This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
File: fJ9yIp7REllMdyLTwhtRBeKfxIo.mft (raw, json)
Hash identifier: v2SlTyGKFiFz8CQXpRhgXRIKrwcPEbrxEx+2i5bPwNo=
Subject key identifier: AA:AF:72:30:75:C7:68:8B:EC:41:4B:37:88:E4:C9:B1:E2:D6:E0:57
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial: 01D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
Manifest number: 01CA
Signing time: Fri 05 Dec 2025 01:14:41 +0000
Manifest this update: Fri 05 Dec 2025 01:14:40 +0000
Manifest next update: Fri 12 Dec 2025 01:14:40 +0000
Files and hashes: 1: fJ9yIp7REllMdyLTwhtRBeKfxIo.crl (hash: 3BYRLjxEQbSBBnVowlvnG0AkkG7ZwuUyNtlOEvtUqo8=)
2: 0D99319006F011EFA8C8D445C4F9AE02.roa (hash: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77AD, serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Validity
Not Before: Dec 5 01:14:40 2025 GMT
Not After : Dec 12 01:14:40 2025 GMT
Subject: CN=69323200-6c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:db:95:49:a6:3b:8e:43:6f:f5:13:09:86:
74:e4:b2:10:25:43:82:ee:08:7b:4a:49:ae:54:11:
d0:eb:42:c8:0d:0a:e5:c1:58:f7:42:d9:d3:56:2c:
33:57:ee:13:ee:52:a7:05:22:09:a1:0c:5a:73:9c:
99:a5:62:94:ed:c5:d2:a4:cf:b8:f8:63:41:50:e5:
ae:4e:3c:4d:f9:61:ab:0f:ea:b4:c5:3d:47:88:4c:
c2:7e:34:5c:4e:2e:2d:fe:4e:8c:98:7c:77:ad:f5:
e1:ee:09:54:47:d4:eb:60:60:45:d4:a0:2d:e6:44:
72:c3:5c:49:08:02:46:1b:cb:12:b2:fb:a8:85:fa:
95:d1:39:cf:f5:ae:40:43:21:4f:d3:a4:72:73:6f:
ce:5e:bd:65:ca:78:02:c2:e9:31:ca:cc:bb:16:01:
97:b9:41:83:3e:20:96:08:1c:db:bd:8f:8d:ab:c7:
86:01:fa:a6:8d:bf:e6:93:d3:80:e8:09:9b:15:ba:
56:15:7e:4f:5d:63:d0:e3:5e:3b:8b:3b:eb:c5:38:
66:94:2d:7f:1f:88:23:4a:87:18:40:eb:8b:e9:fc:
89:63:55:52:43:27:11:b4:61:51:4a:05:b7:fd:c7:
13:13:54:50:62:68:80:f2:f6:07:51:cd:01:9a:11:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:72:30:75:C7:68:8B:EC:41:4B:37:88:E4:C9:B1:E2:D6:E0:57
X509v3 Authority Key Identifier:
keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:74:0a:7c:d4:29:ea:12:4f:0b:a4:b7:ee:a1:32:11:21:bc:
61:d9:ac:5d:44:e8:06:79:be:a2:4f:f9:10:a0:c2:9b:83:d1:
71:e7:aa:08:fa:52:08:d7:ce:c5:60:b9:98:3a:f2:03:ec:4c:
ea:45:ce:66:63:fc:da:6d:86:04:54:b5:34:b1:4f:5a:05:fb:
ce:3f:6e:11:2c:fa:28:c2:ce:46:da:6c:74:f1:78:4c:b5:52:
ba:a9:ca:7b:c6:10:04:54:e4:e8:59:c8:ee:20:b5:13:a6:e8:
53:50:5c:28:00:3b:4e:fd:e8:20:e4:69:63:4f:1e:7c:fa:83:
9f:49:8f:d5:d7:67:10:a7:b2:a1:ac:ae:fd:82:f3:d9:1c:eb:
3d:7a:6d:27:85:65:2e:59:ee:f9:ef:59:04:40:d9:db:52:bf:
d9:58:0c:cd:c7:83:da:be:7d:c0:ab:7e:b6:cb:a2:ae:10:a4:
1e:f7:78:52:ef:29:d1:d9:91:6a:dc:42:a7:78:b5:07:56:a8:
fb:e0:9f:82:09:2d:4c:2a:ef:46:5b:18:59:a2:52:85:71:a0:
9d:2d:e9:0f:e8:2c:3c:55:c9:e1:60:7d:25:e5:83:4d:25:ce:
96:e1:9f:27:86:21:91:af:61:ae:29:e9:2b:f9:f9:68:b4:68:
90:c6:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:51 2025 by rpki-client