This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json)
Hash identifier: EuhiqL4IJHVmroEroBl7E+CjHcC2y7vz8euOGqNfKrE=
Subject key identifier: 2D:89:D8:28:C3:34:90:39:D1:85:79:1C:14:3A:D9:C2:46:5E:BF:78
Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Certificate serial: 1426
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
Manifest number: 140B
Signing time: Sat 06 Dec 2025 16:28:34 +0000
Manifest this update: Sat 06 Dec 2025 16:28:34 +0000
Manifest next update: Sat 13 Dec 2025 16:28:34 +0000
Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: anywwLA+apij4M2yRNY0sepc0QEoxIPfrFc4svrDkI4=)
2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: bw4oyTaqoqfdp29e2lYAU370gy2twH+W8CpSCQrTXLg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5158 (0x1426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9
Validity
Not Before: Dec 6 16:28:34 2025 GMT
Not After : Dec 13 16:28:34 2025 GMT
Subject: CN=693459b2-3630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:b5:1a:e8:30:2a:2e:79:38:a7:66:81:7d:
86:d6:84:89:e3:de:44:f6:71:cc:a2:d2:54:66:5d:
55:1d:50:76:5a:99:13:53:f6:68:04:54:0e:b9:2f:
99:43:ac:99:b4:39:61:83:00:49:ed:e8:3d:6c:98:
1a:5f:b1:10:76:5f:0d:9e:d7:6d:d8:4a:22:1e:fc:
f7:c8:fe:d1:48:6a:ff:c1:7f:eb:bb:e3:db:fb:bb:
64:b6:47:98:8a:2a:9b:44:f1:41:14:3f:ae:71:47:
8f:bf:c6:0d:d4:79:55:a2:ec:4f:34:33:7e:04:b7:
6a:b1:23:38:3c:df:bf:f0:58:92:c4:73:e8:d0:f0:
4d:19:17:e4:85:60:4c:eb:1c:6f:e0:67:a4:9d:e9:
80:cb:a1:d9:17:26:7c:e0:42:c0:a2:80:89:8f:ec:
d8:09:b3:cf:4e:0d:58:ab:ea:61:5d:2a:06:b0:ad:
12:55:b0:24:d4:7f:be:3e:7e:41:e6:c8:7e:34:68:
fe:54:fe:1e:35:33:1b:21:0f:63:de:b8:f1:80:a5:
dd:3f:9f:bf:30:1e:15:06:9b:b8:83:1a:37:40:4a:
45:e9:c3:7d:e3:fb:39:d2:bc:38:32:c8:a3:76:c4:
db:81:bc:82:8e:5c:05:7e:70:b8:06:af:8a:aa:cf:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:89:D8:28:C3:34:90:39:D1:85:79:1C:14:3A:D9:C2:46:5E:BF:78
X509v3 Authority Key Identifier:
keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a7:92:a3:f2:53:9a:ae:4b:3c:22:cb:d9:c7:1b:b8:31:a3:
e7:9c:d1:4a:c6:eb:ea:c7:4a:e1:36:d7:2a:9c:9e:b9:b1:25:
b3:48:35:65:af:bf:79:8e:c4:82:77:cd:52:cc:bd:a2:3f:25:
08:f7:6a:56:6c:30:6f:d0:8f:87:2e:75:d1:02:5a:ca:ee:84:
53:4a:28:72:6e:2e:9b:5b:20:66:e1:47:09:c7:de:32:55:67:
fa:f7:9c:38:ef:81:f3:ab:10:27:e8:21:a1:c6:74:2d:21:14:
a5:dc:05:8d:67:bb:e4:cd:55:23:87:bd:1b:c5:31:4a:7f:3e:
a4:f2:c7:4c:55:e8:8f:86:73:16:2e:98:f9:8e:3b:f7:4f:80:
84:2a:db:78:12:5b:b9:45:9e:48:97:84:99:51:0e:b5:55:c3:
98:7b:c0:df:ba:04:59:12:f1:21:d6:80:db:9d:a4:c9:83:a8:
0a:f4:d8:d6:8d:25:c4:61:36:59:16:ad:b3:78:bf:26:30:f7:
6a:d2:66:6c:77:48:65:26:8d:b3:cf:89:a5:10:d0:4e:e8:d3:
1f:c7:92:f4:25:db:82:da:b3:1f:6e:d0:39:b4:0a:93:d4:f0:
30:f9:08:81:06:40:58:06:a3:8e:d6:d7:23:38:9f:63:7c:da:
3e:7e:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:21:04 2025 by rpki-client