This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier: jzJF5qO1Hz1xljg3fmg0XtxCPhX3c/onc7hJyBQnutI=
Subject key identifier: 0C:B0:49:A9:30:93:D4:5F:D2:85:03:EF:9E:C4:36:84:5C:E9:3B:13
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial: 04DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number: 04CD
Signing time: Tue 16 Dec 2025 23:15:33 +0000
Manifest this update: Tue 16 Dec 2025 23:15:32 +0000
Manifest next update: Tue 23 Dec 2025 23:15:32 +0000
Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: 5x1/Bw2CHlN+6K7eSIYB0OweGQdQZ75DKpujg4Pt2Fs=)
2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: DUvw8XiBBG3P6wqdRebsbbeOkq3Va0FcHiVzE8M6sk4=)
3: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: WK+phDZ3e+WuXd7GGXd/LXbz+tlV9m1b0anrW82wCDU=)
4: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: sQNjxMd5LDqe0WyT4xvTJH/Ho0rkly0KR/Vbb2pkt5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 23:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Validity
Not Before: Dec 16 23:15:32 2025 GMT
Not After : Dec 23 23:15:32 2025 GMT
Subject: CN=6941e815-9c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:2b:15:36:ae:7f:19:de:23:0f:05:e0:fc:
51:44:c6:21:d7:88:13:d1:e4:d3:ae:3d:56:ff:7b:
7c:fa:93:d8:55:2c:28:1a:09:f2:7c:2f:2e:02:0a:
7d:0f:88:a7:66:d4:85:1c:57:d8:49:1a:2f:63:80:
7c:3c:6c:ca:48:8b:a1:98:da:27:a6:28:06:2e:1c:
f9:98:77:2c:05:df:a1:43:d9:60:3c:c4:67:d9:f0:
49:ab:d7:aa:ec:eb:1e:12:7d:1f:1e:c4:9b:a0:1b:
d9:47:0a:5e:6a:96:b0:58:a1:a1:2c:ae:1e:eb:a8:
9a:d3:ad:17:1d:a8:af:6c:00:c5:8a:4e:1d:42:2e:
0c:f4:33:64:2b:3c:c8:ee:8f:19:f2:88:e0:a2:24:
5c:34:47:9e:3f:e9:3d:a5:5e:c2:8c:b8:e2:25:68:
a5:02:6a:d8:96:5d:66:27:4d:fe:9a:26:50:4b:7a:
a2:e6:17:79:93:e4:1c:20:a3:83:10:8a:c3:8d:25:
59:03:10:71:db:2a:32:e6:ef:83:87:19:7f:68:74:
e5:a8:41:79:f9:61:35:e1:0f:58:93:29:ea:3d:c8:
ec:ea:2a:eb:cd:db:4d:e5:ad:11:cd:46:76:94:76:
84:03:84:97:d7:4e:56:45:99:e2:e8:60:7b:68:02:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:49:A9:30:93:D4:5F:D2:85:03:EF:9E:C4:36:84:5C:E9:3B:13
X509v3 Authority Key Identifier:
keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:17:a1:09:8f:1c:de:be:d2:9a:3d:d5:19:6c:31:46:75:43:
9a:0b:97:8d:72:01:8d:84:1c:25:f4:b7:08:f9:f7:c5:a1:e3:
2f:30:67:11:2a:6d:fb:b0:61:82:52:ad:d6:b3:b1:12:af:e3:
55:83:19:e2:e8:d3:3d:d8:88:9c:02:63:4f:ea:10:72:e4:a2:
f0:e5:70:4b:fe:99:61:0f:8f:b5:11:50:77:a0:60:b2:42:cb:
40:07:ba:ed:7a:02:54:be:0a:7f:88:14:45:5e:5c:3a:5e:27:
2f:2f:4c:85:68:0a:3b:25:ed:05:ab:df:e4:ad:cd:01:16:d2:
ed:7b:06:1a:14:c5:64:74:fa:ae:c0:1e:41:34:8f:0b:a7:19:
f0:9b:bb:81:1c:56:8c:9a:bb:6d:df:e1:36:ea:9d:40:e6:74:
db:b8:28:67:c8:5e:12:30:74:bd:0d:bb:db:69:70:fa:99:3b:
e6:65:3a:c8:77:d8:54:b8:14:7d:57:d4:d2:6b:6e:4a:42:a2:
cd:71:0b:61:72:28:ad:2a:61:d2:d2:83:bf:2c:22:3e:8e:32:
3e:bb:0b:60:84:01:a7:b4:db:fd:09:eb:5c:01:32:c5:dd:27:
68:bf:b4:55:2a:8d:2e:ee:07:7e:e1:7d:9d:50:51:a0:56:a5:
11:36:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:45:38 2025 by rpki-client