This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File: TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier: HpJtYHWRkyzSVOEYJUjFxdSgZXFDqGHWQ8QB+Gxu5to=
Subject key identifier: 1A:46:29:89:A1:40:21:41:55:2F:49:75:36:18:59:98:C9:7A:91:35
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer: /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial: 078F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number: 0781
Signing time: Thu 04 Dec 2025 20:31:33 +0000
Manifest this update: Thu 04 Dec 2025 20:31:33 +0000
Manifest next update: Thu 11 Dec 2025 20:31:33 +0000
Files and hashes: 1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: nJ80hQPs0MldTQvEveNRYjgjerI5XUgOa+4d/K9AMqY=)
2: 3B85CDCC5AC611F0A650577AC4F9AE02.roa (hash: xmCa0S6gH7UT6IXBmoA13nKDzBCa881kyZEoIomnGCw=)
3: 3C4D39C05AC611F0A650577AC4F9AE02.roa (hash: UDmf7YDCi7nUXuyz+EQ/ianBiDIEB+Xhn6jTOtoUZ/Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1935 (0x78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Validity
Not Before: Dec 4 20:31:33 2025 GMT
Not After : Dec 11 20:31:33 2025 GMT
Subject: CN=6931efa5-a4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:52:2e:36:ec:85:45:fe:96:ed:e2:45:fd:
c7:7f:4f:5c:05:c7:60:b4:97:3d:59:f1:c2:a2:28:
95:41:b5:e7:76:3d:e2:fa:1d:c7:c0:8c:fe:dd:7c:
61:5f:b1:21:b1:0f:ac:a4:99:19:d8:60:72:60:3b:
f1:cf:1c:ea:a3:ef:73:ac:91:a8:07:07:54:02:40:
97:b5:3e:d7:11:95:1d:3f:1e:d5:b7:74:28:77:f3:
f9:64:40:24:09:4b:02:c3:e0:d8:60:53:5f:16:66:
32:08:0b:4b:69:c6:cb:83:a9:bd:c4:1b:11:bf:07:
07:5e:76:c4:21:d1:45:69:f6:4c:24:61:ec:65:67:
fa:2e:6d:9a:7c:64:74:59:4b:1b:c5:df:bd:b2:c4:
50:56:32:28:92:95:7c:62:90:3d:44:5e:72:4c:91:
68:d8:5f:b5:a0:e3:93:18:71:58:db:fb:66:3b:22:
dd:4b:c7:3e:20:fb:44:ce:bb:ce:f5:0b:33:4c:66:
b5:84:db:e1:2c:19:10:a8:26:9b:f3:51:87:31:a9:
94:f3:22:53:bc:34:9d:b0:f9:e5:3d:f8:57:96:fd:
59:ae:f4:1f:20:31:4b:52:a7:bf:0a:a8:ed:bf:e0:
6a:44:c4:ed:fb:3a:c7:2b:16:d0:75:85:ea:a8:3e:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:46:29:89:A1:40:21:41:55:2F:49:75:36:18:59:98:C9:7A:91:35
X509v3 Authority Key Identifier:
keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:f6:51:d8:c8:81:86:ec:2a:b7:af:72:7b:de:6d:47:b9:1b:
26:11:5d:fe:4a:e3:48:85:f0:1c:35:d8:16:83:fd:e3:27:91:
f4:55:e4:64:ca:d1:ad:9c:e0:d6:74:d3:74:0a:db:63:ce:c2:
0e:ad:4e:ca:b6:1e:aa:62:eb:05:d9:ee:cc:9f:64:05:d8:bb:
38:90:c1:a8:f3:2e:eb:3f:e7:cc:6d:a2:01:81:23:c5:3a:f2:
7a:76:d1:31:34:f5:29:38:31:dd:56:11:e0:f2:8e:d7:63:5f:
bb:ce:ed:39:e4:1a:fa:6a:58:ff:32:8e:e2:99:11:b4:b4:ce:
20:e1:c0:80:8b:52:8c:32:89:bd:a6:9d:c5:5b:03:11:f8:37:
24:be:4d:fc:4e:ab:d9:93:88:f1:ab:6a:d5:8c:a4:6a:0f:b2:
15:56:15:b4:00:18:fd:a3:dc:ec:5b:72:97:5d:a0:73:96:70:
12:75:59:08:11:d2:71:b7:47:6a:6e:21:9c:66:7f:5b:8d:f0:
f6:3f:ec:b4:47:93:e6:96:e6:7a:8c:a3:14:0a:9e:2f:7b:3e:
5f:99:e5:7f:54:52:85:2d:b9:4c:67:c5:c9:ca:a6:cc:49:4e:
10:24:3e:0b:ab:82:1e:9e:a3:3f:cb:a2:48:a8:c6:d6:df:a5:
15:eb:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:41 2025 by rpki-client