This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json)
Hash identifier: lbBjyYx7KUGaVtlx1xdXp3dsknoqf4vxovr38V+ZclY=
Subject key identifier: AA:0A:80:C6:A5:CF:74:10:9D:AD:8A:91:EB:23:66:15:2D:DA:2B:90
Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Certificate serial: 014E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
Manifest number: 014E
Signing time: Sun 07 Dec 2025 02:34:39 +0000
Manifest this update: Sun 07 Dec 2025 02:34:38 +0000
Manifest next update: Sun 14 Dec 2025 02:34:38 +0000
Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: OJOXbHjnYiUr2BC5crjFGPChvZ8hXppfQWqyU6sdfzs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D
Validity
Not Before: Dec 7 02:34:38 2025 GMT
Not After : Dec 14 02:34:38 2025 GMT
Subject: CN=6934e7bf-b508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:35:19:a8:26:50:68:c2:3b:33:58:0a:85:
aa:96:7a:f7:d1:3b:e2:28:6f:ac:15:d6:bc:3e:40:
db:35:d3:fc:a9:5a:3a:80:a7:9e:d5:56:53:b0:8c:
c2:d0:c2:7f:8f:bd:95:82:ff:08:83:ff:50:70:15:
e5:c2:f6:f4:95:d5:96:83:38:df:54:de:e3:00:f8:
5a:9e:73:c4:af:50:d4:28:d5:d6:b8:33:87:54:eb:
07:5c:8e:8f:6c:28:0e:41:0b:71:8b:db:a0:d3:91:
5c:20:66:08:59:79:de:68:4a:64:a8:b2:63:96:c3:
f3:ee:62:e3:7c:e9:47:33:bd:29:19:78:3d:31:44:
03:c5:f1:f0:41:e9:f8:23:59:a7:09:82:de:cb:6a:
84:d6:28:6f:8c:f0:66:28:bf:f0:9a:2f:1b:eb:2d:
f5:ff:5e:37:d0:7d:7e:0a:fe:fa:15:aa:79:9c:33:
bc:e5:ea:20:d7:14:4e:4e:a2:43:2f:71:87:b4:ed:
31:21:1f:41:81:f1:88:ab:6e:80:ab:93:5b:5d:9e:
50:64:ac:16:e5:5b:70:74:36:90:34:2d:67:ee:c0:
74:12:c3:7a:36:62:7c:62:46:19:fc:31:b0:12:d0:
ef:0a:8b:6e:05:6f:38:a5:30:6d:59:c8:04:14:f4:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0A:80:C6:A5:CF:74:10:9D:AD:8A:91:EB:23:66:15:2D:DA:2B:90
X509v3 Authority Key Identifier:
keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:77:3d:da:94:c0:20:7f:e6:53:d8:56:09:84:70:cc:ff:f0:
ea:15:89:80:d3:1c:50:a5:1f:d7:63:15:3a:07:a9:47:4e:98:
b3:d3:f1:3a:ad:a9:da:80:20:d9:7b:2b:33:db:ed:dd:ac:fa:
d7:67:88:4d:73:12:7c:40:8e:54:77:f4:44:0e:0e:6f:c8:0f:
4d:58:db:e1:c4:3b:55:ca:87:3d:0e:51:57:45:ec:fe:ce:9a:
fa:86:3c:99:e5:cd:5e:11:26:63:1f:dc:c8:64:72:33:6b:bc:
88:82:e3:7a:fe:d1:cd:7e:09:a1:5b:87:d0:15:78:f8:98:15:
5c:e4:9e:33:ca:9e:5c:06:c5:96:fe:bc:a7:37:09:90:e7:d6:
bc:e9:4c:04:11:36:80:ab:a5:ce:03:78:a0:6a:fb:cb:e3:7c:
82:2f:91:9f:ba:22:cd:6f:6d:a6:1d:7d:3a:11:c3:95:48:e2:
b9:54:62:36:3d:57:3c:ec:1a:0d:60:eb:31:5c:32:bb:dd:8f:
8a:4b:d8:9e:d3:49:7b:8f:89:65:26:ba:ec:b0:99:d2:d6:84:
53:77:23:a2:35:74:90:e1:15:8a:70:97:30:5f:ee:50:82:13:
8b:11:73:bd:dc:50:e5:62:9c:d2:b1:b1:16:bd:2f:f1:72:42:
b1:1b:cb:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx
NEVBRDAyN0QwHhcNMjUxMjA3MDIzNDM4WhcNMjUxMjE0MDIzNDM4WjAYMRYwFAYD
VQQDEw02OTM0ZTdiZi1iNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+o1GagmUGjCOzNYCoWqlnr30TviKG+sFda8PkDbNdP8qVo6gKee1VZTsIzC
0MJ/j72Vgv8Ig/9QcBXlwvb0ldWWgzjfVN7jAPhannPEr1DUKNXWuDOHVOsHXI6P
bCgOQQtxi9ug05FcIGYIWXneaEpkqLJjlsPz7mLjfOlHM70pGXg9MUQDxfHwQen4
I1mnCYLey2qE1ihvjPBmKL/wmi8b6y31/1430H1+Cv76Fap5nDO85eog1xROTqJD
L3GHtO0xIR9BgfGIq26Aq5NbXZ5QZKwW5VtwdDaQNC1n7sB0EsN6NmJ8YkYZ/DGw
EtDvCotuBW84pTBtWcgEFPQ4XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoKgMal
z3QQna2KkesjZhUt2iuQMB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF
MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB
bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy
QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9dz3alMAgf+ZT2FYJhHDM//DqFYmA0xxQpR/XYxU6B6lHTpiz0/E6
ranagCDZeysz2+3drPrXZ4hNcxJ8QI5Ud/REDg5vyA9NWNvhxDtVyoc9DlFXRez+
zpr6hjyZ5c1eESZjH9zIZHIza7yIguN6/tHNfgmhW4fQFXj4mBVc5J4zyp5cBsWW
/rynNwmQ59a86UwEETaAq6XOA3igavvL43yCL5GfuiLNb22mHX06EcOVSOK5VGI2
PVc87BoNYOsxXDK73Y+KS9ie00l7j4llJrrssJnS1oRTdyOiNXSQ4RWKcJcwX+5Q
ghOLEXO93FDlYpzSsbEWvS/xckKxG8vV
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:12:06 2025 by rpki-client