This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier: rhLrwLqF/aX6+YQz6FyBj0Se7e5tNp4b7miuo9kqFOM=
Subject key identifier: D0:95:D8:C1:39:F8:CE:B4:84:21:E1:E0:D8:32:3C:09:B7:AE:65:2C
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number: 0157
Signing time: Fri 05 Dec 2025 02:17:59 +0000
Manifest this update: Fri 05 Dec 2025 02:17:59 +0000
Manifest next update: Fri 12 Dec 2025 02:17:59 +0000
Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: PexF8gRtFUDGdXjSdOMOJuxlygNKVN+psxcOCu852IY=)
2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Validity
Not Before: Dec 5 02:17:59 2025 GMT
Not After : Dec 12 02:17:59 2025 GMT
Subject: CN=693240d7-fcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e2:da:ae:f0:27:d2:ab:e5:58:d1:44:e7:46:
62:b8:c8:9a:81:e7:c5:9a:84:a5:16:31:c7:51:00:
97:9c:39:44:ed:5b:f2:49:47:1c:26:f9:1d:82:68:
76:c3:46:2b:08:92:ef:3f:5d:7f:3a:d1:36:ed:1e:
4c:a2:dc:63:78:82:4a:6c:9f:83:5a:9b:f0:d0:29:
63:f7:df:61:b3:d5:07:e8:71:66:4f:93:2e:92:05:
46:21:79:b8:76:f1:c6:c9:43:e1:d1:8a:35:f0:00:
79:14:78:08:d4:03:e0:dd:d8:31:81:ed:e2:21:a6:
5a:a4:1c:58:93:86:70:1a:6d:3f:c0:29:13:b2:90:
53:41:62:08:d6:01:59:a7:b2:1d:a1:80:48:31:62:
c2:6d:fe:eb:3e:e5:71:f2:22:37:87:58:92:e3:28:
5e:1c:87:61:f6:6a:3f:11:58:99:df:e2:8c:c9:96:
38:77:19:03:d9:8d:f6:40:7e:0e:a9:22:39:21:18:
cf:83:77:1a:64:e7:0a:f7:12:ca:fe:c8:92:f4:70:
6f:29:22:63:52:71:2c:dc:32:79:b4:66:b9:40:54:
0f:0e:73:6b:c5:75:7c:43:21:c1:cd:ff:ab:e0:ce:
76:29:fd:d2:9b:c7:48:55:d1:e2:84:70:5e:04:f5:
d8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:D8:C1:39:F8:CE:B4:84:21:E1:E0:D8:32:3C:09:B7:AE:65:2C
X509v3 Authority Key Identifier:
keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:0f:23:d4:0d:b3:9a:a8:49:1e:4c:81:4b:cf:48:c0:64:9e:
5a:3b:99:3f:b4:d4:3a:01:60:1e:c2:b4:92:e4:04:dc:46:3e:
6e:3a:bf:6e:71:96:8a:cf:25:e0:0f:c9:d4:93:11:0b:2d:af:
04:02:34:73:5e:97:61:c6:e9:6a:bf:31:91:17:9a:d2:1f:b9:
5a:3c:32:e1:0e:ae:26:52:03:4d:92:d9:ab:dd:b9:00:bc:e8:
e7:30:dc:cd:00:7d:d4:cf:61:e0:18:7b:e1:d4:4a:e3:b3:be:
53:47:4c:32:f0:35:33:23:60:90:01:d8:f2:70:c0:2f:b6:92:
f9:a1:d4:4a:84:9d:86:77:b5:e9:6f:c0:00:a1:e5:87:67:fb:
07:48:c7:48:62:f9:6e:15:41:25:44:54:70:3e:db:82:db:2b:
de:53:27:ea:fa:b2:9d:f4:35:cb:4a:3f:a9:78:28:3c:eb:83:
69:3e:62:28:e9:87:02:5b:fa:ea:06:8e:c3:47:51:8c:00:cc:
1b:56:75:2d:2f:34:d6:45:c4:2b:b4:82:78:40:88:dd:da:13:
f8:25:7e:f2:a7:54:38:4d:3f:95:d0:df:cf:e1:cb:06:b4:4b:
86:28:99:b6:27:70:2b:6a:ad:b9:f6:39:4d:02:f3:46:7a:b0:
5e:6d:bc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:09 2025 by rpki-client