This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
File: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft (raw, json)
Hash identifier: VFIrC0awuul7XjltxeJkFXzWxcL2kvNOnjT0ykoYp9Y=
Subject key identifier: 1D:F9:B5:54:C4:13:A9:89:96:43:C7:C9:73:4D:47:6F:86:3F:2E:13
Authority key identifier: 4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
Certificate issuer: /CN=A91F1962/serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Certificate serial: 66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
Manifest number: 65
Signing time: Fri 05 Dec 2025 04:54:41 +0000
Manifest this update: Fri 05 Dec 2025 04:54:40 +0000
Manifest next update: Fri 12 Dec 2025 04:54:40 +0000
Files and hashes: 1: TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl (hash: Afz6mZJCTdjLC16EWmwxeF/jLZwDHmuQIiVfvmlR8Ec=)
2: 6AD3BE8A38DF11F09B694578C4F9AE02.roa (hash: 9rhYh2K9C4geTpdroXBWzRdnuI2oKhp0zRB66YiZ9aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1962, serialNumber=4E027D29DF587C101E55F4CE48E690306319CDAB
Validity
Not Before: Dec 5 04:54:40 2025 GMT
Not After : Dec 12 04:54:40 2025 GMT
Subject: CN=69326590-e745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:02:8c:08:7d:e3:3c:40:74:f7:63:3d:85:4c:
28:11:ca:66:1b:c4:44:cd:4a:f1:10:34:52:8e:d1:
1b:17:93:13:f0:46:22:70:06:b0:bd:ca:2b:d6:af:
65:28:79:2a:a6:b6:f9:52:be:d9:14:01:b6:2e:5d:
4c:95:b1:15:82:6a:a9:da:df:9d:48:df:96:87:87:
dd:7b:e7:7d:e2:0d:67:d5:38:a1:8c:5d:b2:5f:70:
31:e3:d5:b3:0c:d4:f5:fd:96:42:c1:be:e7:95:c9:
ba:33:d2:a0:63:0e:c3:c9:a6:7e:1e:e4:53:ad:c6:
d7:32:88:c4:27:bf:f3:a9:c9:50:be:65:0e:e1:ad:
5b:9f:af:69:33:3f:f6:0f:18:7d:c6:4c:2c:43:0d:
1e:ad:c8:d5:21:a9:e8:c7:46:ff:7b:81:23:95:08:
41:d9:35:1b:b6:b1:a9:42:73:9b:ac:5f:d7:2f:34:
22:2d:f4:57:a1:ad:be:80:71:42:90:63:52:47:07:
34:ff:5c:7b:65:82:5c:f0:87:f3:31:e2:40:a8:89:
3d:40:db:59:a0:f1:37:91:e5:f9:d4:e1:18:69:b9:
26:e6:db:2f:df:ff:fe:ac:aa:79:39:74:30:8f:3c:
72:0d:28:29:a9:6b:57:50:0c:a2:22:06:5b:48:94:
c0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F9:B5:54:C4:13:A9:89:96:43:C7:C9:73:4D:47:6F:86:3F:2E:13
X509v3 Authority Key Identifier:
keyid:4E:02:7D:29:DF:58:7C:10:1E:55:F4:CE:48:E6:90:30:63:19:CD:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/B75380C4371311F0AB0D9E4EC4F9AE02/TgJ9Kd9YfBAeVfTOSOaQMGMZzas.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bd:40:8c:1f:c5:f2:bf:24:bd:12:6e:fa:d0:9b:02:f9:3f:
b4:22:b5:dc:f0:a2:83:1e:af:55:d9:62:37:b3:78:b1:ab:d5:
c1:03:6f:2f:b2:55:ba:6f:b0:10:47:50:0b:06:a4:76:12:85:
05:5c:f7:e4:fe:01:dc:62:e8:f7:45:b0:32:e9:96:27:61:de:
2d:00:b1:78:a2:43:db:13:94:f8:42:8d:2d:e6:d2:52:9d:f0:
e5:d2:8a:33:d5:87:27:51:47:3b:57:bb:14:dd:b2:c0:fa:fe:
7b:33:f5:dd:55:ef:71:d6:c8:33:dc:11:11:50:9a:47:89:40:
42:14:13:c1:94:5a:b0:0b:cd:73:8f:fb:51:47:22:03:00:90:
5d:47:b3:6d:07:37:17:84:44:df:1d:aa:93:a2:9d:bf:ee:59:
2e:48:2d:e2:0a:ef:4a:e1:36:cc:ee:6a:87:bc:9f:ba:8b:8c:
1c:7b:fa:04:0b:a5:77:70:a5:e5:97:15:8e:8a:5e:00:7f:74:
b6:3e:75:cb:b0:2e:78:83:cb:7f:4c:d1:d5:79:b5:8f:8a:16:
97:eb:31:87:cc:41:82:58:92:4f:17:be:a5:f0:3a:b2:dd:cb:
53:86:8c:3e:22:84:bc:fa:24:18:5b:74:fe:09:b6:f9:61:a4:
1b:35:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:46 2025 by rpki-client