This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier: uTkpvSjP/DSy/v8RYW6YMP2t+DZvHSSeIBSH/BZPnxg=
Subject key identifier: DB:CB:2E:57:A8:2F:D5:27:85:E1:D1:A3:8D:27:F1:A5:EF:F4:06:C4
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number: 0B
Signing time: Fri 05 Dec 2025 05:48:36 +0000
Manifest this update: Fri 05 Dec 2025 05:48:36 +0000
Manifest next update: Fri 12 Dec 2025 05:48:36 +0000
Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: HJX+Emic9+iAZt3Em9biEsoCytsvmFvlfqJMACYx74A=)
2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: LJ7UDn6IIkcbGD6zUISagJkWCJY/fIVXp/q52OKMMBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Validity
Not Before: Dec 5 05:48:36 2025 GMT
Not After : Dec 12 05:48:36 2025 GMT
Subject: CN=69327234-7e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:7e:00:d1:53:f0:09:c1:83:85:10:ec:1e:
af:5a:3b:3e:d7:48:d6:da:09:47:3b:77:36:84:17:
7e:9a:b0:08:dd:8e:5b:a8:c6:85:a1:ad:1d:cb:e3:
29:d9:f7:3a:6d:f8:4e:2a:97:1c:8a:80:d0:ef:81:
4a:96:69:f0:91:d6:74:e0:29:95:24:da:35:81:5f:
e5:e9:cd:1e:9b:e3:04:b5:ea:cd:4c:03:af:dd:77:
09:99:1d:23:47:42:46:b8:ba:3a:be:57:8d:87:a8:
a8:d9:5d:54:bc:f5:14:b4:5a:99:49:41:5d:91:88:
e1:bb:b1:5c:44:b1:76:3c:04:e3:8f:cb:f1:3e:13:
6e:4a:f0:1a:65:b5:d5:e6:7b:cb:39:bd:65:cd:4a:
a7:f2:ce:9b:c2:cd:2a:d6:3e:5a:c8:f9:43:b8:d3:
81:95:0a:82:d1:bc:de:d2:b4:2b:19:b2:2b:c2:c2:
20:0a:22:c9:cd:3e:e8:44:9d:f5:0e:41:32:38:0d:
f2:05:f4:85:45:ba:0c:a0:45:fb:40:79:6c:a2:07:
a4:b9:0f:01:49:0c:bc:33:9f:19:56:cb:0d:68:25:
da:32:09:5d:1e:bb:07:99:a7:cc:a3:00:e0:6a:54:
8a:13:ca:54:f8:ff:86:1b:21:d7:a1:4d:81:76:43:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CB:2E:57:A8:2F:D5:27:85:E1:D1:A3:8D:27:F1:A5:EF:F4:06:C4
X509v3 Authority Key Identifier:
keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:00:10:24:15:2a:dc:ff:c4:36:aa:05:8f:bd:ce:a2:df:64:
52:0a:16:75:5f:72:ec:a8:e4:6c:0d:c1:4e:87:d9:04:49:f1:
00:61:ce:76:cf:35:15:26:c5:fb:3b:37:6e:ec:94:5b:2b:64:
96:32:26:68:0c:79:0f:c6:07:5c:c9:95:af:a3:20:e7:e7:ac:
45:6b:6f:42:14:c8:11:6e:87:cf:a1:03:ed:45:40:83:40:3f:
73:a2:71:04:d6:c0:cc:d3:f5:99:82:b2:cc:7b:00:be:9c:3f:
f2:f1:a8:f5:50:53:45:16:75:7b:f5:bb:40:16:72:10:3e:03:
dd:35:e1:47:dc:20:bc:08:1f:e1:b8:10:a3:9c:32:ba:08:c8:
3f:99:6e:29:4b:53:0d:b3:a4:b8:58:bb:31:4b:ad:b5:e7:26:
dd:5b:b8:00:31:a3:03:94:dd:81:e2:84:35:d4:c6:b9:38:c5:
6b:6a:93:f8:e0:90:02:be:74:bc:03:35:f7:b3:d1:a5:0b:37:
84:65:95:53:b9:ca:23:dc:2a:ed:ea:5e:6b:14:54:96:81:94:
31:3d:7e:73:9b:73:88:9e:d1:ed:95:12:4d:c1:fa:b8:88:74:
0c:f8:a5:f1:de:65:61:6a:f6:24:e6:fc:df:da:cc:53:2e:b3:
c6:4d:04:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:23:58 2025 by rpki-client