This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
File: kTOsvs_e7PTaOiIigng09bc6-qc.mft (raw, json)
Hash identifier: ZBB7NLezCct6uIb+8xa2PXnsuFG666irf5hjjQuo+1k=
Subject key identifier: 5A:D3:D5:45:38:19:32:13:23:ED:4E:05:55:1E:77:05:60:C7:87:28
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Certificate issuer: /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial: 0116
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
Manifest number: 0114
Signing time: Fri 05 Dec 2025 02:54:17 +0000
Manifest this update: Fri 05 Dec 2025 02:54:16 +0000
Manifest next update: Fri 12 Dec 2025 02:54:16 +0000
Files and hashes: 1: kTOsvs_e7PTaOiIigng09bc6-qc.crl (hash: Fh1Y4o35fRNP7EoA7IbCl2Po8HpVzUmNQIDQ5o+ld7c=)
2: 6B9D491C379A11F0B3AC7740C4F9AE02.roa (hash: RLph3rOI+XvGrIXc+VEb/mig9QwsOBw+jIRI25aGTLo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278 (0x116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Validity
Not Before: Dec 5 02:54:16 2025 GMT
Not After : Dec 12 02:54:16 2025 GMT
Subject: CN=69324959-cf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:41:d5:f0:b7:26:00:be:04:99:73:72:be:
4b:be:03:7a:82:89:36:5c:b6:f5:87:4e:9a:cf:42:
b3:b8:2b:e1:47:25:6a:b6:83:11:49:a4:26:81:8f:
6e:1e:5c:b6:be:46:de:c1:71:a4:4f:47:aa:c8:18:
97:f0:24:a6:05:19:86:4c:21:2f:c0:ce:c5:7b:32:
31:9e:0c:31:2b:21:f3:e7:c7:63:6b:61:8f:ec:97:
1a:69:d4:f1:c5:c1:23:97:2e:d3:46:14:8a:a0:db:
1d:81:9c:dc:d0:e9:27:97:d3:d3:75:3d:c8:15:41:
b1:4d:b0:d2:f3:fd:33:50:f5:f2:1e:05:11:d1:e0:
80:36:ac:6a:58:1e:3f:ca:5e:9f:68:b7:15:60:fa:
7a:68:f6:22:f5:b3:70:c7:f2:18:15:cc:a1:a8:4e:
5c:50:9b:ce:b9:3f:f1:95:c5:28:7a:f4:ab:29:94:
61:b7:5d:27:b0:79:e3:fa:e1:54:08:06:46:71:92:
7a:2b:bf:7d:8c:31:5d:7f:2a:5c:2a:78:a9:4f:78:
48:95:e3:60:28:41:89:06:15:dd:de:fe:a0:f0:7d:
c3:77:f8:7b:96:90:82:80:3f:8e:ad:00:fe:da:54:
58:0b:9a:44:52:2c:88:b3:b8:e6:05:33:fc:d3:a3:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D3:D5:45:38:19:32:13:23:ED:4E:05:55:1E:77:05:60:C7:87:28
X509v3 Authority Key Identifier:
keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:5e:4f:83:c2:a7:84:bc:39:22:47:22:e4:b3:28:6b:62:
fd:6d:f3:0e:de:1d:2c:f5:54:48:91:65:c5:48:0a:69:90:43:
3e:3d:f0:28:19:91:ac:d7:09:7f:b9:16:05:f3:d3:ba:f3:c8:
81:f8:07:7b:61:60:e9:d1:75:a9:51:33:b3:4e:5e:43:60:7a:
92:67:ab:b1:53:57:2d:ae:9b:4d:fd:4b:ff:7f:bc:fd:86:67:
8d:2f:c8:b9:5a:85:45:be:a9:ce:cd:55:d8:01:04:e4:62:30:
88:4d:07:dc:f6:fd:9c:9f:78:ec:55:00:00:e8:23:b4:dc:b3:
59:ae:c9:e8:50:8c:9c:1d:4b:18:6c:0c:36:d5:3a:f5:b3:3b:
87:68:f9:c1:fe:c9:6c:0d:b7:21:af:ea:4a:fe:5a:cd:9e:18:
c7:2e:b1:68:52:29:37:63:7f:b9:49:46:32:b0:f5:9e:bc:b7:
82:bd:36:02:41:85:49:1f:ff:a8:28:cc:a8:0b:e6:9d:83:07:
31:87:5f:48:27:07:f9:1c:af:c2:4f:7d:c4:80:d7:38:85:e0:
d5:0d:ae:a4:14:3d:20:33:bc:5c:bd:93:14:77:38:fe:3a:d6:
2f:a5:43:e7:24:34:68:d7:95:19:ab:32:f2:c3:d7:14:7f:e0:
95:b7:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:12:16 2025 by rpki-client