This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
File: MAeESqoZm6nIjWQEw9_oduHjn8Y.mft (raw, json)
Hash identifier: 07WWFcBgH1zRA3/+XMU0cn4RHX+3fHOLB3mbTJmBJ6A=
Subject key identifier: 33:5B:78:33:F0:CC:48:F8:36:BC:72:65:D8:32:F7:A2:E8:68:BF:5F
Authority key identifier: 30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
Certificate issuer: /CN=A91E46B1/serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Certificate serial: 14FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
Manifest number: 14E9
Signing time: Wed 24 Dec 2025 16:36:52 +0000
Manifest this update: Wed 24 Dec 2025 16:36:51 +0000
Manifest next update: Wed 31 Dec 2025 16:36:51 +0000
Files and hashes: 1: MAeESqoZm6nIjWQEw9_oduHjn8Y.crl (hash: L/a+ldDactPpcVnroh8Or/G5Bx0OWrJDqmxQF2izWfg=)
2: D0D94718CB8111E89EDE697DC4F9AE02.roa (hash: fzmHVxiTK7D8PG5yindwGef8+csbEOVTRn9jS+V30ac=)
3: 391E6EDE679B11E886728650C4F9AE02.roa (hash: iYa29kjN+8nhwT/98WnKo7Pi7A7FL3PggbbxiD2rxqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5373 (0x14fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E46B1, serialNumber=3007844AAA199BA9C88D6404C3DFE876E1E39FC6
Validity
Not Before: Dec 24 16:36:51 2025 GMT
Not After : Dec 31 16:36:51 2025 GMT
Subject: CN=694c16a4-382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:c8:7f:88:d1:48:dd:11:f4:5c:9f:8e:6c:
bb:83:98:b3:ef:68:28:c3:84:86:fe:4d:20:c2:b6:
1e:ed:14:bb:6f:8a:0d:f5:37:2a:c3:b6:4d:63:91:
36:4e:12:f2:f3:13:b7:98:52:d0:9b:d2:78:95:c0:
d0:07:01:5d:b3:1d:82:3d:b9:00:77:b0:4f:14:83:
dd:48:4f:fd:60:44:e3:2b:fe:c1:42:a6:b7:62:44:
a6:ac:f6:66:14:81:c1:7c:15:0a:2a:a8:9d:1a:95:
09:02:cd:de:1e:41:ae:d5:6e:dc:aa:10:ea:15:a3:
8d:9b:28:d5:67:49:44:d7:a0:05:2e:97:48:4d:71:
b8:1d:c1:84:14:b4:bb:d5:38:32:f0:54:e6:82:34:
f7:90:e7:ee:6d:b2:8c:f9:a0:96:73:fc:f7:17:7e:
93:d5:52:b6:c7:76:d3:88:a5:fb:de:ba:59:42:5a:
d1:a2:46:41:cb:c1:87:67:4b:62:53:15:4e:ae:8e:
42:50:db:f2:d9:c3:83:83:f8:23:c5:23:76:3a:cb:
d0:3d:13:bd:3f:e4:c4:3c:2a:7b:56:57:69:ed:d5:
9c:74:af:87:b6:82:3b:29:13:19:eb:77:49:ce:56:
a1:2e:ad:d1:2f:99:c5:11:bd:f1:dd:00:20:ea:e0:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5B:78:33:F0:CC:48:F8:36:BC:72:65:D8:32:F7:A2:E8:68:BF:5F
X509v3 Authority Key Identifier:
keyid:30:07:84:4A:AA:19:9B:A9:C8:8D:64:04:C3:DF:E8:76:E1:E3:9F:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MAeESqoZm6nIjWQEw9_oduHjn8Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E46B1/F00DF366679711E8A7891C48C4F9AE02/MAeESqoZm6nIjWQEw9_oduHjn8Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b3:5c:6d:a9:6b:3d:6c:05:29:37:51:be:f1:e1:07:84:95:
a3:7c:c7:db:c7:5c:3e:08:b4:3f:36:de:2f:40:15:b8:4e:c2:
00:6f:19:87:51:29:dc:70:10:8d:5a:e4:ef:3f:8f:70:0a:9f:
49:a2:74:5a:6a:9c:1e:87:ca:e9:85:fc:a0:dd:44:08:97:a8:
f2:f0:2e:d0:c5:5a:dd:1c:6e:2d:f3:18:41:2a:2b:08:0d:c2:
0e:38:77:9a:30:fe:63:66:28:85:d1:f1:80:89:f6:f2:21:f6:
3e:da:21:c2:28:b3:6c:b3:b3:4d:e9:cc:18:d5:72:73:76:eb:
1f:04:f3:88:43:bf:0a:94:3f:cb:9a:ec:4e:b9:5d:e6:d0:43:
73:26:76:ac:79:19:9a:be:47:a8:7f:6e:4d:6a:b6:96:f3:ba:
62:64:e9:29:a5:2a:1b:25:b8:c3:cf:8d:4f:77:26:49:14:3b:
29:2c:2c:09:53:dd:4e:20:61:05:39:d8:5a:fa:36:3e:fd:44:
85:a3:7e:1d:51:ec:6f:e2:7c:f4:e7:4c:af:f0:97:0c:bc:5e:
10:f8:ae:35:4a:9f:ce:8b:37:bc:de:6e:9b:8a:ce:06:ec:99:
69:1b:10:af:56:dd:56:2e:74:db:d7:b5:c3:cb:f0:58:c6:e7:
a1:18:b3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:56:09 2025 by rpki-client