This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
File: o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft (raw, json)
Hash identifier: UPOjaBH+9Xf7hB0a5SN8Sy29RVxg7iLC25A9qLpqECo=
Subject key identifier: D2:06:F9:CD:A4:CD:FD:9E:E7:FB:A9:CB:78:32:1A:AE:6C:DB:F5:D8
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Certificate issuer: /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial: 9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
Manifest number: 98
Signing time: Fri 05 Dec 2025 04:22:26 +0000
Manifest this update: Fri 05 Dec 2025 04:22:25 +0000
Manifest next update: Fri 12 Dec 2025 04:22:25 +0000
Files and hashes: 1: o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl (hash: UPBC/ScB6MbCwlih/AjKcw3CH8Tj6bQNbtA7EP/4VVA=)
2: 10800248E9C711EFA1589312C4F9AE02.roa (hash: NgHWuWasRdq7/Tb6jtbOAPkZk5G59CnEADx3vts0M7Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154 (0x9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Validity
Not Before: Dec 5 04:22:25 2025 GMT
Not After : Dec 12 04:22:25 2025 GMT
Subject: CN=69325e02-f770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:e5:a1:42:65:6d:3d:59:73:95:17:a8:44:
91:18:33:09:e5:f9:2e:b0:33:c2:c9:c7:a5:25:61:
2d:5b:a4:9d:a8:ad:06:0a:7e:73:b3:01:ea:04:d4:
f2:f6:0e:d2:2b:93:26:7b:d2:c6:c7:f9:67:5f:bc:
48:c5:04:30:83:18:30:ac:46:b5:5e:6d:8e:bd:fa:
f7:44:02:f7:20:90:61:6d:46:05:88:31:42:46:fa:
e9:d2:b8:09:2e:62:0e:dd:08:b4:2e:84:6c:a7:fc:
50:4d:e6:25:be:9f:ae:ee:78:83:c8:75:7b:a0:0e:
8a:b8:0f:b0:b3:c0:d3:5b:2e:78:bb:ae:bc:37:14:
41:ec:5c:6c:ea:c0:ce:2e:88:b5:de:48:0c:2a:13:
26:57:95:a4:cc:50:f6:6e:f1:12:2f:fc:a3:7c:e4:
df:53:48:71:d7:79:d9:ff:1f:99:93:4d:10:d6:52:
84:44:0c:cb:8d:1f:05:cc:a9:10:73:92:80:84:e5:
9b:46:57:61:c9:ed:81:9b:71:a6:d1:e2:11:20:3b:
ac:02:f0:be:48:6e:db:e8:f7:52:ba:ed:9e:2f:13:
0a:8a:e8:f9:32:06:f7:5e:b0:cf:b2:c1:07:d1:d6:
4e:2d:b1:eb:b4:09:da:ba:db:ca:34:da:87:b6:f4:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:F9:CD:A4:CD:FD:9E:E7:FB:A9:CB:78:32:1A:AE:6C:DB:F5:D8
X509v3 Authority Key Identifier:
keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:1c:c6:17:18:17:9d:dc:60:2b:03:48:3b:80:49:42:16:10:
88:94:1a:1f:34:c9:ee:eb:35:96:c0:21:ca:54:12:cc:18:7c:
b3:ec:18:6b:44:18:cc:6c:6b:80:e9:af:3c:10:15:1e:34:3d:
5b:f6:08:fe:ed:25:c4:eb:92:cd:22:3d:5f:e8:0d:95:ad:44:
8d:f3:f1:79:8d:86:ca:d3:84:74:88:63:a3:c4:c2:f3:66:6f:
5f:98:23:04:fb:3a:ac:fc:e1:fd:26:b2:90:c5:bc:f0:e6:53:
7c:cc:15:46:2d:cf:82:53:ca:d9:b1:5b:01:33:8b:73:c2:b1:
6c:91:0c:06:9d:25:9a:26:c8:69:52:27:29:32:8b:4e:14:c1:
58:51:5b:b9:bb:fe:f4:2a:eb:0f:18:9d:f2:90:cf:2d:d7:38:
43:59:8a:1a:66:d7:48:25:e5:68:a4:fa:db:ff:5b:14:9d:c2:
97:8b:10:45:7b:ed:1f:ab:c9:83:91:7d:ef:7b:14:e9:73:df:
9d:34:3f:9d:92:cb:df:1d:bb:4c:9e:f0:6f:1c:97:42:3e:eb:
79:24:cb:b0:0d:18:f9:09:8f:79:08:05:c0:9a:58:83:34:c9:
dd:a0:6e:ae:aa:3a:d2:0b:8d:da:ae:91:6d:e3:2b:bf:03:b6:
78:66:e9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:33:26 2025 by rpki-client