This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json)
Hash identifier: EuepJ7EMzNQZTMZFzKXLiyXaIoBbpezu7ER92Vynp3s=
Subject key identifier: B4:10:9F:DE:CD:FA:8C:36:72:BC:13:51:10:3D:21:95:D6:D3:2D:20
Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Certificate serial: 1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
Manifest number: 1B
Signing time: Fri 05 Dec 2025 05:40:31 +0000
Manifest this update: Fri 05 Dec 2025 05:40:31 +0000
Manifest next update: Fri 12 Dec 2025 05:40:31 +0000
Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: XATX2BSU1iyGxuspe/4x1VPq3SztNcTxXjtSVVOtGzw=)
2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: bkWwsW8ZSkcQ9LnA3de1DycHNu5Ebnxo4aw0ZyQ67BE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871
Validity
Not Before: Dec 5 05:40:31 2025 GMT
Not After : Dec 12 05:40:31 2025 GMT
Subject: CN=6932704f-1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:d1:13:2a:96:85:fe:c9:18:36:2b:e2:81:
ab:f8:62:48:a3:8f:08:b2:5e:35:61:10:06:29:dd:
b9:e0:60:a0:55:44:cd:38:5c:3f:a4:ac:54:08:5b:
7b:bc:ef:77:05:a4:ca:05:e5:81:14:18:dc:51:bc:
4b:e4:58:31:5b:e7:a7:09:de:22:be:a5:ca:fd:65:
e5:ad:72:bc:76:eb:57:59:be:19:5c:88:db:3c:4c:
b2:1b:0b:9a:e2:4d:e1:89:52:e3:8a:e8:8c:fe:4b:
e8:ab:27:96:f9:e8:fe:9f:40:75:07:12:9a:bd:8e:
16:40:10:f8:da:c0:f5:9b:cd:3c:e6:a2:a9:48:a3:
65:66:ca:a1:fb:bf:88:d7:d2:f1:0c:fc:b4:c4:8b:
f6:9b:61:88:b1:61:2b:b7:65:10:05:4a:30:5c:76:
fb:2c:9f:46:24:a9:93:02:fa:7d:fe:b8:20:f1:bb:
ea:ad:be:e9:21:06:1e:05:64:74:cd:34:fb:60:25:
49:73:f6:e6:bd:84:75:69:f1:69:95:3e:4d:02:73:
d1:fa:ce:7b:e4:b5:bb:80:6f:f7:d2:73:ef:cc:93:
b1:fc:62:26:ea:03:f2:be:2c:94:62:63:9d:2a:0d:
2e:7a:f2:d3:fd:52:6a:e6:e9:3f:52:fc:01:37:86:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:9F:DE:CD:FA:8C:36:72:BC:13:51:10:3D:21:95:D6:D3:2D:20
X509v3 Authority Key Identifier:
keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:9b:1d:b6:00:8f:bd:c1:69:cd:bf:40:7c:de:56:0a:fd:e9:
61:3c:19:53:f2:4d:f4:de:34:89:ec:87:51:46:ed:c3:b9:19:
47:dc:2f:d9:89:1f:ed:96:41:e0:83:c8:cc:19:ea:7b:ab:7c:
03:be:59:de:83:e3:85:79:ea:b6:9a:b5:d3:ca:0d:80:d0:7f:
13:f0:a0:34:1f:fa:c9:ff:a2:67:7b:ff:e0:c8:d0:73:7a:59:
b5:53:e9:bb:e4:cb:a8:fe:98:1b:17:d9:9b:38:70:09:74:8e:
5a:d0:89:6d:0b:f6:f1:10:55:c9:be:45:c6:8c:f4:4a:a7:76:
0f:84:04:02:69:ef:2d:bb:54:9c:53:fb:16:5f:c7:ed:6a:2d:
92:6f:04:55:06:9b:f0:c7:9f:da:9f:53:06:70:2e:41:1e:40:
15:db:f4:d5:3f:52:14:0d:90:64:85:f8:26:e5:7c:65:bd:3e:
f8:1b:50:66:b3:51:3f:4e:46:3c:8f:6e:3e:e4:65:8e:da:da:
99:b5:9f:70:0d:23:ed:8b:40:85:f6:9a:f4:38:ee:52:df:ad:
ec:40:7c:47:35:41:68:cd:e8:a4:54:0a:4b:92:ce:a5:50:f8:
f3:b2:1e:4c:e7:88:db:f2:74:d7:b3:18:b4:05:2f:4a:d0:11:
2a:66:bc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:19:53 2025 by rpki-client