This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
File: kpW_omLgV8ybyCF13K40eslspJE.mft (raw, json)
Hash identifier: +fePpLvora5CxJVVaC0a/Gq+i1zVeb9ewsqBo6Z7f84=
Subject key identifier: D3:35:F4:6E:AB:D7:5B:F8:19:76:86:24:8F:F7:42:0D:49:0A:AC:46
Authority key identifier: 92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
Certificate issuer: /CN=A91154E1/serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Certificate serial: 0A73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
Manifest number: 0A6C
Signing time: Sat 20 Dec 2025 19:07:03 +0000
Manifest this update: Sat 20 Dec 2025 19:07:03 +0000
Manifest next update: Sat 27 Dec 2025 19:07:03 +0000
Files and hashes: 1: kpW_omLgV8ybyCF13K40eslspJE.crl (hash: YRI7jm413/jNCTO7kX0zrXYE3cQ+xOv2pl5DUc1EZ0M=)
2: FA6E4ECC755B11EAA7D9532EC4F9AE02.roa (hash: QAHIkspdc3TnmsVMtC5FECO+wrvdYFQYpTaiZNKj4yg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2675 (0xa73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91154E1, serialNumber=9295BFA262E057CC9BC82175DCAE347AC96CA491
Validity
Not Before: Dec 20 19:07:03 2025 GMT
Not After : Dec 27 19:07:03 2025 GMT
Subject: CN=6946f3d7-e64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:fa:9d:22:e1:53:52:55:a6:fc:65:4b:e8:
32:4e:a1:8b:27:ec:10:7e:6e:51:cb:ee:69:d1:32:
71:e7:07:e2:f3:fd:9c:38:e4:c1:b7:a0:86:f7:99:
fe:96:62:fe:84:0c:e1:77:16:a7:7a:06:5b:c7:d0:
26:5c:90:bc:ff:22:5a:a5:bb:50:49:2f:22:d8:ff:
5d:f8:de:be:97:12:de:b6:f1:ff:ff:97:15:a6:c6:
73:08:e5:3f:46:14:74:27:a1:57:06:85:43:4c:67:
61:98:7b:23:d0:10:ad:22:d8:69:4e:0e:3c:1b:14:
5b:b3:f7:8c:fe:ec:5b:bb:8e:11:32:36:c7:0f:96:
81:4c:f9:1f:15:83:81:48:7b:4d:3c:f6:5e:e1:c0:
90:12:4d:87:94:b3:cd:5f:9a:6d:d3:6e:2a:cb:fa:
7d:6d:67:07:1e:40:be:2e:45:ff:d8:ea:5d:c4:47:
7a:25:57:6e:0f:31:b2:89:87:67:57:09:88:92:19:
d4:3e:1c:12:34:15:c0:46:52:d3:f0:75:54:38:d2:
63:9c:46:b9:5f:57:3d:a4:2c:a1:56:d7:85:c1:99:
43:69:e6:5b:20:aa:fb:4b:5f:f9:8e:2d:7f:8b:20:
5b:00:72:e8:a1:81:54:27:63:5a:76:00:95:53:05:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:35:F4:6E:AB:D7:5B:F8:19:76:86:24:8F:F7:42:0D:49:0A:AC:46
X509v3 Authority Key Identifier:
keyid:92:95:BF:A2:62:E0:57:CC:9B:C8:21:75:DC:AE:34:7A:C9:6C:A4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpW_omLgV8ybyCF13K40eslspJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91154E1/4A0CB6F8754311EAA7571160C4F9AE02/kpW_omLgV8ybyCF13K40eslspJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d0:3a:2c:0a:e4:a1:74:37:6b:d6:95:f4:e7:b1:07:a1:a2:
24:d4:a6:1e:50:11:94:e7:0f:62:a1:cd:3b:75:7f:3f:7e:fe:
20:f2:b6:e4:ab:9e:20:a8:96:31:bd:c5:98:57:83:6e:bb:0a:
6c:98:4b:e2:94:f6:ed:b6:75:99:ef:e6:72:31:57:a6:bf:96:
c0:96:5a:b3:c8:30:5b:d0:a1:66:cf:cb:ad:04:76:49:29:3f:
4e:93:9f:d5:4a:3c:aa:dc:e2:c7:79:9f:02:3d:e5:8c:f9:67:
cf:63:46:b4:d4:7e:e4:c9:dc:a3:8b:a4:3b:9f:f6:2e:32:1c:
4c:12:2a:41:8d:e5:34:b5:45:e4:81:a2:3b:5b:42:97:10:80:
f8:7d:19:c4:a6:79:c8:d1:15:7f:7c:b4:f1:96:a3:86:5b:2a:
d5:e4:ac:1d:8b:bf:8a:98:36:0d:d2:86:1e:c0:28:1d:d6:3f:
cd:85:5d:cf:d2:d0:d1:38:57:b6:56:70:85:1c:d9:a2:be:32:
6c:42:ef:38:04:ea:43:fe:82:d9:b6:3e:0c:96:8a:45:c1:21:
83:37:78:98:30:b7:3c:3e:b7:bf:64:0f:65:fd:16:41:20:0c:
bd:50:54:75:88:00:69:6a:92:8c:7b:5e:47:58:36:9c:bc:d6:
0f:68:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:11:17 2025 by rpki-client