This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
File: X1zijATRbpUODrzVlVVCSD05VtA.mft (raw, json)
Hash identifier: JVKpLIQdtDZ2vBGN8yLefrrXaqN3S5uuZ9zf17yznG4=
Subject key identifier: B6:B2:BF:9A:95:EB:26:CB:56:E8:4E:0B:EC:A7:42:90:B3:5C:31:9F
Authority key identifier: 5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
Certificate issuer: /CN=A91F0D86/serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
Manifest number: 0195
Signing time: Fri 05 Dec 2025 01:42:40 +0000
Manifest this update: Fri 05 Dec 2025 01:42:40 +0000
Manifest next update: Fri 12 Dec 2025 01:42:40 +0000
Files and hashes: 1: X1zijATRbpUODrzVlVVCSD05VtA.crl (hash: 1tGmlukV73aLUhqp5X5Fv8+JNMa3+wK18kUL2fL3IxU=)
2: 85BF2BE4710111F093C54468C4F9AE02.roa (hash: 0DjY0BlkVRPwB3NWf9zy3shKm/xu/h/zeurHbCub9hQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0D86, serialNumber=5F5CE28C04D16E950E0EBCD5955542483D3956D0
Validity
Not Before: Dec 5 01:42:40 2025 GMT
Not After : Dec 12 01:42:40 2025 GMT
Subject: CN=69323890-0c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:32:d3:48:4e:a7:59:31:c6:d2:ed:86:24:
12:9a:69:82:28:b7:a1:2b:9a:70:42:0a:6d:c3:11:
af:fd:04:91:1f:70:f4:85:4f:1e:41:45:9c:80:39:
61:75:1d:96:95:59:33:94:8b:db:b6:81:22:c9:cf:
45:2e:23:e5:65:cf:b3:38:b8:36:7a:ce:41:e3:0b:
23:15:93:a5:a4:c0:63:51:a8:27:d8:68:6b:2e:35:
34:82:2c:8b:90:9f:8e:de:5a:53:59:af:5b:d4:63:
85:d0:e6:ae:33:31:ac:ad:a1:3c:49:85:7d:f2:13:
55:0b:4b:5a:4c:c0:39:7b:c1:56:7e:26:17:49:1d:
06:5d:5a:1e:93:2b:28:6c:36:8f:df:8f:ca:be:3e:
56:f7:71:d4:b0:eb:25:12:1f:11:01:b3:ea:32:aa:
80:ef:48:42:44:c0:d5:5f:89:29:52:94:b3:d4:e7:
21:cb:cf:20:29:c1:65:cd:46:35:71:cf:65:e9:24:
14:d8:55:3d:84:d0:29:61:a6:75:cf:4c:c2:6c:8c:
64:d8:e5:73:13:d8:d9:7e:16:7a:3d:06:76:13:70:
0e:02:3e:6b:05:82:00:92:2d:c4:d0:74:c8:0d:88:
4d:f4:2a:70:48:d8:20:b6:74:20:48:ab:63:08:6a:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B2:BF:9A:95:EB:26:CB:56:E8:4E:0B:EC:A7:42:90:B3:5C:31:9F
X509v3 Authority Key Identifier:
keyid:5F:5C:E2:8C:04:D1:6E:95:0E:0E:BC:D5:95:55:42:48:3D:39:56:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X1zijATRbpUODrzVlVVCSD05VtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0D86/68E7978A6CBD11EEB846F379C4F9AE02/X1zijATRbpUODrzVlVVCSD05VtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:89:54:36:d2:be:40:9e:ee:71:8f:a2:fa:c5:79:f0:46:81:
76:e7:8b:b9:8a:bf:51:5f:3b:57:69:2f:32:7e:2d:39:7a:ae:
f6:8e:c9:9a:4f:66:c1:bf:7a:e4:66:92:28:a6:1a:4d:59:29:
f0:73:c3:f3:08:29:46:17:03:d7:ca:dc:67:0a:a4:e5:33:6b:
e4:2e:16:65:1f:96:be:b0:05:d4:58:c5:41:5b:05:5a:52:74:
5a:af:e8:72:cb:17:a1:4d:8c:dc:3a:c5:c1:e5:97:92:2f:14:
eb:53:3d:8d:c4:89:73:db:7e:dc:63:98:f1:c2:b5:6b:d1:d1:
ce:77:59:c7:54:48:57:54:08:df:5c:5f:8c:c8:07:a6:9c:3d:
03:a2:eb:19:d4:23:b1:b8:19:ac:95:e4:20:5a:53:8e:7b:50:
52:74:fa:4a:ae:67:2a:dd:ab:d5:21:53:5e:35:ce:cf:d2:c5:
9b:89:08:69:ee:a4:fb:39:2d:b5:a4:5c:6e:23:7d:98:24:dc:
6e:b4:f7:3a:7d:5e:36:df:52:b9:23:2f:d3:73:16:4d:5d:11:
4b:0c:75:24:4f:40:bf:f5:64:f3:d5:f6:1c:98:0b:c3:da:21:
4c:61:b5:80:33:25:e1:ec:8c:c0:e4:8a:09:bf:cb:b7:ce:ac:
1c:bf:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:30 2025 by rpki-client