This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json)
Hash identifier: hj8rBxZgIcw5KdUmMBurfWUB04cwwTbUsVUjov0KSpU=
Subject key identifier: 00:20:BD:32:E9:CE:93:B6:2B:9C:93:2D:DB:14:0B:87:24:AF:24:49
Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Certificate serial: 0835
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
Manifest number: 0827
Signing time: Thu 04 Dec 2025 19:58:15 +0000
Manifest this update: Thu 04 Dec 2025 19:58:14 +0000
Manifest next update: Thu 11 Dec 2025 19:58:14 +0000
Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: orRbQbkmppQ7bpbbpok1VhEb1dFbvh/+L5yLTnMtei8=)
2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: E1N7tCSXkYyikP/pVQaGRW+aRkcNsE4Fu7zEh2kYF1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:58:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931
Validity
Not Before: Dec 4 19:58:14 2025 GMT
Not After : Dec 11 19:58:14 2025 GMT
Subject: CN=6931e7d6-d11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:ff:b7:fe:b1:68:4b:34:3f:f5:74:d7:1c:
88:bd:cd:bb:1f:09:5e:6c:79:15:be:e1:ae:4d:00:
17:38:2e:86:8a:dc:ce:95:8e:df:fa:06:65:97:c5:
0f:28:37:87:12:ca:25:94:07:c6:e6:d8:ff:ad:af:
c4:f7:44:1c:a9:67:74:da:e6:25:b8:32:36:ef:97:
df:99:b2:6f:c4:99:ff:df:33:c3:62:bc:99:62:7b:
b8:79:bc:dc:26:99:63:81:e9:5b:ee:cc:0c:94:0b:
0d:ef:be:6a:7f:02:9f:04:f3:b0:b4:42:0d:37:e9:
49:87:6a:8c:a6:78:c9:a2:8f:81:fd:9f:ea:8a:11:
58:a5:b3:0b:b7:87:71:e4:6e:80:b2:0c:08:ac:4a:
01:97:aa:ec:87:aa:ae:85:3f:dc:7f:b2:2f:10:44:
52:07:e2:0e:ed:7f:cd:14:80:af:c0:12:6f:b5:fd:
6a:e9:1c:24:15:d9:f9:39:98:ef:bd:5e:46:14:2d:
a9:38:23:dc:d0:df:35:1e:35:f9:69:d3:fd:41:b4:
75:ce:2d:80:43:6d:1b:16:5f:ce:7d:c3:0d:db:87:
e5:06:8b:0f:7d:96:38:05:db:90:23:0f:9e:57:ff:
5f:1e:5f:ea:88:a3:2d:05:5d:a8:79:ee:18:97:73:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:BD:32:E9:CE:93:B6:2B:9C:93:2D:DB:14:0B:87:24:AF:24:49
X509v3 Authority Key Identifier:
keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:a7:c6:83:8e:a4:c3:c1:00:8c:03:fb:06:5f:ee:f0:b3:
8e:e1:44:47:4a:1d:a3:8c:c5:a2:2e:49:87:78:e1:a6:b3:ff:
c6:f8:81:61:ca:ba:e1:5f:c9:98:6d:5d:5f:b0:98:e8:7b:f7:
1d:e8:fe:c1:04:cd:60:86:bc:21:a4:26:2e:e6:67:7e:b2:c6:
12:ad:98:bc:76:c0:a7:6e:65:f7:58:57:f1:a5:6a:9a:97:23:
24:6b:b7:ad:65:84:79:e2:36:f1:8f:91:af:d2:04:fa:3c:1f:
16:e7:c0:35:4b:24:95:ae:f6:b0:af:a7:1e:71:ac:ae:16:05:
23:64:40:99:d7:77:aa:ad:d1:9f:98:71:c1:18:02:ee:85:13:
3f:58:c6:cc:da:8c:1f:22:17:45:76:ee:07:30:1a:3f:f5:a7:
c2:30:8f:08:dc:66:ea:05:4d:ee:f9:60:4b:85:44:c0:b6:d6:
ce:3a:cb:30:c7:34:a1:86:19:69:f7:97:6d:78:db:1a:d0:fb:
30:23:87:df:14:1f:01:24:82:a4:77:cd:cf:7d:34:dd:e7:a8:
4f:3f:a1:90:fa:4d:49:23:94:08:51:b4:11:14:d2:75:79:88:
6c:d6:cd:50:56:ca:5a:04:c4:cf:e7:a6:7e:2e:21:01:d0:01:
35:68:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:50:52 2025 by rpki-client