This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json)
Hash identifier: V04m4L7EUM8LnfgbzUNdCnfTGoi7+mCdMSTWDUWhFt8=
Subject key identifier: E5:CF:B8:A5:C5:65:D6:66:76:B2:D7:58:9A:10:85:68:B0:E3:D6:06
Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Certificate serial: 0A1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
Manifest number: 0A16
Signing time: Thu 04 Dec 2025 19:03:35 +0000
Manifest this update: Thu 04 Dec 2025 19:03:34 +0000
Manifest next update: Thu 11 Dec 2025 19:03:34 +0000
Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: sYFNS4BfUbiSVXi2y2LN1hlNJY/h5EvXUrpeur7RW7I=)
2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: rjAdNfdV9AdfawHfPlvLtufzt08XjVklPQmY9MfBrEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589 (0xa1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7
Validity
Not Before: Dec 4 19:03:34 2025 GMT
Not After : Dec 11 19:03:34 2025 GMT
Subject: CN=6931db07-a507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:aa:36:81:24:48:ed:a3:39:05:86:c6:5f:
cf:76:e4:12:ae:26:85:59:08:42:19:ef:3c:48:c6:
20:c0:75:a7:79:4b:d0:9f:8c:5d:e2:b3:3a:66:38:
92:71:24:54:0b:06:fc:ae:83:3b:7e:6b:10:7c:c2:
20:d6:29:09:ce:a3:c8:b0:51:fa:fa:3e:8c:ff:30:
d2:9d:27:0d:14:07:69:ea:a3:50:0a:8a:a6:5d:aa:
41:e9:93:ee:5d:f8:84:9c:e2:4e:72:f2:8c:96:7f:
fa:40:57:9c:4f:22:d7:7d:c2:17:f6:45:3b:53:3d:
94:18:93:c2:cf:3d:40:f2:49:cc:6d:90:fe:70:80:
64:7f:71:45:5e:15:98:3d:02:2e:f1:49:31:fa:ea:
4a:d1:ba:77:4e:d1:a2:3a:ff:1d:35:ec:46:ba:eb:
43:fe:46:da:0a:dc:21:b4:88:68:1c:dc:e5:ce:0b:
a9:73:25:a3:58:93:d7:cd:83:96:39:b8:6d:25:3e:
75:58:8b:fc:ba:92:ee:0b:cd:f9:8f:e6:33:20:2b:
b7:c3:9b:ac:3c:6b:b3:7c:b0:18:98:1a:e1:75:9e:
18:81:61:5b:28:0f:ca:dc:07:bf:eb:8a:e1:03:e3:
67:4d:19:5f:4d:96:09:16:6e:af:a3:89:23:b5:1a:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CF:B8:A5:C5:65:D6:66:76:B2:D7:58:9A:10:85:68:B0:E3:D6:06
X509v3 Authority Key Identifier:
keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2b:87:45:d3:e7:95:c3:78:86:77:2c:0e:93:d8:50:2c:e4:
50:3b:1e:47:c5:88:fc:e5:59:26:5f:60:64:50:6f:20:38:c2:
fb:75:97:49:e0:06:06:53:d6:73:81:e1:11:7a:48:b7:ed:de:
97:b6:3a:41:86:48:92:e2:b6:40:94:23:02:83:40:4a:21:80:
ec:16:17:15:13:b8:09:c3:1f:08:9c:cb:46:83:b6:86:30:54:
b9:f5:1e:2a:32:1b:de:9a:9c:73:06:44:21:c4:e4:bd:30:7c:
76:26:f9:1f:23:2c:88:39:84:92:ec:0b:de:fe:9a:63:39:00:
c1:44:10:c3:42:50:61:35:d9:c4:e0:64:e2:d6:41:0d:5f:a3:
7f:e2:f0:2e:24:14:70:ec:45:3a:8a:f0:44:83:d7:fb:7f:ef:
d7:47:53:03:c1:81:a7:89:b9:5a:83:21:98:7c:8d:86:2c:22:
bf:25:a9:3d:6b:f7:08:34:15:22:e9:da:ca:c6:80:39:67:7a:
96:91:1a:ff:c7:f8:18:2b:af:a4:e0:ac:90:ab:2d:ba:85:6b:
a5:ad:11:2c:d0:f7:26:30:57:3e:32:5c:ad:c3:f9:2a:22:a9:
e5:ec:4f:80:fe:7e:99:df:90:e5:90:41:a8:35:02:7d:9c:8f:
d8:2b:2a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:31 2025 by rpki-client