This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
File: MnuOg9VLpp18NcajREfRsbAR2WY.mft (raw, json)
Hash identifier: t7iqm7gi8lAKXsHzjyZyQ/ShabfkdUY2CV022+RviX8=
Subject key identifier: 39:8D:CF:44:52:F9:F0:FF:87:9E:F5:88:1F:DD:F4:58:1A:BC:31:65
Authority key identifier: 32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
Certificate issuer: /CN=A91E6B9A/serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Certificate serial: F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
Manifest number: F2
Signing time: Fri 05 Dec 2025 03:20:30 +0000
Manifest this update: Fri 05 Dec 2025 03:20:29 +0000
Manifest next update: Fri 12 Dec 2025 03:20:29 +0000
Files and hashes: 1: MnuOg9VLpp18NcajREfRsbAR2WY.crl (hash: 8re9o6qd0F7usSIXcnWbOsfUkHj5ee1O3ohtryz/pu0=)
2: 91EDFFF27CBF11F0BCA8A74FC4F9AE02.roa (hash: JUhKEj8SXKCy6S8oeqW1ENv6R+HMPTPZWeDqctZ/CKU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=327B8E83D54BA69D7C35C6A34447D1B1B011D966
Validity
Not Before: Dec 5 03:20:29 2025 GMT
Not After : Dec 12 03:20:29 2025 GMT
Subject: CN=69324f7d-676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:f0:88:a7:41:bc:e3:0e:2e:1f:76:c6:9c:
82:8b:aa:76:cf:ca:3d:ad:14:17:4d:06:43:4d:dc:
b2:1f:63:51:52:19:22:ef:f3:7f:b9:f7:c5:98:27:
c0:83:62:2f:07:c8:19:d6:ee:82:14:5e:a3:02:9b:
1b:20:66:7e:56:7f:a2:dc:e8:47:b5:e7:8c:ce:2e:
a3:c8:29:cc:5f:26:3f:79:d7:e7:ed:e2:31:c6:16:
64:6f:c1:e1:6b:0e:ba:ff:ac:09:e6:23:dd:c0:41:
eb:8d:9f:2e:6f:b8:b5:e7:c1:20:88:b3:59:62:ec:
f5:2a:aa:14:04:65:2a:b8:36:21:48:6a:03:57:b0:
74:44:f6:30:e4:78:c6:cf:a9:3c:ea:b7:c6:87:a9:
84:67:18:7f:5a:a5:f8:2f:c4:1d:77:06:0e:c4:13:
41:45:1d:74:b5:fc:93:16:fe:99:47:78:cd:e6:0e:
d5:84:1b:c4:a5:62:00:4d:c1:24:2b:e7:ed:a3:60:
57:a4:ec:a8:02:52:f8:ec:f2:e5:48:64:48:69:54:
14:1f:b2:a1:ff:6d:ba:ac:40:0d:e5:04:f0:e7:79:
26:ed:e6:79:2f:c0:12:5d:c5:c5:59:2f:15:8b:0d:
73:de:45:52:7e:46:15:f6:10:80:c9:c0:80:f3:44:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:CF:44:52:F9:F0:FF:87:9E:F5:88:1F:DD:F4:58:1A:BC:31:65
X509v3 Authority Key Identifier:
keyid:32:7B:8E:83:D5:4B:A6:9D:7C:35:C6:A3:44:47:D1:B1:B0:11:D9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnuOg9VLpp18NcajREfRsbAR2WY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1A106CD0615011EFAE7A8C73C4F9AE02/MnuOg9VLpp18NcajREfRsbAR2WY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:98:1e:aa:02:02:21:07:51:9d:58:b8:39:24:28:6c:3f:47:
4b:86:0a:bf:f0:04:6b:a3:86:94:4e:d3:7d:bb:98:2b:9c:a3:
95:2e:86:7c:a5:d0:49:e5:4b:c7:d2:c0:3e:d9:c2:a0:73:cb:
ef:8a:6a:76:f6:bf:f2:03:d0:81:27:ad:ce:57:4e:34:5b:95:
c8:f0:c4:6d:e9:c4:83:6d:75:1c:ef:6c:8c:5f:b8:ab:14:b9:
68:60:c8:5c:a2:11:9b:25:38:b7:3c:16:e4:6d:28:ec:05:68:
76:6f:02:90:68:5c:63:a5:33:cd:da:26:c3:0e:dc:58:12:76:
d9:94:cb:e5:0e:8a:85:13:2c:2e:68:5b:9f:42:9a:22:50:b9:
00:0b:0a:1e:14:4b:9f:2e:6e:1a:aa:fe:d0:f1:f8:e6:6a:60:
0a:ef:ad:79:7c:e8:46:30:6b:f7:18:bf:f2:78:9e:c0:99:c7:
ba:ed:0e:dd:e0:ac:95:39:cb:51:1c:5a:96:ee:dd:9a:31:fd:
63:39:0a:18:28:43:4b:5e:b7:79:12:e8:9c:bc:4f:a9:95:4c:
12:0f:5d:22:3a:16:9b:a5:17:78:c3:fa:b3:79:ce:68:68:3c:
25:d7:a2:bf:d5:56:8c:5a:e6:1f:b2:aa:bf:9b:e6:f7:d2:c8:
64:62:df:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:45:39 2025 by rpki-client