This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
File: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft (raw, json)
Hash identifier: PWQU8WHn2IxjbhYl/jou9oKfdjxuHYQoOwH3OFpis78=
Subject key identifier: 7B:DF:8F:3A:28:7D:12:89:84:70:18:F5:8E:AA:82:C4:F2:9E:F1:86
Authority key identifier: 93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
Certificate issuer: /CN=A91DE323/serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
Manifest number: 01A9
Signing time: Fri 05 Dec 2025 01:32:17 +0000
Manifest this update: Fri 05 Dec 2025 01:32:16 +0000
Manifest next update: Fri 12 Dec 2025 01:32:16 +0000
Files and hashes: 1: kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl (hash: mernSKGLyPd6G1FwnVh2xkALsDk6Bo4VOrvnPdFoj1E=)
2: 3AB9E692C0D211EEB7BBBE4FC4F9AE02.roa (hash: A0mC9X2UnmVuFudZOyuXLKDdp8UzNcimAQJMyA4hcow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE323, serialNumber=9304234E739049143A8591A3745A53E4B92AD8D8
Validity
Not Before: Dec 5 01:32:16 2025 GMT
Not After : Dec 12 01:32:16 2025 GMT
Subject: CN=69323621-ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:1c:ad:a9:7a:2e:1d:1d:f9:06:c8:22:d2:
e4:92:56:f8:d0:fc:8c:42:41:14:e7:42:22:ab:fa:
bd:86:86:c6:fe:32:2f:5e:95:7b:ff:ca:35:3a:4c:
ae:cf:5b:d9:53:9e:25:14:fd:ca:a3:78:a5:3d:f7:
24:1c:eb:74:f7:6b:51:d1:5a:f3:eb:11:66:3b:e3:
a1:32:0a:7c:10:73:8d:e0:65:cc:6b:90:c5:13:95:
dc:4b:68:81:39:1f:cf:fa:07:06:48:2f:70:b0:16:
b7:a5:28:77:48:8d:95:10:ab:7e:c4:d9:b8:1e:7d:
7a:b2:30:71:66:1e:a4:f9:87:92:0b:d5:2a:23:8c:
ad:d4:b9:09:43:10:e5:15:f6:ac:be:56:f1:71:08:
0a:5a:ec:55:39:c2:b1:96:34:4b:54:6e:1a:6f:b8:
fe:33:99:6b:37:8f:b4:72:2c:e2:86:31:32:a6:4f:
23:11:3c:bf:01:0f:8d:a1:c7:37:c0:56:dd:05:af:
cc:54:62:01:d8:93:45:b9:bb:0d:df:b6:e1:95:b9:
ee:dc:f7:d7:12:e5:f5:5a:c0:ed:de:e2:5b:83:57:
1b:0f:9c:fe:23:ad:00:73:06:a7:6a:bc:f9:76:70:
49:42:22:5c:a1:89:44:2e:4b:87:d6:79:02:f0:10:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:8F:3A:28:7D:12:89:84:70:18:F5:8E:AA:82:C4:F2:9E:F1:86
X509v3 Authority Key Identifier:
keyid:93:04:23:4E:73:90:49:14:3A:85:91:A3:74:5A:53:E4:B9:2A:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE323/9E61E424525F11EE80BA0D74C4F9AE02/kwQjTnOQSRQ6hZGjdFpT5Lkq2Ng.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:41:a6:30:4d:22:b0:7c:45:1f:a3:03:8a:fb:6a:c6:1e:33:
58:33:70:89:16:6b:e9:8f:67:58:60:e8:22:d2:0c:5b:8c:aa:
a4:c1:44:f5:a7:21:8c:a1:df:c5:dd:98:f8:36:11:05:e1:3f:
d6:9f:37:e4:38:12:5b:0b:bc:e9:aa:90:00:2b:5f:d3:d3:5d:
a5:07:9b:b4:9a:28:39:74:d8:52:80:e2:3e:b6:db:d4:b5:39:
04:69:5e:57:bb:dd:33:73:0c:60:55:07:19:a6:9c:4f:41:e3:
29:89:1a:3d:67:8b:07:04:ed:26:95:f1:e5:b3:d0:36:50:7a:
33:28:51:e3:66:4d:9b:5c:80:aa:58:39:14:55:c1:b2:f1:5d:
2f:5b:ef:10:88:e5:10:eb:e7:63:3c:5b:4b:79:2f:da:c7:15:
1f:bc:d6:c2:c9:35:66:18:79:2a:05:45:35:41:33:be:7b:06:
9d:73:af:01:43:5f:38:17:c4:82:9f:d0:7b:01:fd:dc:c4:4e:
b7:e8:0d:84:9a:18:12:a8:ef:3b:47:98:d6:27:4c:fb:d1:a0:
a8:2a:68:47:9f:ad:4c:d0:a3:3e:d8:cc:29:22:f5:ce:60:19:
eb:ab:bf:f3:21:58:96:67:b5:fe:6f:32:56:7d:d2:72:5b:7e:
26:a2:ee:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUzMjMxMTAvBgNVBAUTKDkzMDQyMzRFNzM5MDQ5MTQzQTg1OTFBMzc0NUE1M0U0
QjkyQUQ4RDgwHhcNMjUxMjA1MDEzMjE2WhcNMjUxMjEyMDEzMjE2WjAYMRYwFAYD
VQQDEw02OTMyMzYyMS1hYzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0fscral6Lh0d+QbIItLkklb40PyMQkEU50Iiq/q9hobG/jIvXpV7/8o1Okyu
z1vZU54lFP3Ko3ilPfckHOt092tR0Vrz6xFmO+OhMgp8EHON4GXMa5DFE5XcS2iB
OR/P+gcGSC9wsBa3pSh3SI2VEKt+xNm4Hn16sjBxZh6k+YeSC9UqI4yt1LkJQxDl
FfasvlbxcQgKWuxVOcKxljRLVG4ab7j+M5lrN4+0cizihjEypk8jETy/AQ+Nocc3
wFbdBa/MVGIB2JNFubsN37bhlbnu3PfXEuX1WsDt3uJbg1cbD5z+I60Acwanarz5
dnBJQiJcoYlELkuH1nkC8BClhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvfjzoo
fRKJhHAY9Y6qgsTynvGGMB8GA1UdIwQYMBaAFJMEI05zkEkUOoWRo3RaU+S5KtjY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTMyMy85RTYxRTQyNDUy
NUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNSUTZoWkdqZEZwVDVMa3Ey
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t3UWpUbk9RU1JRNmhaR2pkRnBUNUxrcTJOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTMyMy85RTYxRTQyNDUyNUYxMUVFODBCQTBENzRDNEY5QUUwMi9rd1FqVG5PUVNS
UTZoWkdqZEZwVDVMa3EyTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFQaYwTSKwfEUfowOK+2rGHjNYM3CJFmvpj2dYYOgi0gxbjKqkwUT1
pyGMod/F3Zj4NhEF4T/WnzfkOBJbC7zpqpAAK1/T012lB5u0mig5dNhSgOI+ttvU
tTkEaV5Xu90zcwxgVQcZppxPQeMpiRo9Z4sHBO0mlfHls9A2UHozKFHjZk2bXICq
WDkUVcGy8V0vW+8QiOUQ6+djPFtLeS/axxUfvNbCyTVmGHkqBUU1QTO+ewadc68B
Q184F8SCn9B7Af3cxE636A2EmhgSqO87R5jWJ0z70aCoKmhHn61M0KM+2MwpIvXO
YBnrq7/zIViWZ7X+bzJWfdJyW34mou5i
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:00 2025 by rpki-client