This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier: zcbSQqraV92Q1LQ11MJkVxe23MXHgYWaWCOICggVj1I=
Subject key identifier: 9C:8C:12:B7:DF:AD:2F:56:3A:82:C2:0D:A8:29:AE:83:B5:F3:DD:DB
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial: 1300
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number: 4813
Signing time: Sat 06 Dec 2025 14:20:01 +0000
Manifest this update: Sat 06 Dec 2025 14:20:00 +0000
Manifest next update: Sat 13 Dec 2025 14:20:00 +0000
Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: F/k+bXz2WmEe34esqLMQBRqBlO0CDk5pJtYOVi+DyIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:20:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4864 (0x1300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Validity
Not Before: Dec 6 14:20:00 2025 GMT
Not After : Dec 13 14:20:00 2025 GMT
Subject: CN=69343b90-3be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:61:cc:0b:db:ee:df:0c:00:7e:04:c3:90:
15:4e:ac:9e:b5:46:42:6a:28:82:92:c1:01:04:26:
98:08:d6:ba:6a:7d:e8:ce:d6:8f:bb:2d:01:9c:8e:
6c:d3:bb:98:7e:48:e4:6e:e8:5f:d5:10:9e:be:60:
2b:bd:7f:54:a1:a4:e1:93:9a:3e:05:ac:76:ef:17:
91:61:0c:9a:a8:26:35:79:fc:76:c6:74:03:78:f7:
a1:38:ad:3a:d5:11:cf:28:e2:54:19:e2:ad:b4:a3:
a3:9c:6d:ea:93:ef:4e:84:91:1f:4a:a2:20:c0:4b:
26:58:64:5b:41:5a:6a:40:a1:b8:96:db:2c:3b:9b:
43:67:ad:f1:a7:ec:95:77:86:b3:90:bd:2f:76:71:
0c:d8:0c:e9:4f:27:60:fb:e7:a0:70:6b:a1:1a:61:
c9:4d:5b:f5:e2:ee:d7:a7:32:28:b3:ce:c6:4e:30:
03:ac:11:97:2a:e5:dc:53:91:61:ca:5a:18:70:20:
f5:c9:15:4b:72:b1:a6:57:04:61:9c:13:69:8e:dd:
42:dc:fc:27:b5:5c:f3:cb:76:da:f4:ba:a6:bc:5a:
f6:16:ef:d9:0e:d8:45:92:4d:9b:ac:c8:0e:5e:54:
7c:30:9e:d0:99:35:df:7f:94:75:1a:f3:87:1d:55:
5c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:12:B7:DF:AD:2F:56:3A:82:C2:0D:A8:29:AE:83:B5:F3:DD:DB
X509v3 Authority Key Identifier:
keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b8:87:f7:39:c5:6d:60:64:d2:02:91:46:f6:25:48:f2:19:
65:e7:7e:21:6c:7e:4c:ee:17:bd:87:e3:31:12:8f:ae:f8:fd:
a0:be:ca:25:c6:2d:dc:fc:21:3c:30:9c:bc:5f:57:1b:af:51:
47:12:a4:22:eb:44:22:4a:c9:a3:35:11:a6:8e:38:7b:10:69:
b6:46:99:50:c6:f1:20:44:35:92:37:90:db:53:dd:26:bc:bb:
f0:ec:d6:62:90:d6:72:10:ed:16:60:02:70:fc:65:3c:0c:89:
8f:b4:bf:3f:61:12:59:c5:74:25:2c:71:34:ad:11:4e:6f:7e:
53:47:6f:31:ba:dd:2c:a1:0b:b2:e6:06:1c:ed:82:58:24:6d:
a8:55:8c:15:77:b8:b6:9e:86:8c:79:ef:93:d7:4f:3d:ba:7e:
2f:50:29:0a:97:ca:64:ba:13:1b:f6:11:36:3c:3f:6c:79:6d:
11:f9:b7:1e:16:cd:5e:8b:45:d7:e1:30:07:3d:78:30:76:a0:
d8:ba:df:24:8e:61:a1:a7:78:11:71:2c:b6:11:95:5f:8d:ba:
8e:a6:11:29:e4:98:f2:58:e8:5e:79:e3:59:18:af:b1:80:90:
55:bc:e5:96:0c:ba:16:f6:14:99:64:8a:e9:1d:57:f2:5e:8d:
95:ee:fc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:21 2025 by rpki-client