This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json)
Hash identifier: /mhWE2MI3bbfI8cX11siUnEpMcSvYF+G061IGmVBLKQ=
Subject key identifier: 09:AF:D6:EF:9E:E0:DF:B9:0A:8F:42:F5:B7:70:37:2E:70:8E:AE:D3
Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Certificate serial: 0313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
Manifest number: 030B
Signing time: Sat 06 Dec 2025 23:43:25 +0000
Manifest this update: Sat 06 Dec 2025 23:43:25 +0000
Manifest next update: Sat 13 Dec 2025 23:43:25 +0000
Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: H+YlD371v5LbVbdfTW3QWXDh685cOJvOHFDar3ig5xU=)
2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=)
3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC
Validity
Not Before: Dec 6 23:43:25 2025 GMT
Not After : Dec 13 23:43:25 2025 GMT
Subject: CN=6934bf9d-b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:6f:2c:17:b8:25:00:25:02:d2:7a:49:fc:
c6:28:08:8c:bc:2d:fa:30:29:ec:43:0a:f7:93:89:
a0:81:56:77:b9:10:3e:e4:47:9c:b6:5d:23:83:6b:
46:a1:fc:bb:a2:b7:1c:f8:3c:29:88:29:e1:07:15:
2d:d4:18:97:56:22:ed:5d:d9:38:f8:72:04:a5:a7:
24:21:66:5f:6f:0e:20:e1:f3:1d:3e:20:b6:09:2f:
67:a2:e3:48:02:2a:e2:57:10:a8:1b:eb:9d:ab:ad:
da:23:75:e6:13:3a:7c:4a:1f:09:b7:d9:1d:35:1c:
2d:0d:bf:8a:d3:0a:cc:cd:05:bb:03:ff:f1:be:3f:
cf:75:5b:82:d1:14:d9:08:32:b4:13:52:2e:9f:68:
af:e7:dc:75:86:c8:6f:07:8f:52:56:d5:1f:80:0a:
76:42:9d:01:60:34:e7:00:3c:bc:70:b4:96:9b:25:
9a:a5:1e:6b:61:9e:5d:9f:86:c5:02:27:13:b5:c8:
29:f4:7f:83:fa:74:28:24:62:2e:97:de:ac:78:0b:
0e:e4:a2:7b:de:63:f1:73:c9:09:63:21:4e:56:99:
bc:b6:c4:a3:5c:f1:fa:50:ef:49:41:8a:39:69:7c:
53:2a:96:d7:93:54:ec:a9:ae:59:da:59:da:da:ca:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:D6:EF:9E:E0:DF:B9:0A:8F:42:F5:B7:70:37:2E:70:8E:AE:D3
X509v3 Authority Key Identifier:
keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2b:68:69:27:e1:f4:7d:cd:71:45:57:2e:2a:81:2d:1a:e5:
56:a3:24:41:95:ce:58:03:bd:cb:99:f2:cf:29:59:3c:e4:94:
ae:61:3f:98:b2:c9:76:59:f7:30:86:35:8b:59:2a:0c:98:29:
7e:dd:87:62:ad:36:43:cd:56:f6:7d:59:ca:12:b4:fa:6f:bf:
8a:4b:59:d6:a3:45:79:a2:33:46:ae:05:5b:9d:90:d8:1f:c2:
ff:84:66:26:7e:5e:7e:6f:35:42:08:97:07:32:99:09:f8:08:
27:1b:f4:5c:f9:77:28:54:88:2f:4a:74:44:6b:fe:9a:4f:08:
d4:a3:b5:c8:cf:24:99:fc:76:27:ec:61:a9:2d:64:2d:08:90:
00:e0:02:88:94:46:92:c3:b4:d2:6a:05:40:4a:d0:21:87:80:
19:5b:1b:68:8d:d8:3e:b2:f9:40:c6:65:20:1b:78:ab:de:4c:
68:39:7c:82:68:9d:8e:c3:4f:6b:40:02:c3:36:21:b9:4d:07:
0f:f0:4b:1a:8a:df:8e:25:61:42:f1:4e:77:ea:07:c4:2c:0c:
cf:e5:0f:85:7f:cf:4a:d8:7f:41:65:55:91:83:f1:f9:ed:01:
5b:e0:d5:e9:dc:a0:69:72:46:58:e4:4b:2c:15:8b:df:a2:6a:
cb:de:0c:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw
NjAyRkY2QkMwHhcNMjUxMjA2MjM0MzI1WhcNMjUxMjEzMjM0MzI1WjAYMRYwFAYD
VQQDEw02OTM0YmY5ZC1iMmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxL5vLBe4JQAlAtJ6SfzGKAiMvC36MCnsQwr3k4mggVZ3uRA+5Eectl0jg2tG
ofy7orcc+DwpiCnhBxUt1BiXViLtXdk4+HIEpackIWZfbw4g4fMdPiC2CS9nouNI
AiriVxCoG+udq63aI3XmEzp8Sh8Jt9kdNRwtDb+K0wrMzQW7A//xvj/PdVuC0RTZ
CDK0E1Iun2iv59x1hshvB49SVtUfgAp2Qp0BYDTnADy8cLSWmyWapR5rYZ5dn4bF
AicTtcgp9H+D+nQoJGIul96seAsO5KJ73mPxc8kJYyFOVpm8tsSjXPH6UO9JQYo5
aXxTKpbXk1Tsqa5Z2lna2srfTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmv1u+e
4N+5Co9C9bdwNy5wjq7TMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5
RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q
Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdK2hpJ+H0fc1xRVcuKoEtGuVWoyRBlc5YA73LmfLPKVk85JSuYT+Y
ssl2WfcwhjWLWSoMmCl+3YdirTZDzVb2fVnKErT6b7+KS1nWo0V5ojNGrgVbnZDY
H8L/hGYmfl5+bzVCCJcHMpkJ+AgnG/Rc+XcoVIgvSnREa/6aTwjUo7XIzySZ/HYn
7GGpLWQtCJAA4AKIlEaSw7TSagVAStAhh4AZWxtojdg+svlAxmUgG3ir3kxoOXyC
aJ2Ow09rQALDNiG5TQcP8Esait+OJWFC8U536gfELAzP5Q+Ff89K2H9BZVWRg/H5
7QFb4NXp3KBpckZY5EssFYvfomrL3gxA
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:55 2025 by rpki-client