This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json)
Hash identifier: KRPg/fN86QMqCvKx/NN2yNKfhD9GB/FOrIYfUn99rRQ=
Subject key identifier: D6:88:30:9F:C1:04:07:1A:48:C7:46:A8:66:D0:A6:75:15:6F:7A:0F
Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA
Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA
Certificate serial: 0680
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
Manifest number: 067B
Signing time: Thu 04 Dec 2025 21:17:31 +0000
Manifest this update: Thu 04 Dec 2025 21:17:31 +0000
Manifest next update: Thu 11 Dec 2025 21:17:31 +0000
Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: SwW5wDeAnXjJnFZKBruMG6O48A+TXiWQTpmT22WcPFc=)
2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: awVjv21LrUykJjD6b6nan1fibgTR8vl36mPtfLgV0k8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl
rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1664 (0x680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA
Validity
Not Before: Dec 4 21:17:31 2025 GMT
Not After : Dec 11 21:17:31 2025 GMT
Subject: CN=6931fa6b-be76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:6b:47:9d:a0:f5:06:77:59:99:40:b1:5f:
ea:e1:14:7f:49:5d:cb:bb:3c:11:1a:82:c3:43:af:
a7:e1:ae:99:40:dc:41:7b:20:67:8a:15:80:b0:87:
1f:56:ea:e6:0d:c2:ea:ba:5f:f8:64:de:c1:4b:bb:
1c:c5:52:55:9e:8f:77:db:f1:40:94:27:72:44:cd:
a4:68:6b:86:76:5c:74:1d:65:fd:46:68:fa:2b:10:
a8:aa:54:bd:bb:c6:c1:16:6d:44:aa:f9:46:58:77:
51:a4:94:46:37:ee:74:c8:f3:86:37:67:8e:e5:7f:
39:1f:f7:3b:db:76:f3:e9:45:6f:81:a3:5e:5c:36:
10:e4:61:55:b9:f8:de:69:bf:54:08:3c:c8:3f:4d:
49:ca:57:9a:88:23:fd:7b:3e:bb:29:d1:22:74:77:
b3:9b:06:b8:71:18:83:a5:e9:9d:17:f5:be:54:7d:
c8:9e:e1:b9:5f:8a:5a:62:8c:da:a7:89:e7:de:c9:
f8:f7:a3:9c:ff:8f:5d:f4:fb:8f:1a:83:69:ac:3d:
a5:d4:9c:f8:85:c7:76:01:34:9a:ad:b4:1d:ae:ab:
03:99:c6:6f:58:e5:83:ac:41:21:d9:d5:c5:24:25:
06:6d:a5:50:80:32:b4:9e:cd:f5:52:84:58:26:f5:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:30:9F:C1:04:07:1A:48:C7:46:A8:66:D0:A6:75:15:6F:7A:0F
X509v3 Authority Key Identifier:
keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:c3:9d:4b:aa:73:98:b9:d0:63:d0:e4:e0:cb:a7:2f:7b:
6b:88:ac:87:23:f2:d1:2e:1f:bc:ef:9c:f7:69:c1:de:28:70:
18:4a:c7:6a:35:0e:31:3e:bd:09:8e:60:2e:1a:7d:1f:2c:47:
35:8e:10:74:88:93:61:a2:9b:d8:be:68:56:5d:cf:4e:05:eb:
a1:37:d6:fa:4d:4c:7f:af:fb:51:71:07:d7:14:86:64:4a:df:
b5:1b:c9:a0:b8:7e:44:f9:24:d7:10:da:6e:26:c2:7d:1c:94:
5a:19:8a:32:73:15:61:5f:5f:ea:d8:ba:f7:06:fc:84:d7:1b:
b6:75:07:b4:1e:4e:40:e4:b0:b7:dc:38:cc:13:46:f6:83:15:
95:9a:80:61:3b:9b:05:41:1a:db:c0:62:e7:48:77:a3:75:88:
48:6b:e3:de:8e:42:77:fe:04:48:14:e7:b2:a0:9f:25:b0:92:
be:90:e0:a6:aa:c1:19:f5:fd:7a:5f:9a:42:8c:14:83:40:f8:
ce:35:de:61:d0:fa:d5:2c:5f:ea:c8:f9:df:ae:99:b8:a3:5d:
84:d7:e1:8c:aa:7c:c8:76:95:44:1c:ab:8a:07:d6:b1:f9:5e:
9b:6e:69:46:b7:dd:1e:3f:98:b1:25:87:b3:e9:49:b4:77:07:
df:ae:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:49 2025 by rpki-client