This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
File: SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json)
Hash identifier: fJDoXxphG6LvFXKjWaort2wbet+SEMQ3TMgTLwNEsr8=
Subject key identifier: 98:62:ED:87:5D:D8:40:D8:63:0B:E4:A2:D2:E0:82:B8:47:45:8F:48
Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
Certificate issuer: /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Certificate serial: 202E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
Manifest number: 2021
Signing time: Sat 06 Dec 2025 15:41:11 +0000
Manifest this update: Sat 06 Dec 2025 15:41:11 +0000
Manifest next update: Sat 13 Dec 2025 15:41:11 +0000
Files and hashes: 1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: LRrM0mlgfzpXSzvFhd8zoErHk/S5BFT2aHTRVKXW+NI=)
2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: X+fXZ0PrCkpU/Zz2pOrb1G2WQInc8FuVJwsYYh/w08g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8238 (0x202e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Validity
Not Before: Dec 6 15:41:11 2025 GMT
Not After : Dec 13 15:41:11 2025 GMT
Subject: CN=69344e97-ad16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:a9:63:e8:5d:cd:16:3c:f1:14:06:e2:96:
ae:3b:12:4c:94:2d:7d:f3:f0:3f:2a:b0:d6:42:c4:
c8:0a:48:09:c2:4f:ba:25:01:d8:99:c7:00:ea:4e:
96:d6:65:29:0a:67:f6:e3:5c:48:f7:a2:f7:6d:6b:
e9:a0:17:c2:bc:82:4f:0d:3d:81:b2:de:cb:85:e2:
20:32:af:b5:ab:8f:8c:c3:48:06:11:61:d1:c2:87:
b9:0b:f6:77:17:c9:25:55:58:ae:16:e1:51:23:27:
e7:ec:ce:9f:67:bf:3f:8b:f0:c2:01:88:da:06:d3:
91:78:70:3d:70:98:af:90:3b:2b:32:4c:fc:3f:cf:
40:e4:7b:89:dc:f5:22:96:af:f9:05:69:9f:a9:45:
27:8b:87:dd:02:64:54:e6:54:2d:7a:d4:11:30:43:
31:83:38:f4:d9:37:cd:9f:e1:dc:12:59:cc:0d:4f:
9f:c7:8c:b2:7d:b9:fe:99:fd:61:bd:8f:6c:0e:d3:
6f:88:29:14:ed:10:31:94:14:9c:ce:ce:cc:86:d5:
68:b7:e2:dd:5f:f0:c7:6b:8b:40:51:8f:01:4a:db:
2f:86:47:32:bc:18:c5:b0:e3:ee:6e:74:f0:0b:29:
70:0a:1d:64:5d:5e:b1:ef:cd:e3:5b:ec:e2:24:c1:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:62:ED:87:5D:D8:40:D8:63:0B:E4:A2:D2:E0:82:B8:47:45:8F:48
X509v3 Authority Key Identifier:
keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:10:a8:d9:9d:4a:cb:26:30:bb:3e:79:80:5e:e2:d6:8e:59:
ea:53:ea:da:e8:3a:28:da:bd:1a:cb:b7:cd:f4:98:3d:82:74:
98:99:d2:f5:15:f8:d8:1b:c1:69:c2:49:eb:3e:15:22:39:86:
84:f7:dd:ef:c2:6c:6d:fb:5e:8e:e5:a6:4e:15:7e:57:f7:27:
bf:b7:7d:6f:94:df:3a:95:72:21:a3:f7:d3:d6:c1:17:0a:27:
89:ef:d6:dc:df:ed:fb:87:19:ca:73:90:70:54:7e:c0:f5:e7:
b1:ed:23:a3:1c:72:a2:90:bb:4b:12:f2:91:d2:78:4d:7c:b3:
86:5c:3c:a0:f3:37:d0:ee:84:0e:c0:22:f4:aa:01:48:6f:ca:
26:f3:c3:30:c2:48:a6:91:70:bc:70:b3:1e:1e:57:b7:fa:e3:
d2:0d:17:68:a0:b8:7b:ed:4b:bf:53:2e:9e:b0:30:f3:23:2b:
1f:d5:4b:cc:05:a7:41:79:40:f5:23:3a:1c:c4:a2:0a:c4:70:
09:e0:15:a2:b8:08:05:ef:6b:2c:ef:41:64:9d:3c:ec:54:d2:
02:a9:21:c3:da:69:1f:ad:b7:06:36:9f:be:6c:b0:54:f3:13:
79:38:04:7c:0b:47:d2:b5:ce:81:a5:80:5c:42:35:6a:fc:6f:
1c:75:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:36 2025 by rpki-client