This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
File: K1F8a3njzrA4nUGrxeziEH_sU_s.mft (raw, json)
Hash identifier: yCKWLDTtwi14VW+FbMgeLcq82pfQWHPoDCPn4MqWsq8=
Subject key identifier: 39:9C:5E:95:E7:85:36:8A:D4:0E:7B:58:0D:34:CF:8A:46:C3:AD:C1
Authority key identifier: 2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
Certificate issuer: /CN=A91E2A61/serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
Manifest number: 040B
Signing time: Thu 04 Dec 2025 22:53:49 +0000
Manifest this update: Thu 04 Dec 2025 22:53:48 +0000
Manifest next update: Thu 11 Dec 2025 22:53:48 +0000
Files and hashes: 1: K1F8a3njzrA4nUGrxeziEH_sU_s.crl (hash: ZXTQIB0cWMAzNyNaemeWq6VZpvrSy1YDz/BAjGJScp0=)
2: B0F9178297B811ECA8AA4230C4F9AE02.roa (hash: FoCE53zxIc9RGDT20cSl66HA963RFqLllbD6isI2Eks=)
3: 0E1EAB66961011ECA540626AC4F9AE02.roa (hash: 8EZQM/G5p946FK5IAxG3P6xewk8qoFsvyNghIhRO4OU=)
4: 457D2B5A28DC11ED839D6243C4F9AE02.roa (hash: LDUnyOdS9OamILyV+DlZlg+xzQGvjMOiRA/W3kxK9fM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2A61, serialNumber=2B517C6B79E3CEB0389D41ABC5ECE2107FEC53FB
Validity
Not Before: Dec 4 22:53:48 2025 GMT
Not After : Dec 11 22:53:48 2025 GMT
Subject: CN=693210fc-bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:3b:26:44:7e:26:55:0d:76:f8:ea:6c:83:
dd:2d:67:4b:eb:d4:67:e8:46:ff:12:bb:b0:de:91:
88:8c:5e:14:bb:71:d9:cd:d1:81:65:87:83:70:c0:
8c:28:b6:68:26:89:8a:e0:8a:35:3f:9e:f3:28:f4:
b2:9d:f3:fc:cc:2d:a4:e5:ab:62:e6:b7:7c:7d:25:
36:93:e6:9a:78:fb:60:0b:6b:6c:89:0d:d4:24:32:
23:6e:87:88:70:3c:fc:2f:87:cb:e7:c2:89:38:46:
52:ed:b5:18:ce:a4:3d:ba:ca:58:fd:36:fb:76:1e:
2e:77:82:58:45:d3:90:ac:37:55:72:a5:94:1d:76:
ae:aa:4c:bd:58:85:8f:5f:07:2e:1c:6a:8b:c6:bc:
2b:98:e1:9b:bb:ca:2e:30:44:65:66:76:8a:34:1f:
b2:5c:70:4a:ff:dc:66:76:ad:44:df:7a:67:3c:82:
6a:78:49:d5:f7:97:27:70:25:ba:45:3a:46:02:b6:
45:de:1f:e9:fb:4c:b6:2d:ee:36:cf:4c:e9:70:b1:
4f:ec:91:f3:d1:04:ad:b2:29:70:ff:eb:62:8d:d4:
45:1b:63:04:24:c0:42:de:de:b0:6b:4f:67:7e:bd:
e8:e6:76:44:37:32:5b:f0:80:43:b0:9f:5b:1d:49:
3d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:9C:5E:95:E7:85:36:8A:D4:0E:7B:58:0D:34:CF:8A:46:C3:AD:C1
X509v3 Authority Key Identifier:
keyid:2B:51:7C:6B:79:E3:CE:B0:38:9D:41:AB:C5:EC:E2:10:7F:EC:53:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1F8a3njzrA4nUGrxeziEH_sU_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2A61/EDC08FE6960B11ECBBE4BE64C4F9AE02/K1F8a3njzrA4nUGrxeziEH_sU_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:94:bc:d9:41:44:ab:f5:11:90:45:4b:12:04:dc:26:ef:26:
4e:82:c2:79:82:d1:d6:77:04:05:84:5f:23:2d:71:29:7b:11:
66:4b:6f:8e:99:2c:81:db:82:b4:bc:e2:c8:81:df:44:37:05:
d8:8e:87:61:5b:8c:cb:76:70:e9:6d:65:bf:3f:03:41:c4:4c:
e2:3e:28:e8:28:f1:07:3f:9c:c8:60:7e:b5:9e:72:7c:c0:0e:
bc:17:c1:54:19:ac:12:83:f5:c5:89:ac:9e:19:72:d7:ac:87:
1e:05:3e:dc:bb:d0:3c:c2:88:4a:e2:84:f1:57:4b:db:25:d5:
d8:5e:a8:ff:b7:a5:5d:cb:9a:2a:a4:b7:aa:fb:c8:3a:69:5b:
41:86:4c:64:f4:e0:4d:74:21:5f:46:1e:79:7d:e5:9e:3b:b9:
02:72:8b:8f:fe:85:3a:64:44:e1:a0:7a:f2:60:2c:9f:03:d2:
21:f5:f0:f6:e0:da:ca:26:f9:b9:07:51:07:fc:d1:76:5e:d6:
54:54:0a:7b:1f:86:25:87:fd:e2:d0:b3:10:00:0f:42:df:55:
31:5e:6e:53:53:2e:4a:76:ef:8a:44:f1:9f:f6:b4:b8:82:2a:
bd:68:94:70:87:7b:f8:09:a3:b5:3e:9d:4e:70:b7:6b:71:1e:
06:c9:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:15 2025 by rpki-client