This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier: 5Pyqb6nacqpqYB03GKR1mU6odGSXvviUhhfwLEoXaEM=
Subject key identifier: 55:44:04:C6:8D:23:B8:C8:E4:43:8C:4C:42:8D:1B:1B:91:E4:13:05
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial: 0230
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number: 0220
Signing time: Fri 05 Dec 2025 00:30:01 +0000
Manifest this update: Fri 05 Dec 2025 00:30:01 +0000
Manifest next update: Fri 12 Dec 2025 00:30:01 +0000
Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: tbnwkDXDX2EocILOc84jj3K179kw2gmGYltpkfopjQ4=)
2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: V+A9+3TWv6PDJfONkiYGSLwYtuk75uf9VZIwDYRykJo=)
3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: 8XCBqH3UeeuDPYwwqRpO+AoZOfKPyRMZ7ican69IhKU=)
4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: GzbxM9C1MjlQY8/LbZ9rlFb8KN037sgMyJVoACbdjQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Validity
Not Before: Dec 5 00:30:01 2025 GMT
Not After : Dec 12 00:30:01 2025 GMT
Subject: CN=69322789-f5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1d:f5:8e:e7:1c:28:c0:13:8e:20:69:ad:a8:
d6:9c:7a:c7:ab:2f:68:13:d7:b8:57:24:de:ee:5a:
97:12:40:68:90:93:f1:ee:80:09:3f:8e:b7:00:95:
4c:17:6c:85:ac:cd:a0:80:97:ee:1e:47:c1:6a:83:
2d:5e:81:ab:8e:8c:53:4f:1e:1a:29:b8:43:3c:6c:
fe:95:e3:6e:60:b8:02:c8:11:82:0f:cb:98:bf:c9:
d5:e6:1c:94:ce:83:92:d0:b9:5d:8f:b2:c2:c6:a2:
35:eb:c5:59:cf:01:cd:bd:d7:aa:be:57:b7:86:df:
f5:83:ef:ef:60:1c:ec:3c:1b:1e:3f:f2:ed:a9:eb:
a5:2e:16:24:d1:dc:a9:3a:5a:33:cf:27:09:2e:43:
63:13:b4:e4:31:52:14:fb:c3:9f:1f:e1:f5:e8:79:
81:3f:11:4f:22:79:cd:5a:2b:0b:80:33:8d:44:4a:
2e:19:78:fc:16:38:5f:85:1c:cf:bb:95:c3:47:1c:
1a:b2:6b:26:14:2c:1b:6f:c5:4b:58:52:ae:af:de:
44:45:d8:29:61:29:fd:29:a8:8f:58:bf:f7:d3:1a:
84:c2:43:e5:31:fc:eb:01:88:12:94:3e:59:38:05:
8b:49:2f:e8:35:fc:4d:58:29:d0:99:27:bd:ac:06:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:04:C6:8D:23:B8:C8:E4:43:8C:4C:42:8D:1B:1B:91:E4:13:05
X509v3 Authority Key Identifier:
keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:6d:83:db:3d:e9:d7:a4:ed:18:bc:7c:1e:54:80:e3:4d:b9:
48:f8:ba:67:0d:12:a5:f4:d5:a6:5a:e3:e9:63:71:af:70:b9:
36:27:f9:5f:5b:f2:69:7e:52:ce:f2:f2:7f:83:22:c2:95:0f:
89:30:3b:bc:5b:98:53:2a:fb:de:a3:d4:ee:70:4e:2f:34:d6:
2a:c6:f9:de:3c:52:38:d4:1f:57:a7:31:92:62:27:9b:bd:31:
9d:28:91:72:b5:e3:d6:65:82:16:e4:2a:f6:e4:b0:29:f4:11:
ef:89:9c:c2:83:6d:23:b3:de:00:e0:de:dc:b1:92:59:7c:d2:
26:b5:3c:c8:62:b3:c0:94:a2:28:7d:87:5e:c7:c4:76:df:41:
9b:d3:9e:31:3f:bf:d1:f6:ab:35:f6:6f:d6:04:95:e4:61:5f:
7c:d8:b8:2b:34:d6:aa:9d:eb:f2:28:b9:ce:d2:18:04:f1:5e:
72:75:3d:3f:64:79:73:00:a5:51:40:5c:df:d8:b1:8a:85:69:
1a:6d:c8:1c:df:e1:95:17:ca:54:17:91:c1:5a:e1:f2:7e:bf:
ab:5e:02:d5:95:e7:f7:9b:fe:67:38:44:e3:e4:fc:23:ec:39:
83:27:42:31:97:cb:26:fc:a1:62:f2:11:ca:f1:7e:60:af:e4:
80:36:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:50 2025 by rpki-client