This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier: sT+4pqJa7PT/XSTrd/IPiynTayIKKdm43KV8sRXIeDY=
Subject key identifier: AD:8E:5B:FD:20:AD:8F:79:07:78:73:C8:74:C9:E8:00:4E:52:35:14
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number: 76
Signing time: Fri 05 Dec 2025 04:48:36 +0000
Manifest this update: Fri 05 Dec 2025 04:48:36 +0000
Manifest next update: Fri 12 Dec 2025 04:48:36 +0000
Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: A/zPSezKX30B4yypu2mwxJmGCXtwGQU4Pc5gBeT8eww=)
2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: cj52P7EVA7EzNB+cRXY75TfIttWbZ7w7qirjXKEDn/Y=)
3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: UkjJv6j01kk67tAR7WvPOWkiQImQuY607Dwbp++ebI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Validity
Not Before: Dec 5 04:48:36 2025 GMT
Not After : Dec 12 04:48:36 2025 GMT
Subject: CN=69326424-f47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:53:81:17:aa:f5:6d:c2:70:eb:dd:60:7d:
fa:da:9b:6c:7c:85:99:fc:79:5c:1b:c2:b5:0a:61:
99:ca:b8:8e:5d:a8:9f:f8:94:51:f6:5f:ed:e9:13:
37:23:83:04:5d:4f:5b:82:7d:e0:d3:47:8e:5c:c4:
9c:d1:a6:02:22:cd:43:7f:76:37:8a:c4:73:5c:95:
40:d2:47:9e:c1:a9:58:0b:72:6b:d7:56:fb:bc:4f:
70:7f:55:cc:6a:33:2d:48:f1:69:e4:c0:4a:4a:5d:
0a:60:b6:2c:98:6e:e1:62:a1:59:b3:92:9a:d9:33:
85:37:8a:b1:d0:2d:f7:88:60:f2:e7:9a:e2:cc:2c:
0c:a0:0f:55:7c:d0:fd:46:0e:53:a0:9f:f2:f0:eb:
45:54:94:20:7c:72:12:86:31:9e:bc:58:4e:8a:fc:
28:e3:18:a9:6b:be:bf:ec:a7:80:30:8f:34:ec:8a:
1c:5a:77:ec:6d:e8:02:be:ee:c6:71:c9:39:c9:d2:
04:5d:04:51:63:40:2c:b8:65:22:8c:2b:03:a9:e0:
c7:d7:70:f7:d5:3a:1a:0d:27:e2:e4:de:b0:8a:8b:
4e:2d:53:58:7d:8c:d0:9f:c5:52:d3:e0:5d:f1:02:
8b:59:db:45:c2:c6:72:78:8f:ff:dc:78:34:24:ab:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:5B:FD:20:AD:8F:79:07:78:73:C8:74:C9:E8:00:4E:52:35:14
X509v3 Authority Key Identifier:
keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e0:b3:9b:db:26:92:82:1a:7c:ce:15:75:74:cd:98:d4:59:02:
51:9b:29:6a:a5:ad:22:06:c4:f4:56:b3:77:a5:c7:2d:71:7a:
96:73:5f:56:21:d7:d4:d5:71:0f:34:cb:8f:40:d6:34:f0:81:
7c:72:a3:7a:cf:1e:6e:48:9a:8e:75:c1:c2:5a:5d:3a:8d:cb:
16:e5:f7:68:86:dc:0c:bb:61:f7:3a:02:3a:04:22:0b:82:ec:
bf:8f:7e:51:0c:ea:a2:b7:ba:b8:3e:b5:15:e1:6e:fa:23:b3:
54:8b:6b:a8:fe:58:98:ce:39:91:61:3f:6b:bd:a0:6c:6d:30:
0e:6a:53:ca:ba:8f:f6:5f:02:6a:c6:18:30:0d:ca:49:5a:30:
ab:9d:6c:f8:f1:dc:99:7e:92:9b:9e:93:1d:bb:2c:fc:f9:84:
51:08:82:8f:bc:56:e7:e5:8f:95:66:90:f3:9c:ba:02:09:e4:
e3:bd:b8:e5:06:57:e3:2f:48:2c:28:bf:4d:67:08:d3:db:1d:
b5:df:72:c6:80:31:de:db:99:49:a8:02:2f:be:85:cd:dc:19:
7e:5a:4c:5e:40:c4:01:c1:88:0b:4b:ff:9f:21:5f:3c:b9:b9:
5d:8b:f2:38:05:9a:7f:a4:b0:ff:93:d3:d6:5f:81:e8:63:16:
fe:2f:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:25:03 2025 by rpki-client