This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
File: l_PsEBRVjghHCgOpR4yE8j5FADo.mft (raw, json)
Hash identifier: sSwRZLS74wtWMDj+doh919zOq9CIwsirGVV94ZpysqE=
Subject key identifier: DD:A2:1C:39:80:E9:2A:A7:7D:A1:A3:37:88:7F:73:74:AC:66:7C:1A
Authority key identifier: 97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
Certificate issuer: /CN=A91E2E92/serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
Manifest number: 01E3
Signing time: Fri 05 Dec 2025 01:06:00 +0000
Manifest this update: Fri 05 Dec 2025 01:06:00 +0000
Manifest next update: Fri 12 Dec 2025 01:06:00 +0000
Files and hashes: 1: l_PsEBRVjghHCgOpR4yE8j5FADo.crl (hash: 4LtPhuNEQ0wP/fP98vT5rswDT9vxABSdYdATbpX8taA=)
2: B7D34CC444ED11EE8D931624C4F9AE02.roa (hash: ROkkzatt5V9Pz+AtU25/WOuwZ/bxAOBTVtr/gp1mTRQ=)
3: D78EA2DE44ED11EEA6685324C4F9AE02.roa (hash: gvjJNiO9vqYIhsYjJBaQQlt1G1Z/kYCgfliXikgsWHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2E92, serialNumber=97F3EC1014558E08470A03A9478C84F23E45003A
Validity
Not Before: Dec 5 01:06:00 2025 GMT
Not After : Dec 12 01:06:00 2025 GMT
Subject: CN=69322ff8-07bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:b7:a8:22:7c:9d:6f:27:96:ce:c0:b8:f0:
b5:d9:ce:7b:e5:d7:2c:47:3c:66:21:40:69:fa:26:
88:3a:fd:24:42:64:3a:f4:b3:fc:b8:86:ed:8c:64:
80:7a:10:c4:a8:e1:e5:ac:c2:08:a5:cf:d2:a8:05:
73:10:4b:ca:de:4d:5a:59:41:75:43:e6:3d:e7:47:
d9:1d:78:53:8b:55:26:b8:9b:cc:5c:d1:7b:df:2a:
60:c4:85:98:03:b6:4d:fb:94:76:c2:bf:fa:33:27:
38:d9:03:49:26:66:1d:3f:78:63:5d:bf:7e:8a:18:
0e:bf:7c:6a:bc:dc:27:11:58:b3:89:5f:95:bd:ae:
70:71:78:69:c1:a2:e4:f0:15:bb:8f:71:66:08:1c:
1d:e8:74:63:b7:9d:49:e4:70:bb:52:9b:c8:e8:58:
b9:79:b1:f3:64:7d:37:5f:55:49:df:12:67:ab:43:
b4:90:c5:1e:ae:60:73:07:35:06:9e:74:22:95:b2:
2c:b2:27:fd:2a:15:e0:80:55:85:60:11:c7:7a:32:
3e:87:e9:be:dc:15:57:3d:cc:32:88:4d:4b:a7:3b:
9e:7b:8d:f4:48:d6:0c:f6:2f:59:79:7f:a3:0a:57:
59:1f:12:17:18:8f:83:a1:39:7d:0f:9a:8f:85:06:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:1C:39:80:E9:2A:A7:7D:A1:A3:37:88:7F:73:74:AC:66:7C:1A
X509v3 Authority Key Identifier:
keyid:97:F3:EC:10:14:55:8E:08:47:0A:03:A9:47:8C:84:F2:3E:45:00:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l_PsEBRVjghHCgOpR4yE8j5FADo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2E92/1885A6D206CF11EE9C97127BC4F9AE02/l_PsEBRVjghHCgOpR4yE8j5FADo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:50:fb:64:80:42:bf:d3:28:64:a1:c9:fb:3e:18:91:8d:31:
81:60:d6:04:b5:20:53:8e:12:f6:4c:78:a7:d4:cf:45:e8:16:
18:a0:07:57:47:28:0d:23:99:1c:46:ec:41:b1:ae:99:f4:4d:
0c:ce:c2:92:22:56:ca:13:0d:53:cd:26:64:97:ae:3d:bd:bc:
54:2c:44:92:1c:96:ab:c7:20:2a:1e:83:5a:85:d6:72:5c:a9:
2b:e5:90:cb:5c:71:60:7e:99:e6:cf:fd:7e:c1:14:10:99:03:
5b:62:ad:f0:5e:9a:2f:3e:4b:26:13:09:9e:b2:4f:61:b1:a1:
3d:ea:00:b3:9f:e6:5d:a1:72:d8:df:90:67:1b:d2:6a:d8:d5:
15:49:d0:d7:59:0a:07:fd:67:f4:aa:99:c5:69:f8:0e:99:eb:
49:4e:a8:77:45:30:56:e6:78:06:a4:8d:dd:ff:32:2d:42:f3:
df:1a:e9:fb:44:bb:34:e7:6c:16:23:9c:73:17:94:30:b7:96:
64:4d:94:2d:ed:59:f3:d9:a2:6b:41:3f:74:df:a8:07:bd:25:
00:98:94:c2:28:e1:5f:4f:32:6c:b1:db:5a:9b:2e:97:a3:d8:
5b:e9:c4:ba:64:46:97:ef:d4:25:bb:16:70:5a:52:30:36:d2:
e4:b7:1b:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTJFOTIxMTAvBgNVBAUTKDk3RjNFQzEwMTQ1NThFMDg0NzBBMDNBOTQ3OEM4NEYy
M0U0NTAwM0EwHhcNMjUxMjA1MDEwNjAwWhcNMjUxMjEyMDEwNjAwWjAYMRYwFAYD
VQQDEw02OTMyMmZmOC0wN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0tS3qCJ8nW8nls7AuPC12c575dcsRzxmIUBp+iaIOv0kQmQ69LP8uIbtjGSA
ehDEqOHlrMIIpc/SqAVzEEvK3k1aWUF1Q+Y950fZHXhTi1UmuJvMXNF73ypgxIWY
A7ZN+5R2wr/6Myc42QNJJmYdP3hjXb9+ihgOv3xqvNwnEViziV+Vva5wcXhpwaLk
8BW7j3FmCBwd6HRjt51J5HC7UpvI6Fi5ebHzZH03X1VJ3xJnq0O0kMUermBzBzUG
nnQilbIssif9KhXggFWFYBHHejI+h+m+3BVXPcwyiE1Lpzuee430SNYM9i9ZeX+j
CldZHxIXGI+DoTl9D5qPhQbEzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2iHDmA
6SqnfaGjN4h/c3SsZnwaMB8GA1UdIwQYMBaAFJfz7BAUVY4IRwoDqUeMhPI+RQA6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkU5Mi8xODg1QTZEMjA2
Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpnaEhDZ09wUjR5RThqNUZB
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xfUHNFQlJWamdoSENnT3BSNHlFOGo1RkFEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MkU5Mi8xODg1QTZEMjA2Q0YxMUVFOUM5NzEyN0JDNEY5QUUwMi9sX1BzRUJSVmpn
aEhDZ09wUjR5RThqNUZBRG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHUPtkgEK/0yhkocn7PhiRjTGBYNYEtSBTjhL2THin1M9F6BYYoAdX
RygNI5kcRuxBsa6Z9E0MzsKSIlbKEw1TzSZkl649vbxULESSHJarxyAqHoNahdZy
XKkr5ZDLXHFgfpnmz/1+wRQQmQNbYq3wXpovPksmEwmesk9hsaE96gCzn+ZdoXLY
35BnG9Jq2NUVSdDXWQoH/Wf0qpnFafgOmetJTqh3RTBW5ngGpI3d/zItQvPfGun7
RLs052wWI5xzF5Qwt5ZkTZQt7Vnz2aJrQT9036gHvSUAmJTCKOFfTzJssdtamy6X
o9hb6cS6ZEaX79QluxZwWlIwNtLktxuM
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:55 2025 by rpki-client