This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json)
Hash identifier: wcXwG37eE1+qy6EgqzazyHYVxa2cPRHUh3aUtH/XO9s=
Subject key identifier: D0:A0:26:CA:E8:39:8B:CF:EE:6A:2F:DC:CE:5A:5E:57:B0:07:B0:A4
Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Certificate serial: 0344
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
Manifest number: 0334
Signing time: Thu 04 Dec 2025 23:25:39 +0000
Manifest this update: Thu 04 Dec 2025 23:25:38 +0000
Manifest next update: Thu 11 Dec 2025 23:25:38 +0000
Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: MnCksJi8uaJviF2Mmdjb+SZd8ytOR6nE9tnWqnx3G0I=)
2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: CEfGbgV4LaKbj4u3R7aNKzhHvon4f//WI/Vfu2HLT9Y=)
3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: gTSqgh2aSgY5yQnuvBFWDUG9VxT+cR0rsZFBwosrBcs=)
4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: DRDlC7cP5kScc1hDU1cGcX/a0wHpMiRUfD8YYtGPsXQ=)
5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: dFDu1xtbxZcal/OLNEGR66lP0h2QWRAtS7qy0zXmKy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:25:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC
Validity
Not Before: Dec 4 23:25:38 2025 GMT
Not After : Dec 11 23:25:38 2025 GMT
Subject: CN=69321872-dc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:1f:3d:a7:a8:7a:b5:86:a7:21:93:0f:0f:
a5:46:83:7a:24:34:00:7d:fb:56:0a:ba:d3:c6:98:
30:62:7e:d1:a8:71:e8:e2:63:45:3c:f5:f7:1d:ff:
62:2c:e5:14:75:9d:29:77:a3:fb:f7:cc:58:83:57:
86:28:4b:6f:98:d6:ba:42:2c:55:e3:f6:48:95:90:
50:06:e5:f9:e3:cc:4f:4c:d3:27:88:a7:39:55:73:
39:cc:0a:9f:a9:6a:aa:25:4b:ec:3f:e3:dc:bc:93:
30:c0:a6:97:88:8e:68:53:31:a9:e0:82:3c:38:dc:
6f:87:3d:51:a7:18:f3:09:ea:b0:e9:96:9b:36:fb:
74:d0:ac:fd:87:16:25:58:a5:44:12:b3:35:0a:49:
d8:ec:1d:5a:84:f2:da:83:0a:88:83:e3:94:9e:a6:
9a:81:53:64:55:b4:6d:52:bf:0e:94:24:95:15:5b:
a9:88:35:9b:54:ed:c1:ce:2e:85:1f:30:34:15:a8:
e5:fa:56:56:4b:de:63:06:ca:66:5b:01:7c:ad:26:
b1:a0:06:3e:f4:73:a5:7e:4a:99:b7:ee:bc:d2:c6:
97:fe:89:10:db:08:66:3b:a4:01:c0:42:ee:fd:78:
9a:82:69:2b:e6:44:8a:45:c9:04:57:40:2c:3d:e8:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A0:26:CA:E8:39:8B:CF:EE:6A:2F:DC:CE:5A:5E:57:B0:07:B0:A4
X509v3 Authority Key Identifier:
keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:61:9c:d2:ac:3d:47:82:e8:01:72:8e:77:40:5e:fe:a8:1a:
98:67:a3:af:19:12:5a:f4:61:93:73:03:d1:2a:00:5f:6d:26:
b7:b8:fe:5a:7e:4d:15:09:d9:c9:ed:21:04:de:56:d4:9d:6e:
4a:58:fc:22:c3:d1:d9:87:9b:14:8a:ab:98:3a:5a:19:fc:e7:
21:b8:73:94:2e:34:87:69:c4:9e:d4:57:82:f1:72:c1:6c:de:
40:0c:8e:86:cb:dd:68:07:1e:84:7b:13:ba:b8:65:b1:07:bd:
69:34:c9:c5:57:22:f9:a0:a8:55:71:50:ed:42:cf:a2:b8:f9:
da:02:63:fa:cb:30:14:f3:aa:df:b0:28:bd:1d:75:48:d5:66:
6f:10:17:7b:b2:54:70:f0:d3:45:41:9f:6f:e5:41:28:77:e6:
49:a2:cd:c0:e6:45:22:40:65:e0:16:01:88:b0:7c:d4:33:a0:
ec:47:c9:c1:84:84:04:4a:91:98:f4:66:8b:da:74:e6:a3:92:
b7:dd:59:ea:9d:6e:79:a4:33:6b:7a:6f:a2:f1:11:bb:79:87:
1a:4e:d5:97:07:32:48:96:af:34:27:aa:a7:54:d8:98:7d:95:
21:7b:7f:e7:81:0e:78:55:8d:1f:c2:c4:14:af:24:70:70:37:
b2:8a:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:06 2025 by rpki-client