This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File: mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier: 431UVGd9x8Z2wBhcezIeB/yfnCE/TwHnUywdlxvAaRw=
Subject key identifier: D6:0D:A7:3F:A9:07:B3:17:AA:37:26:4D:03:13:EE:80:17:25:F6:2C
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer: /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial: 34ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number: 34ED
Signing time: Mon 22 Dec 2025 14:49:38 +0000
Manifest this update: Mon 22 Dec 2025 14:49:37 +0000
Manifest next update: Mon 29 Dec 2025 14:49:37 +0000
Files and hashes: 1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: a8NX3/mGC0vpkIr53bRsNbBxFAfwzkBsKh8jFQfwZss=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13549 (0x34ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Validity
Not Before: Dec 22 14:49:37 2025 GMT
Not After : Dec 29 14:49:37 2025 GMT
Subject: CN=69495a82-9b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:e8:4d:fc:d9:7c:e3:ac:0e:38:77:11:1a:
c3:70:3c:6e:53:ed:a0:59:3b:75:61:93:3a:2a:ef:
a7:2b:29:37:d4:94:93:b1:3d:04:22:24:76:88:bf:
40:6a:d2:e8:06:91:08:61:35:5a:92:db:7e:e7:c9:
59:b5:4a:f0:7a:4c:cb:94:77:55:4a:c3:48:47:a8:
de:1e:1e:70:87:d1:55:d2:c4:20:d4:14:d2:63:e5:
97:de:bb:86:38:f6:9a:e4:e0:30:ed:68:74:2e:56:
87:7c:16:44:85:66:76:10:d4:23:8c:85:02:ea:fd:
ab:d8:a8:eb:a6:4f:ce:f4:91:0b:18:8a:17:ed:64:
e5:6c:d3:59:1d:3d:59:a5:0c:95:19:c1:fc:8b:f5:
71:c6:ac:c9:b6:bc:3e:1a:f0:ad:91:cb:cc:55:b2:
b0:01:a0:0d:23:29:8e:96:af:99:f8:96:41:ba:6e:
2c:4f:71:ca:cc:20:59:fc:ed:6c:6e:19:e7:98:5e:
b3:b9:a2:fc:b6:1f:99:8e:54:44:4d:6c:a9:2b:51:
b9:83:53:ad:cb:30:cd:79:bf:ed:b4:33:96:22:e8:
bf:c1:ed:eb:81:fd:4e:ea:41:2c:d1:8a:96:14:ca:
a4:bb:a8:f9:fa:d6:e1:48:c4:ac:c3:22:2d:fa:a9:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0D:A7:3F:A9:07:B3:17:AA:37:26:4D:03:13:EE:80:17:25:F6:2C
X509v3 Authority Key Identifier:
keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ad:24:f0:f4:a7:fe:ed:b3:71:d1:c3:58:d6:0e:c0:ef:3a:
cf:d4:cc:be:13:57:0c:34:ac:1d:d6:83:33:cf:07:81:19:68:
b5:cc:bc:36:1c:df:a7:7b:d3:40:07:e1:0b:4b:90:7b:06:f7:
c5:b3:f3:35:49:a9:49:17:ae:f4:73:c0:72:02:5d:25:44:1a:
92:bb:c8:3b:12:1d:72:dd:96:98:19:58:f3:e9:73:d2:d1:8c:
40:03:34:8a:46:fd:2c:9c:ed:00:36:e4:c4:72:37:10:a7:fb:
fa:6a:4a:64:12:88:47:3f:36:a4:70:5e:6f:36:3d:dd:48:6e:
a8:5a:06:92:4c:c9:39:9a:47:6c:79:e6:78:5d:8a:49:44:d8:
a1:d0:72:6b:21:4b:4f:b5:47:9b:e8:84:1f:43:c0:9e:25:dd:
db:09:ab:3f:82:5a:21:dc:a7:12:57:e3:52:12:0d:0d:5a:3f:
87:04:2e:60:b3:eb:85:16:61:aa:0c:f5:08:28:93:91:f8:bd:
fe:87:56:31:6a:2d:6f:ce:e0:28:07:0d:83:25:3c:4d:2d:7e:
0e:68:24:09:d0:1e:f8:15:9a:24:f0:5b:76:98:a5:6f:87:9b:
6a:36:67:01:d0:b5:1a:5b:cf:13:b2:a1:13:1c:7d:83:4e:2f:
31:d7:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 14:36:58 2025 by rpki-client