This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json)
Hash identifier: oeVlBpBUiGFGd2+pYGHLhn/r9yghz10fljHVPWcc4xE=
Subject key identifier: 0A:63:06:BC:C2:BB:96:FA:06:A9:E9:4F:18:DD:BE:F6:EA:18:78:5E
Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Certificate serial: 014A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
Manifest number: 0148
Signing time: Tue 23 Dec 2025 03:18:38 +0000
Manifest this update: Tue 23 Dec 2025 03:18:37 +0000
Manifest next update: Tue 30 Dec 2025 03:18:37 +0000
Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: qPpHMRFlN6jvjPWw3z7fQXGJeiG1BYf1GCy8CD8rawA=)
2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: y3j/TCNZc4+9GUOHxfPGcXJYdNwoHrgSAKMjnwhnAHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:18:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2
Validity
Not Before: Dec 23 03:18:37 2025 GMT
Not After : Dec 30 03:18:37 2025 GMT
Subject: CN=694a0a0d-2358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:04:a4:9c:4f:bf:78:56:11:f1:b0:70:6e:
a4:99:13:5d:dc:37:cd:62:c0:12:4d:31:ac:43:b3:
0a:38:c1:46:16:45:23:d1:fe:3c:80:cd:fa:89:63:
7b:41:85:8f:60:33:9b:7a:65:a7:ab:0b:61:37:be:
f2:7a:19:ad:af:35:89:c5:1e:8c:b6:89:fe:48:8d:
e8:f3:a1:b8:d2:54:02:83:20:33:2e:64:10:69:6c:
c1:6b:d8:2e:d6:df:bb:78:e8:74:c1:39:5b:a2:f7:
8c:31:5e:d3:ca:8e:a1:33:fc:46:64:62:7b:d9:bf:
f8:be:19:38:f2:e2:be:f9:2f:6c:37:af:20:20:a0:
b1:2b:44:c2:2b:51:b5:c5:29:50:14:a7:05:a9:ba:
ca:92:e7:f9:ba:13:6e:22:2f:97:12:31:c7:69:0c:
9d:ed:16:72:e7:cd:49:cd:65:c6:df:98:d5:03:a6:
3f:32:3d:ec:b1:bf:e3:f2:16:4b:75:79:84:e3:de:
23:e8:3a:5a:0d:5d:73:a5:c7:35:e4:3e:90:33:78:
b6:f8:aa:0e:2b:89:55:f2:68:a0:14:d2:ab:7c:33:
8d:11:36:26:fc:28:1f:62:8f:71:80:7d:5c:35:f6:
aa:b2:72:df:9c:94:0f:13:7f:b5:ff:c7:e5:bc:aa:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:63:06:BC:C2:BB:96:FA:06:A9:E9:4F:18:DD:BE:F6:EA:18:78:5E
X509v3 Authority Key Identifier:
keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b9:13:dd:92:5f:73:53:18:ac:27:9b:31:31:ea:cc:06:40:
23:34:84:e7:86:30:a4:e8:02:46:42:d8:05:0a:07:cf:d8:ca:
45:49:be:0a:36:cb:27:99:e2:35:20:09:10:f6:9f:0e:d7:d0:
3d:5f:41:56:36:06:71:a4:ea:41:cc:4b:88:c2:8c:8c:46:5c:
00:e1:26:26:7f:88:62:8e:90:39:e1:f7:67:7d:63:11:1a:82:
00:20:bf:8b:85:cd:ff:4a:29:9f:72:ff:2b:37:b8:aa:94:71:
f6:e3:48:a7:1b:d4:b7:4c:2c:54:fd:e8:9f:b4:0e:d5:30:81:
cd:ae:43:68:99:08:28:28:24:c3:d2:d9:fb:0f:5b:22:d5:b1:
10:00:6b:47:a2:9a:d2:87:26:8b:87:71:b4:39:0a:4b:2b:fc:
d5:d8:6f:fa:b0:c4:9a:d8:f0:ed:07:3e:8e:da:13:d2:29:4e:
2e:92:43:b2:b2:ab:26:21:3a:62:22:53:a3:9e:35:b6:27:ba:
6f:d3:1b:fe:91:fa:09:0d:70:fc:ea:ed:98:89:0c:70:df:05:
65:30:ed:78:63:9c:31:af:b4:eb:b5:42:f5:52:d5:83:6f:1a:
66:57:16:a4:76:d0:89:ac:fc:44:83:89:17:3b:ea:5d:47:4b:
7d:28:44:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:57 2025 by rpki-client