This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
File: Ip7mz7eVhLojEKzORSg496SKUB4.mft (raw, json)
Hash identifier: 5gGX7qonKYkn827DOCPoLibpn+gGeWPIOFNvimqkQ1g=
Subject key identifier: 55:33:03:06:4B:C4:37:88:4D:FE:3F:38:83:AF:55:F0:0A:68:96:6C
Authority key identifier: 22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
Certificate issuer: /CN=A91106C7/serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
Manifest number: 0117
Signing time: Wed 03 Dec 2025 03:19:48 +0000
Manifest this update: Wed 03 Dec 2025 03:19:48 +0000
Manifest next update: Wed 10 Dec 2025 03:19:48 +0000
Files and hashes: 1: Ip7mz7eVhLojEKzORSg496SKUB4.crl (hash: eEjq9CY49XZ/zPPZLjbA6wDthSqn5hb87YSNYh7s8dU=)
2: 4F179FFA45C711F09D90C528C4F9AE02.roa (hash: AoqGhpw1dfLgh3xeboUCFj7o3T5zts+KEOp4p0FPim4=)
3: E02064A0C9E911EFABA90568C4F9AE02.roa (hash: 1KWYaNEqXlQZbYyzbVPFnEogKXP5LSRzPFTHIQIRAMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91106C7, serialNumber=229EE6CFB79584BA2310ACCE452838F7A48A501E
Validity
Not Before: Dec 3 03:19:48 2025 GMT
Not After : Dec 10 03:19:48 2025 GMT
Subject: CN=692fac54-694e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:38:75:70:b3:ba:63:3e:70:6c:b4:9c:fe:
47:aa:55:90:40:05:f3:fd:1e:b2:94:1d:95:97:b3:
b8:26:8e:29:7e:da:06:ba:51:38:92:72:8e:7c:4a:
64:90:16:dd:42:2d:9f:f9:93:56:02:e9:d3:d2:70:
77:8d:fe:da:d6:e8:d1:b3:fd:77:b2:48:27:9b:58:
a6:77:c0:6f:8d:a9:ba:5c:23:d5:41:7c:f6:34:95:
dd:d4:11:c8:90:45:2e:6f:ec:cf:5d:9d:6e:52:f3:
50:8a:9e:b6:d5:c8:86:3e:16:4d:0d:e7:d8:19:b9:
88:01:00:65:6a:c5:57:96:db:27:e7:ce:f1:21:83:
de:2c:26:9e:9c:63:ff:45:dd:9c:88:d3:fa:ac:16:
a8:cc:62:03:9d:55:39:f5:32:19:e3:0c:29:40:94:
95:bf:3d:fb:c6:53:9b:fa:b8:de:90:b2:3e:7a:72:
4f:0d:14:b0:e4:5d:2f:f6:44:99:05:8e:cc:8d:8b:
92:5a:4c:14:96:69:84:07:db:06:c1:ca:5b:9d:63:
95:74:2a:e5:5c:2f:4d:f0:73:3d:d8:e6:1b:a3:2d:
a7:c5:33:06:97:49:a0:e0:ab:f9:24:c2:cf:3a:9c:
1c:4f:c4:d7:25:f5:01:87:e8:2c:6b:70:29:bf:2c:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:03:06:4B:C4:37:88:4D:FE:3F:38:83:AF:55:F0:0A:68:96:6C
X509v3 Authority Key Identifier:
keyid:22:9E:E6:CF:B7:95:84:BA:23:10:AC:CE:45:28:38:F7:A4:8A:50:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ip7mz7eVhLojEKzORSg496SKUB4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91106C7/6F03D630320E11EFB6E0DA76C4F9AE02/Ip7mz7eVhLojEKzORSg496SKUB4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:70:6f:5c:da:18:e8:e0:6f:39:d3:b9:f7:9c:a7:7b:45:ae:
07:db:c2:75:46:f2:45:82:b4:48:bf:92:8a:34:c7:f0:27:95:
aa:b6:4c:ba:8c:64:4b:6e:5c:7c:a0:60:d6:70:cc:ba:b2:6f:
3b:d4:bc:24:17:c5:1a:ff:86:fc:04:a2:38:74:5e:81:ed:57:
77:bb:cd:2a:d9:cd:61:44:df:02:a7:86:bb:11:fb:9b:5b:ef:
b0:5e:48:63:24:ee:1a:30:3d:c6:9b:08:d7:39:ed:92:e6:49:
2a:ad:4d:11:a9:28:85:12:82:ec:ca:aa:28:70:14:ff:f0:58:
fc:a7:c6:2b:ac:8b:41:4d:b1:eb:b3:11:41:62:5a:ff:b2:9c:
99:3c:4a:49:c8:11:64:49:59:61:84:7b:a8:f5:9e:0f:31:53:
0e:bb:26:10:ec:91:be:ee:c1:a6:8d:a5:9d:1a:ea:4d:a4:90:
e8:52:d4:23:ef:f9:cd:a7:f6:92:7a:26:70:d1:7e:f0:73:fe:
3e:ef:56:b4:fe:a8:2a:fd:f1:41:1d:a0:c9:cc:ef:88:ee:8e:
ff:07:62:dc:4f:d7:1f:be:21:73:be:26:b5:eb:f0:4e:4a:c5:
f5:f2:b6:9a:bc:03:cf:23:53:5b:59:9a:73:1e:f2:26:9c:71:
04:12:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:22 2025 by rpki-client