This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
File: rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft (raw, json)
Hash identifier: OcF89xhzseHtmpbfs6e5toLo1bZaG1uZWdqXVMwdPWA=
Subject key identifier: 89:44:DE:A0:28:D2:7C:BC:25:92:63:03:79:09:94:BD:D4:18:20:F4
Authority key identifier: AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
Certificate issuer: /CN=A91E1498/serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
Manifest number: 014C
Signing time: Fri 05 Dec 2025 02:27:35 +0000
Manifest this update: Fri 05 Dec 2025 02:27:34 +0000
Manifest next update: Fri 12 Dec 2025 02:27:34 +0000
Files and hashes: 1: rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl (hash: 2F+WNumfzklJ75eOxu2U8Feo7HkeTmNVJCh4+K/9W08=)
2: 6C523164E03F11EE87838439C4F9AE02.roa (hash: SK6ZvVianDlVw+18irRafax8Eg6g34dqTzqJORJNKeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1498, serialNumber=ADCD5A4DB599C71AED93D096AB14CAFA0815E617
Validity
Not Before: Dec 5 02:27:34 2025 GMT
Not After : Dec 12 02:27:34 2025 GMT
Subject: CN=69324316-be52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:27:31:14:a0:5b:92:71:d1:70:c2:90:21:
f5:c3:86:0f:49:bd:db:b4:f3:88:2c:c7:cb:91:04:
12:0d:91:6f:de:54:0e:f1:3e:a5:44:3d:89:36:a5:
90:f4:f8:15:d7:f5:74:7f:c7:b9:b6:14:c2:db:f6:
d8:33:72:91:17:ad:22:f4:0f:ad:9a:b8:48:28:cf:
13:46:03:31:f4:57:78:7f:6c:68:f5:50:e3:4c:f4:
2b:9c:fb:31:74:f3:cd:d7:b5:1a:04:ce:f1:d2:3f:
80:63:7b:29:38:1f:fe:5e:c5:3f:2e:fa:ae:d4:9a:
f0:a1:36:7f:98:14:3c:13:0b:55:ab:8b:2f:f4:13:
55:12:1c:83:7d:e6:9c:99:ce:30:ce:64:41:d6:5d:
86:70:9b:8b:35:0f:19:fa:aa:71:7e:61:81:95:be:
a6:24:66:d5:95:56:b8:d8:bc:2b:37:0d:68:67:2e:
51:d7:32:e5:83:1f:29:21:82:7a:19:1b:d1:1d:0d:
43:68:09:6b:49:9f:fe:e1:8d:2b:7b:e9:5e:1c:5f:
51:b4:f9:c0:49:b4:1d:38:5a:36:9f:08:df:58:84:
3b:64:89:b8:0a:5b:78:8f:77:53:2b:b7:54:b2:09:
86:02:be:39:6b:83:c6:97:52:ed:65:af:67:92:87:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:44:DE:A0:28:D2:7C:BC:25:92:63:03:79:09:94:BD:D4:18:20:F4
X509v3 Authority Key Identifier:
keyid:AD:CD:5A:4D:B5:99:C7:1A:ED:93:D0:96:AB:14:CA:FA:08:15:E6:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rc1aTbWZxxrtk9CWqxTK-ggV5hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1498/B3C8A97CDFB511EEB7AD8F2EC4F9AE02/rc1aTbWZxxrtk9CWqxTK-ggV5hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ee:73:6b:2a:d2:81:69:e0:34:6d:01:a5:10:27:06:00:c3:
e8:ca:ba:8a:eb:65:71:51:1c:99:be:12:18:05:65:2d:57:f1:
a2:40:fe:38:e5:05:74:68:05:98:7a:af:0b:2f:b4:ae:1f:1b:
3b:e6:4b:80:2d:8c:f1:4c:8f:64:55:64:2f:72:26:0b:58:f1:
6e:81:a8:93:c6:e8:d5:a1:88:e4:84:1b:32:04:b6:0b:af:b0:
80:16:a7:33:5c:99:24:fe:e3:21:9c:78:8d:b3:7c:2e:74:30:
08:a6:7b:00:fb:1e:9e:72:1b:55:92:b6:6b:e8:41:27:7a:19:
78:69:d0:0b:aa:62:eb:f6:0b:8a:58:49:51:8e:05:d0:ff:93:
cb:12:71:fa:63:3b:e7:4e:86:cb:e4:c6:34:8c:3d:fd:59:ff:
18:95:b1:0f:10:60:ad:d3:92:87:c9:cd:09:35:40:82:c5:dd:
9a:b9:4e:bf:83:9d:07:39:13:ce:a3:99:09:f1:05:ae:b1:53:
ae:ad:31:0b:f9:8d:fc:df:1b:62:bd:0c:35:03:a1:34:56:e0:
88:7b:42:4d:ae:f5:fa:65:12:27:32:45:92:ef:c6:6c:b9:1c:
52:32:e8:6b:d3:fa:97:ab:cc:cf:98:9e:12:da:df:13:55:f4:
37:e5:f3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:09:28 2025 by rpki-client