This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
File: iDcigo7Pno3d_SRvPGeOnwUV-dI.mft (raw, json)
Hash identifier: vrLM14QBjzz+T4HWBLHe3AGvOYlDro5sUWE/zoHTJOs=
Subject key identifier: 38:9E:23:56:90:D7:88:8B:70:A7:80:A9:56:EF:0E:C8:EF:59:87:F1
Authority key identifier: 88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
Certificate issuer: /CN=A91F4130/serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Certificate serial: 0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
Manifest number: 0C
Signing time: Fri 05 Dec 2025 05:48:11 +0000
Manifest this update: Fri 05 Dec 2025 05:48:11 +0000
Manifest next update: Fri 12 Dec 2025 05:48:11 +0000
Files and hashes: 1: iDcigo7Pno3d_SRvPGeOnwUV-dI.crl (hash: PdoHubPuVJGPESNTrVi19h98B0hINgNwPsVtfZVrulw=)
2: B27ED5E6C11311F089B2CF23C4F9AE02.roa (hash: 7fhu/OYQrcFPMsnlICq0uC4gks0i2x0hGeXI57B2Rwc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4130, serialNumber=883722828ECF9E8DDDFD246F3C678E9F0515F9D2
Validity
Not Before: Dec 5 05:48:11 2025 GMT
Not After : Dec 12 05:48:11 2025 GMT
Subject: CN=6932721b-8db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:94:ab:97:d9:4b:04:5d:78:62:42:fd:a3:
7e:18:b5:0f:e9:22:aa:f7:7d:3d:c3:5b:6c:6e:4d:
d6:90:ad:31:21:ad:ed:09:0c:12:97:7b:c6:c1:17:
03:5b:3d:83:b4:31:df:1a:e8:bd:ea:b0:84:f0:10:
eb:b4:33:51:1c:04:61:58:1d:bd:0a:00:91:40:76:
86:79:71:ae:81:80:b3:a4:ac:bc:bc:68:1b:75:98:
1b:c8:36:f0:3c:66:07:b1:0d:e3:77:6a:2b:96:47:
6c:44:90:04:0d:d3:11:53:ca:d7:ba:d8:15:ad:ff:
5d:42:b4:e1:31:4b:d9:81:c6:8a:5d:ee:63:78:58:
ca:9a:38:f6:97:98:72:d8:3a:50:c6:7f:c9:a2:e8:
d4:09:1d:63:ac:42:e1:c6:f9:a4:6a:d0:84:8a:fe:
47:12:bf:3c:b8:11:e1:3c:64:dc:fe:94:d3:6d:ac:
1b:74:47:3b:3a:5f:23:76:2b:1b:e2:e9:9c:26:df:
ca:a9:27:a0:60:b3:96:13:1a:3c:04:c4:a7:5c:8d:
17:c2:b0:1f:d0:50:10:1a:3c:52:9d:97:86:1f:b9:
62:c0:a3:1d:7e:de:fc:f3:98:87:cc:55:42:23:fb:
dd:c8:61:79:55:aa:31:3d:a3:9e:30:72:cf:ce:b3:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:23:56:90:D7:88:8B:70:A7:80:A9:56:EF:0E:C8:EF:59:87:F1
X509v3 Authority Key Identifier:
keyid:88:37:22:82:8E:CF:9E:8D:DD:FD:24:6F:3C:67:8E:9F:05:15:F9:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iDcigo7Pno3d_SRvPGeOnwUV-dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4130/F40EE84EC11211F0BB5A1420C4F9AE02/iDcigo7Pno3d_SRvPGeOnwUV-dI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:59:24:b5:b0:bf:ba:85:03:2d:3e:99:03:68:db:20:63:7e:
d6:2d:2d:c7:c3:f9:2b:96:9d:84:5d:6c:5f:dd:5e:fe:2f:de:
49:f6:70:46:25:16:ee:b3:2c:36:30:d9:60:44:94:a0:97:54:
04:4b:e5:6e:be:09:63:01:7f:72:ba:0d:c2:a9:09:4b:b3:a2:
ce:70:e5:17:79:36:57:6f:fe:0d:42:01:1b:66:05:e1:ba:f7:
b9:cf:ff:4d:2c:3c:79:ed:96:9d:a1:a0:e4:c4:11:35:cc:e3:
5c:f3:62:38:28:8d:a0:48:57:dc:c8:c2:7d:6a:92:5b:3b:51:
52:18:f8:33:50:6b:d2:b6:f3:57:29:70:dc:b4:87:81:89:e4:
52:3d:10:d5:d2:f6:0d:65:2b:29:66:fb:ef:56:14:04:67:4c:
60:e6:ee:54:60:d6:38:39:97:5d:4e:60:50:7e:57:c6:e7:eb:
6a:85:1a:0a:9a:53:4c:14:a8:cd:65:c1:45:e2:5a:49:d7:b8:
cd:cf:aa:5f:2e:16:67:9b:2d:3a:4d:49:09:33:f9:73:c2:99:
08:97:07:a3:28:cf:3a:08:87:62:fd:ad:1d:09:e6:63:94:77:
db:8d:f7:17:85:4e:31:56:a6:53:80:e0:38:27:b3:25:1b:fb:
cd:42:81:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:46 2025 by rpki-client