This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File: caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier: 7dOOCYY39nJ1VyAA3hT+HsQ/OzBwvtaQZSif4iifChU=
Subject key identifier: 61:9B:5A:8E:FF:91:B7:A7:76:C7:0C:92:CE:01:1C:AE:EA:8E:B3:EC
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer: /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number: 0B
Signing time: Fri 05 Dec 2025 05:49:21 +0000
Manifest this update: Fri 05 Dec 2025 05:49:20 +0000
Manifest next update: Fri 12 Dec 2025 05:49:20 +0000
Files and hashes: 1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: medxw3vkj/+6LeGAQ3lqjYG5/ZVHRBluJHbdoQydKx4=)
2: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: er6jr1FS0D2/9mznlhepy8rxBzQvc9rNYi9PUnbvOIQ=)
3: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: O7z3m4YVM0wU21WTponLx+IqwFDb7IX9H8f56v/43dA=)
4: 0853E998C45711F080167D38C4F9AE02.roa (hash: UXfllLAn2oYs6QDv0DiGrvQ4onowkRfHyI9wXDB3nXw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Validity
Not Before: Dec 5 05:49:20 2025 GMT
Not After : Dec 12 05:49:20 2025 GMT
Subject: CN=69327260-4491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:46:22:6f:44:8e:25:81:0f:2e:ab:14:3b:
43:cb:ae:89:b7:87:38:ca:4c:9d:a0:47:a1:ad:36:
ef:86:5f:98:cf:25:19:3e:8a:22:bc:cc:b3:51:1c:
f2:0e:dc:00:99:23:e0:1e:9c:d8:31:35:fc:f7:06:
dc:75:40:4c:1c:af:7c:b9:40:ad:74:1b:32:6a:cd:
e5:23:16:8a:64:c2:0f:18:60:9c:c8:a2:2e:e2:58:
b2:3d:7e:04:3c:8f:60:56:34:62:f9:80:ae:41:3d:
ff:2e:1f:6d:7a:b3:d7:20:17:54:61:0b:f1:3f:e0:
42:69:1a:61:8b:8b:9a:21:1f:46:40:c6:52:ab:75:
9a:29:0a:3a:d6:c2:d7:25:13:97:93:87:30:0b:88:
7d:85:2a:78:fc:c4:02:4e:ce:39:02:5e:af:e4:45:
e5:61:05:3c:20:9f:f6:b1:db:6b:9b:0d:9f:57:06:
2e:22:3f:11:9b:4c:df:3c:ea:b2:1d:34:97:b5:20:
a5:42:27:e4:80:7a:71:12:5a:e0:5b:4b:cc:9a:06:
9a:55:23:db:c2:0b:26:04:96:14:5a:58:97:db:74:
33:45:90:82:8c:55:29:69:3b:80:8b:a8:6a:97:9e:
c9:8c:79:53:21:00:77:08:d0:c4:eb:ad:8d:47:cf:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9B:5A:8E:FF:91:B7:A7:76:C7:0C:92:CE:01:1C:AE:EA:8E:B3:EC
X509v3 Authority Key Identifier:
keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ad:13:c8:52:6e:be:e2:43:5a:6f:38:6f:85:35:f9:b6:53:
eb:93:49:bc:0a:7f:11:a3:52:65:73:7e:70:5a:90:01:04:cb:
f2:36:06:ec:e4:2e:20:ba:ee:59:01:42:3e:6d:e7:94:83:c4:
32:ed:2d:e5:6a:69:b2:74:ee:a4:a7:66:3e:f7:3d:cd:93:d4:
89:4a:c5:95:ec:12:fa:9b:c0:17:be:0a:3b:44:8f:6b:19:0b:
c1:87:7f:2f:d2:d5:52:d9:f8:0f:a6:23:21:31:f9:91:fc:3e:
e3:86:7c:cf:7d:b0:c0:78:b9:14:ec:55:1f:4e:69:56:35:69:
5a:67:00:51:2e:61:88:e0:72:47:5e:79:10:46:7b:02:a0:aa:
f8:fb:eb:0f:73:3f:4e:9b:42:1a:fb:e9:fe:9c:d9:f4:93:5f:
21:4b:47:84:d9:60:f2:f6:47:c7:e3:a3:3f:2f:ec:7e:b4:ac:
23:9d:38:7a:31:ad:e8:43:63:1d:f2:51:e6:0a:60:86:96:21:
6c:e9:3d:3a:5a:13:e8:dc:a7:f2:62:11:64:6f:6f:3f:6b:e9:
73:75:42:21:05:1e:7d:4f:c9:5e:8d:5e:5b:25:fe:c9:cf:82:
b2:f4:00:dd:00:a5:13:d3:14:a1:5a:e4:22:f3:ea:40:cd:fd:
d6:ec:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:56 2025 by rpki-client