This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
File: 81QJOUhm-0CKDRiOC30AzFpzlI4.mft (raw, json)
Hash identifier: rCRdh+fQZGMC7xO2kCtgK3gxZcoqb+ouVnT5wYVzaPM=
Subject key identifier: F0:6C:7F:A7:01:07:A1:C3:17:0C:A5:31:83:3D:E5:F0:13:7C:26:24
Authority key identifier: F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
Certificate issuer: /CN=A91FDBE8/serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Certificate serial: 0818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
Manifest number: 07FF
Signing time: Mon 22 Dec 2025 20:31:05 +0000
Manifest this update: Mon 22 Dec 2025 20:31:04 +0000
Manifest next update: Mon 29 Dec 2025 20:31:04 +0000
Files and hashes: 1: 81QJOUhm-0CKDRiOC30AzFpzlI4.crl (hash: T0Kzrkcvdx/Fhmi+GbDKjjjZ9W+VOX0Nng4id/FF0vY=)
2: 06F011A2134B11F0AA41F90AC4F9AE02.roa (hash: rQ3HbUHQH7eVX3Cnh8/MApZL6I89rN2JY57V2VKSths=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDBE8, serialNumber=F35409394866FB408A0D188E0B7D00CC5A73948E
Validity
Not Before: Dec 22 20:31:04 2025 GMT
Not After : Dec 29 20:31:04 2025 GMT
Subject: CN=6949aa89-ef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:26:3d:48:2c:f8:55:24:0e:02:eb:6b:85:
38:27:8e:16:c5:0c:0e:bb:73:a2:5c:6b:99:1b:73:
26:88:b5:0e:57:eb:eb:64:47:d1:df:24:9c:1e:60:
a2:17:b8:ae:61:50:34:13:b8:85:73:3f:9e:be:4d:
00:f3:57:80:e9:10:c1:b8:d0:f3:17:fd:e3:ed:56:
a1:f8:78:f0:4a:31:7f:b7:1c:c7:31:ed:72:24:4c:
46:4b:d7:1e:2a:27:c8:f4:2a:a1:a8:48:b6:e2:94:
0f:6e:ae:c4:fe:c8:86:d0:55:dc:36:60:89:31:d2:
44:bb:86:38:43:ca:8c:76:ed:a2:21:58:ab:57:f3:
bf:47:c4:74:b7:34:f4:21:b1:9e:a9:0e:04:c4:fc:
14:ca:a0:29:8e:7c:df:58:97:73:22:74:6b:ea:91:
db:dc:da:f1:3e:79:3b:6a:61:43:21:b4:a8:32:4e:
bc:9e:c2:15:b9:57:e3:60:e7:19:5c:2e:f8:c9:d4:
0e:e0:81:34:b6:6f:bd:24:21:fe:4f:1c:ad:05:81:
5a:98:f2:e7:8d:2b:ef:ab:71:81:6b:3f:7f:fe:ce:
8f:c6:61:f4:69:a8:72:32:77:4e:07:9f:98:a4:01:
d3:7f:7c:0d:0c:a3:bc:88:b3:97:43:1d:6d:5c:b9:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6C:7F:A7:01:07:A1:C3:17:0C:A5:31:83:3D:E5:F0:13:7C:26:24
X509v3 Authority Key Identifier:
keyid:F3:54:09:39:48:66:FB:40:8A:0D:18:8E:0B:7D:00:CC:5A:73:94:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/81QJOUhm-0CKDRiOC30AzFpzlI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDBE8/9D363178152B11EB9BD4EB46C4F9AE02/81QJOUhm-0CKDRiOC30AzFpzlI4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:fc:41:3a:80:80:4a:a3:a3:3a:3e:8f:d3:6d:3a:45:fd:09:
31:23:6f:13:82:19:f3:58:37:d4:33:d9:e6:96:27:8b:c0:37:
23:42:a7:9a:80:3d:1e:83:f6:b9:cf:77:06:4d:da:f5:21:6f:
03:ae:99:4a:fc:9d:56:fc:6f:48:0d:c4:22:ab:6e:0b:5f:b1:
82:cd:5d:b6:8b:26:3e:87:b0:e3:c5:73:3a:f4:99:4b:e5:34:
41:b2:5c:d3:5f:45:88:b4:8d:28:18:b6:e6:2d:07:65:fa:69:
ba:d0:d1:11:12:9f:a3:96:f1:03:39:d0:1c:92:4c:63:1e:df:
f6:b3:4b:ce:fb:1d:27:35:53:3d:3b:a2:be:3a:9a:0f:1b:8f:
05:06:ce:1d:ba:40:bf:14:7c:9c:59:44:df:62:7c:02:5e:09:
82:37:ab:96:4f:9f:63:25:ca:9a:88:51:2f:73:b1:00:59:be:
90:e8:0a:5d:38:3d:04:5d:ca:28:f9:9f:6e:52:dd:66:56:4f:
be:f7:5b:c7:65:34:12:6e:04:79:e3:27:33:b3:b0:9d:83:9e:
a1:3a:30:10:5e:7e:ec:34:7e:a2:76:b1:96:28:01:7b:d6:8d:
75:cd:29:ea:6a:d0:57:35:bc:1a:65:e1:83:9c:47:87:90:23:
3b:b8:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:06:08 2025 by rpki-client