This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier: kzbOHZDrpE28TqaTS6KiM7LxrPJWNODl9anU5o6n5vw=
Subject key identifier: C6:30:94:95:BB:8A:3B:D6:AE:47:DD:4F:D6:BB:AD:A1:07:E9:E5:66
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial: 07F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number: 07EB
Signing time: Sat 06 Dec 2025 20:11:06 +0000
Manifest this update: Sat 06 Dec 2025 20:11:05 +0000
Manifest next update: Sat 13 Dec 2025 20:11:05 +0000
Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: VysqvYg5lSA8rM8mo2fPXb5O2G5G74AuC6EIAISVM7k=)
2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Validity
Not Before: Dec 6 20:11:05 2025 GMT
Not After : Dec 13 20:11:05 2025 GMT
Subject: CN=69348dd9-54fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:81:a0:31:a3:b3:21:56:22:72:5e:0f:ba:
43:71:81:1c:45:0c:47:45:e8:7f:f9:59:94:7a:b3:
17:11:ce:7d:bd:87:03:45:fe:b1:2b:b2:ea:66:b7:
8d:dc:20:2c:a8:59:11:88:78:4a:a6:93:03:e9:ce:
57:d6:6a:eb:23:a7:df:52:01:b8:fd:d4:03:04:c7:
36:51:ee:7b:4f:26:44:e6:21:6f:f9:10:64:87:4f:
1d:dc:2d:1a:4f:b9:89:15:7e:46:60:ab:b2:c8:77:
a2:23:a0:17:44:8a:10:67:12:0c:3e:c3:7e:0b:31:
a6:75:69:f5:c1:e8:a6:44:29:96:20:f6:bf:a7:13:
85:61:05:fd:33:d2:42:09:6e:2d:15:fb:a3:f0:e9:
9e:28:75:c6:95:b6:04:cd:3e:4e:7d:2d:dd:b1:22:
de:d8:bd:65:34:49:a8:55:8c:b3:0b:39:1c:01:e5:
a8:8c:3a:0d:30:92:b9:63:07:1f:7e:0d:b0:8d:e9:
e9:28:ee:4e:f1:d5:29:d4:2a:31:ae:cc:a5:4a:3f:
79:49:a4:91:e5:be:c6:ce:72:1c:97:56:21:df:21:
5e:09:94:a3:46:c2:2d:cb:d2:bb:f3:0d:07:eb:8e:
9e:a2:c5:f5:6f:fe:ce:33:c0:ea:c0:53:65:f9:a9:
51:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:94:95:BB:8A:3B:D6:AE:47:DD:4F:D6:BB:AD:A1:07:E9:E5:66
X509v3 Authority Key Identifier:
keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:b4:22:5e:b7:29:c0:e0:48:1b:dd:9d:09:53:84:08:5d:
93:01:d6:c4:fc:1d:9c:eb:4d:84:58:30:23:4c:1a:12:c9:03:
03:b4:fd:a7:d8:64:c1:fb:ba:bc:32:12:cd:00:ca:c5:59:78:
a2:e9:c8:8c:b1:bd:d3:10:57:ca:d5:8b:82:1c:c2:45:24:bd:
75:03:39:39:9e:62:c9:1a:d7:6f:21:fd:e9:42:e9:fb:27:67:
58:79:78:7b:ce:dd:3d:b7:0e:26:90:81:6f:05:d7:08:69:42:
0c:2c:60:34:08:50:5b:65:7d:88:91:92:27:83:e3:74:d0:fd:
6a:19:91:43:1b:27:8b:4e:06:8d:eb:5e:64:fa:69:3b:74:ab:
be:bc:d8:3b:55:6c:76:ad:24:05:19:7e:f6:53:78:d6:b9:8f:
a1:88:89:a0:89:e0:fd:07:ea:62:2c:c4:e6:ac:86:e0:7e:a1:
c5:0d:d6:08:55:40:06:42:f6:92:ef:cb:77:e5:6e:31:f2:fc:
8b:dc:09:c7:b1:f7:23:89:a9:dc:3e:b7:d4:9c:94:93:d9:8d:
0b:81:9d:e5:c5:c7:3b:26:e4:0d:b4:0e:3b:d9:38:1c:9c:ce:
eb:d3:7c:45:84:ff:3b:97:63:f5:ac:bb:30:cc:55:e0:7f:64:
02:3c:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:20 2025 by rpki-client