This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
File: aXYgUV57Huisfz9tE76uumLE7ak.mft (raw, json)
Hash identifier: x6aTD/A618DbpVMnonmsa4lgVKamk1opKoxZwW01ONg=
Subject key identifier: E5:7E:BC:66:11:D5:CF:46:EF:89:4E:B8:24:21:5F:EC:86:12:40:7F
Authority key identifier: 69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
Certificate issuer: /CN=A91DE2AE/serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
Manifest number: 023A
Signing time: Wed 17 Dec 2025 01:31:19 +0000
Manifest this update: Wed 17 Dec 2025 01:31:18 +0000
Manifest next update: Wed 24 Dec 2025 01:31:18 +0000
Files and hashes: 1: aXYgUV57Huisfz9tE76uumLE7ak.crl (hash: bcuDSZiTJwHmQeOFaq6QWgafnjapVkCOhkKP1C/ehK0=)
2: F3B716768F2F11EE86964D62C4F9AE02.roa (hash: MPJcPtDS4/T3UppAe6encPh5IY9tUXaMAMvIPt7HvEE=)
3: 38E45CE08C2511EDB64DB410C4F9AE02.roa (hash: qmc/H0ByapLSZ1bg3nVk+PyVwmov94i2JIkcZK53qgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 01:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE2AE, serialNumber=697620515E7B1EE8AC7F3F6D13BEAEBA62C4EDA9
Validity
Not Before: Dec 17 01:31:18 2025 GMT
Not After : Dec 24 01:31:18 2025 GMT
Subject: CN=694207e7-c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:b9:c9:86:44:52:7d:cc:db:70:37:ca:6b:
36:ac:9c:a1:27:df:62:57:42:27:24:47:23:2a:6c:
bb:8b:6c:ff:b5:de:41:1c:0d:8e:0a:37:ef:2a:7b:
1e:a6:fd:ee:c2:08:4a:83:fd:9e:a3:41:44:ac:3e:
78:f7:da:97:0c:f4:49:40:6a:e4:58:99:36:97:0d:
8d:59:75:cc:83:8f:5d:e5:f0:30:5c:cd:c3:74:44:
38:c7:8b:08:11:d9:e7:63:b1:1a:31:b0:71:f8:b9:
de:c0:c2:31:1e:2c:f6:f9:6a:98:28:a4:f9:d3:58:
dc:13:ca:f9:f0:03:c5:46:46:49:e6:45:e7:63:27:
1b:f3:75:3e:5e:5d:2a:76:78:1d:2f:34:91:d8:1e:
fe:e1:06:91:17:e4:46:a0:3d:c7:75:87:30:0f:87:
95:34:42:2a:f5:5f:ec:d6:15:74:bf:6f:e6:b0:c5:
20:42:cb:86:be:8d:48:24:7b:51:24:37:29:4e:ea:
d3:a6:82:8c:c2:be:b0:43:06:03:df:dc:e9:3b:84:
84:57:22:1a:da:4a:f3:c6:f0:7a:90:74:6b:cd:eb:
52:db:e0:79:00:fb:5a:48:bc:1e:2b:3c:8c:9d:4b:
3f:5b:d9:8f:09:7e:b0:73:19:fa:46:bc:0a:79:d0:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7E:BC:66:11:D5:CF:46:EF:89:4E:B8:24:21:5F:EC:86:12:40:7F
X509v3 Authority Key Identifier:
keyid:69:76:20:51:5E:7B:1E:E8:AC:7F:3F:6D:13:BE:AE:BA:62:C4:ED:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aXYgUV57Huisfz9tE76uumLE7ak.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2AE/C70FEA2A8C2011EDADD5C809C4F9AE02/aXYgUV57Huisfz9tE76uumLE7ak.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:67:82:00:04:2e:53:79:c3:92:f4:25:0e:ff:6f:58:84:1b:
9f:82:13:49:dc:8b:da:59:75:0d:14:91:32:45:f8:13:c5:0c:
15:40:c6:07:88:f0:f9:9a:e7:49:bf:0d:ac:28:fe:67:03:79:
d5:15:71:dc:40:62:72:8c:af:59:5d:48:aa:d5:c1:cd:8c:5c:
34:41:6f:05:fe:bb:cf:2d:c1:0e:0b:c1:dd:e4:45:04:48:82:
97:d6:e2:20:45:a9:06:ad:1e:20:82:6b:dc:be:a9:9c:eb:c0:
ab:83:9e:ec:fe:85:2b:b0:21:16:1d:46:92:ec:70:f2:2d:de:
bf:69:2f:c1:d9:65:c2:3e:5a:c5:1f:01:7c:a2:17:2d:50:7d:
11:c7:66:79:58:9b:10:1a:aa:d7:83:bc:95:ee:a2:f7:62:50:
c2:0b:cb:3b:c3:a5:b2:5c:e4:c5:a7:ba:19:94:25:76:54:73:
2c:6d:e9:c0:d8:45:46:f6:97:42:c8:18:70:46:2a:fb:be:87:
e4:1b:b0:db:03:56:8f:e8:ee:79:a9:3c:75:63:00:d8:11:f8:
34:47:18:24:fa:e1:65:c9:fc:b9:1f:e3:ca:d3:83:e2:19:5d:
49:cd:dd:ac:63:17:f8:4c:db:99:13:bd:f2:f1:7a:e0:5a:3b:
6d:e5:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:46:34 2025 by rpki-client