This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json)
Hash identifier: QzoKGJ/oG2VFNd4zG10Jh7K42Kiqxjlv1RmUdWDRXXY=
Subject key identifier: 9D:04:0B:4B:70:0E:AE:C6:37:CA:97:9E:D9:40:20:99:6D:9C:6B:58
Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Certificate serial: 022F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
Manifest number: 0225
Signing time: Fri 05 Dec 2025 00:28:39 +0000
Manifest this update: Fri 05 Dec 2025 00:28:38 +0000
Manifest next update: Fri 12 Dec 2025 00:28:38 +0000
Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: 7cUSuRbP8TNU3StwsKiIPBxyZOcGhNUK7rkVVuZsTzg=)
2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA=)
3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: cOb2KOzEfKEZcsNXW8uSYWT5P5sqT/oMWjbiB66z740=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5
Validity
Not Before: Dec 5 00:28:38 2025 GMT
Not After : Dec 12 00:28:38 2025 GMT
Subject: CN=69322736-6b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:41:a8:d1:da:66:99:9d:8f:0b:54:8f:90:
e6:87:b4:0b:bf:ae:83:62:f9:2e:da:3f:bc:e8:cb:
02:2f:8b:69:3a:85:f0:5c:72:17:41:5d:6a:b1:d8:
54:0c:72:fc:88:4b:48:c0:91:59:c0:d2:02:71:59:
d7:4a:34:12:f3:fe:01:1e:af:b6:2d:25:bf:13:e3:
0c:7a:4b:d4:93:95:71:cb:a7:ad:9f:e9:e7:71:45:
8d:6d:a2:43:82:56:de:79:7f:4b:40:c3:6f:35:37:
78:f6:c9:a0:0d:1b:a2:bd:db:af:2a:dd:94:95:d0:
e2:8f:a3:cc:54:60:50:7d:f6:5c:16:1d:f3:99:1d:
82:7d:0c:e1:18:f4:2c:c2:84:4c:2f:5a:b3:20:97:
05:3f:ac:0c:23:70:2b:3e:ee:60:ab:03:43:e1:01:
be:8e:6c:c9:66:bf:8f:bd:dd:fa:01:b3:b2:ea:6d:
cd:f4:a9:ca:81:c2:5e:d5:2b:3d:45:db:65:b3:08:
db:4b:0c:a7:f9:bc:73:d5:34:b4:84:e4:91:c9:52:
77:1b:d7:26:2f:1f:74:1b:79:19:fb:ea:07:f7:18:
60:87:3e:a0:24:b0:99:a3:c1:e1:4c:4f:7d:2f:64:
ca:d8:4d:ff:3b:af:68:fd:83:fb:6c:cd:cb:bc:cf:
70:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:04:0B:4B:70:0E:AE:C6:37:CA:97:9E:D9:40:20:99:6D:9C:6B:58
X509v3 Authority Key Identifier:
keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:1c:52:5a:2d:bc:28:b4:64:20:51:a4:fa:d8:6f:6c:cd:
1e:8e:05:7f:79:00:96:73:6e:4f:99:62:86:fa:6d:f4:3c:3a:
0d:59:d9:b9:22:d8:7f:f6:de:51:25:85:67:2b:e1:cd:ab:73:
c0:e9:aa:c5:4d:a5:24:54:55:ff:28:02:eb:2c:73:61:1c:54:
82:ac:db:f8:31:09:8e:c9:33:0f:15:5d:78:f0:80:d7:8d:11:
12:6a:90:03:82:58:16:4e:ab:d3:91:14:cb:99:ff:79:aa:5e:
5a:60:66:d0:8a:d7:ab:2f:e8:40:d7:78:33:d3:4a:62:74:94:
b5:f0:02:56:9d:9a:83:a5:66:23:cf:ff:33:a2:fd:ef:21:c5:
13:47:6a:11:67:5e:20:6d:1a:99:e5:46:98:10:95:cc:1b:05:
b6:1f:0b:2e:c5:c9:9d:90:e7:4d:0c:22:df:2d:eb:b7:f9:49:
ee:a2:25:85:d8:a8:a1:31:63:0a:8b:78:ec:96:02:39:55:95:
49:52:55:c2:b8:14:74:a7:d9:43:69:a5:40:0b:8b:7e:d9:22:
23:db:d2:18:08:0e:16:b7:d1:f7:f5:b2:de:a7:11:05:25:55:
45:43:60:e7:59:53:39:3a:89:8b:14:5b:25:35:f9:2a:53:09:
4b:53:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:54:06 2025 by rpki-client