This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
File: RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft (raw, json)
Hash identifier: qiV3U2KOERREMm987z0H0+OAq3eeOxpse+hblcNRKVM=
Subject key identifier: 81:77:FD:3E:45:73:A0:C2:BB:9B:1E:3A:1A:94:D9:A4:9B:78:66:A5
Authority key identifier: 46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
Certificate issuer: /CN=A91DF31D/serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
Manifest number: 0192
Signing time: Sun 07 Dec 2025 02:02:42 +0000
Manifest this update: Sun 07 Dec 2025 02:02:41 +0000
Manifest next update: Sun 14 Dec 2025 02:02:41 +0000
Files and hashes: 1: RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl (hash: XuLpWg4bWg9W8Zo9dRlrSKn72K47rj31EdQYalalITU=)
2: FA272BC67EBE11EEABD00B4DC4F9AE02.roa (hash: Is2ym6G52Gd8iJAmBag68kzO/t9tRYX/H4mMynU8bi4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF31D, serialNumber=4600C18D62C6F724D5C95506F41B8C95FC390DC0
Validity
Not Before: Dec 7 02:02:41 2025 GMT
Not After : Dec 14 02:02:41 2025 GMT
Subject: CN=6934e041-6cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:73:07:3e:b5:5a:7b:ae:0d:2a:14:6a:e4:
42:bf:6a:88:4d:42:50:01:c2:0c:d5:96:5c:24:50:
82:09:73:6d:c6:17:d7:c2:52:ac:ba:5c:76:af:1b:
be:b0:f9:63:87:08:f3:97:24:92:78:a4:e5:be:7e:
db:78:84:bc:62:e7:a2:5e:84:ab:01:17:28:3e:73:
7d:15:48:00:a5:47:5c:e6:49:e5:5a:88:30:97:f8:
a2:54:37:f6:db:27:0d:62:16:a2:d1:cd:46:62:65:
21:4c:8e:31:60:9a:fc:27:e2:c3:bc:df:68:e6:67:
28:cc:6a:27:01:7c:c3:04:45:6a:23:af:41:f3:af:
27:75:78:e9:4e:d0:f6:3f:72:5d:ac:3f:19:88:08:
1b:77:7b:25:aa:8f:93:52:52:db:3c:fe:40:48:26:
7a:d5:3f:8a:29:43:ce:bc:85:c3:64:6b:c2:8c:ef:
ca:19:28:fd:90:6b:f7:4a:52:b6:36:96:bc:ae:43:
d3:f5:f2:5a:04:b7:6c:01:b5:bc:3c:ab:62:35:77:
ff:34:38:04:73:50:17:7f:91:85:46:21:6a:74:71:
f2:cf:ad:64:61:28:32:df:ba:86:bd:a1:8b:3d:23:
e8:a9:8a:6e:fe:25:5b:d2:12:83:2d:be:a0:b3:f8:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:77:FD:3E:45:73:A0:C2:BB:9B:1E:3A:1A:94:D9:A4:9B:78:66:A5
X509v3 Authority Key Identifier:
keyid:46:00:C1:8D:62:C6:F7:24:D5:C9:55:06:F4:1B:8C:95:FC:39:0D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RgDBjWLG9yTVyVUG9BuMlfw5DcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF31D/055AB5447DF711EE87B7D430C4F9AE02/RgDBjWLG9yTVyVUG9BuMlfw5DcA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:03:d0:85:b9:4e:90:5d:1a:a8:6f:a4:39:8f:d9:d8:c0:6e:
e9:85:db:f9:5f:83:d9:f3:ce:b1:0b:39:18:33:7c:af:74:5a:
1c:67:1d:67:41:58:00:c1:9f:ab:2c:96:6c:84:05:32:ff:69:
88:2b:0a:b3:f5:2a:d4:2f:7d:32:0d:8f:1a:d3:86:d1:7e:9f:
6a:28:a3:1e:04:83:6a:3c:0c:41:10:fd:40:98:d9:70:75:dc:
6b:20:9d:fe:51:2f:f8:bb:61:dd:c4:40:01:e0:dd:a9:7b:76:
56:f3:43:4c:89:d0:6f:8a:a9:a3:d3:38:1f:fe:4f:b7:05:a2:
bf:1e:eb:74:8e:03:d7:2b:c5:7e:c6:ae:a0:28:a1:b9:ba:bb:
26:8b:0e:51:fe:21:70:6b:28:07:43:04:21:a3:2a:4d:77:f5:
b4:86:5e:40:ef:0b:27:35:a0:06:12:b2:9d:78:ea:9b:41:54:
9e:36:87:07:73:ba:34:1e:36:72:23:c4:96:fa:6f:b3:f7:2d:
97:70:05:a3:cf:13:2a:3d:c9:4a:5f:f3:7e:e5:4d:eb:ca:69:
77:96:47:1b:04:71:2e:77:ed:df:9e:e0:d6:7a:d8:2a:3a:c1:
9f:36:48:21:1e:31:72:39:91:28:de:ea:23:31:87:d2:d6:0f:
5f:f1:ec:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 05:07:54 2025 by rpki-client