7:74:EF:95:CC:8D:2F:F0
Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Certificate serial: 04B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
Manifest number: 0486
Signing time: Thu 04 Dec 2025 22:43:14 +0000
Manifest this update: Thu 04 Dec 2025 22:43:14 +0000
Manifest next update: Thu 11 Dec 2025 22:43:14 +0000
Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: /jmfiqFW34ZKULqqhTdk6H6rWU/1m7P2/LeIg5crGiA=)
2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1203 (0x4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2
Validity
Not Before: Dec 4 22:43:14 2025 GMT
Not After : Dec 11 22:43:14 2025 GMT
Subject: CN=69320e82-9d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:1e:6e:9b:17:2d:ba:2a:47:e0:56:ad:89:
38:b2:2c:30:d3:32:76:80:b1:80:6a:7b:52:19:46:
a5:be:00:8a:e7:5b:53:fd:21:a4:75:6c:de:1e:1b:
b4:57:d5:88:5a:86:88:ec:6f:0f:03:bb:2b:aa:66:
61:be:62:7a:f9:92:c4:50:4e:5f:9d:63:89:df:e5:
a5:63:f7:21:94:26:96:82:e0:ad:35:b8:df:a1:ba:
bc:23:34:f0:9c:2b:b9:2c:f2:b2:90:0b:94:c8:e5:
b3:59:7e:16:03:bc:3e:16:c2:84:22:26:5d:a3:7b:
14:35:38:6c:cf:83:8d:bf:c6:a8:64:c8:00:d8:1a:
05:5c:34:22:5f:76:61:25:fe:a2:21:5e:1f:c3:70:
7c:58:17:2b:39:2e:2b:14:4e:07:b3:52:0d:63:60:
64:91:48:49:c2:dc:8a:8c:13:ad:f8:f4:fc:d9:93:
7f:71:18:a8:32:07:f3:4c:8e:a4:47:dc:a4:9d:2b:
50:36:e0:71:0d:68:81:9f:fc:c9:47:46:35:14:98:
ef:d7:95:09:27:03:c5:01:88:3d:13:c1:9b:d8:f7:
16:a2:f7:c5:2a:ca:6c:83:38:43:21:87:01:77:30:
cd:73:40:32:4d:77:24:8a:9f:0c:36:e0:ff:8c:b4:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:57:28:0C:B5:C8:19:4D:3E:2E:CC:E7:74:EF:95:CC:8D:2F:F0
X509v3 Authority Key Identifier:
keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:73:a2:91:68:ef:1f:88:3c:68:c6:7d:b2:b5:15:45:93:af:
38:ec:e0:98:9c:46:a1:9b:aa:ad:37:23:35:eb:cf:c6:e5:81:
c3:d0:92:05:de:6c:93:28:aa:94:b2:11:0e:e5:8e:c7:d0:dc:
89:04:9d:20:25:5b:77:18:04:93:90:cc:27:3d:76:51:80:88:
0a:3a:be:51:04:4d:eb:fa:3d:8a:0d:9b:16:d4:35:18:97:88:
c4:c9:60:de:21:ea:05:40:78:97:49:4d:dd:e2:4a:c1:dd:4c:
c2:26:22:74:74:95:d1:27:8e:a5:be:5e:db:ae:dd:3a:e5:8b:
bb:a2:cd:7e:2e:42:69:08:99:ad:9c:67:70:d5:ea:54:7f:13:
e4:73:45:c9:9d:a7:bb:af:f9:d0:a3:9f:96:34:c9:f7:4c:12:
92:a8:a3:de:d4:4c:2d:21:4a:aa:9f:4e:d6:7e:66:34:b0:97:
72:ad:e6:33:71:01:b6:95:cd:0a:70:b7:e0:94:3b:21:27:fa:
d3:48:6b:25:2d:a5:f3:4e:8a:7e:12:a5:be:d1:64:2c:da:bd:
47:bf:c5:ee:f6:3f:58:c1:34:60:d2:b1:08:ba:0f:c2:06:51:
75:f1:3f:de:f5:75:53:97:21:3d:1f:62:27:dc:b6:17:cf:c9:
1c:2d:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:35 2025 by rpki-client