This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
File: TSeJUeK9itKFuUCo6p5X43lxHms.mft (raw, json)
Hash identifier: pEvK7bVR/Mi4kCbGG403DiODtTh+6Jd/YjxF4dEeAVw=
Subject key identifier: 41:34:50:74:E4:2B:D5:2F:5D:4A:2E:E2:C1:AD:F2:5E:43:8B:F1:50
Authority key identifier: 4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
Certificate issuer: /CN=A91342C5/serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Certificate serial: 03EC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
Manifest number: 03E7
Signing time: Thu 04 Dec 2025 23:01:17 +0000
Manifest this update: Thu 04 Dec 2025 23:01:17 +0000
Manifest next update: Thu 11 Dec 2025 23:01:17 +0000
Files and hashes: 1: TSeJUeK9itKFuUCo6p5X43lxHms.crl (hash: TYiUw1pLVRur55MV0hb/5hfK4Z9olwVmiGIAJUdT1sY=)
2: E8E194B8A5CC11EC85A86A1FC4F9AE02.roa (hash: ypQGr8fcGrxnVWfQ2RrFsZZ4R7tmsDgEITmj6bx0ScA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91342C5, serialNumber=4D278951E2BD8AD285B940A8EA9E57E379711E6B
Validity
Not Before: Dec 4 23:01:17 2025 GMT
Not After : Dec 11 23:01:17 2025 GMT
Subject: CN=693212bd-4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:b7:a8:4a:b6:86:aa:71:98:3f:21:91:bb:
0b:41:25:19:34:22:9a:70:3d:a4:7d:cb:22:13:a3:
0e:13:f5:29:04:59:ba:0f:f4:c9:8b:f6:df:cc:64:
97:bd:d4:23:39:bd:df:3b:2e:8d:10:2c:04:d6:5a:
77:08:ae:b0:05:9c:32:8f:a8:74:dc:19:f5:56:df:
cd:29:b6:69:60:c5:1d:0c:b2:66:ff:85:ce:46:34:
d7:e5:e7:e8:71:89:09:ea:20:a2:d1:e7:c3:15:64:
83:f5:45:92:15:65:26:a1:1b:10:4b:ce:b0:b5:aa:
49:35:f9:4e:20:e3:73:ee:30:6b:3d:dc:f9:9d:54:
0f:63:d2:7f:40:92:0b:12:7d:fa:b9:c1:9e:7d:31:
e6:9f:39:09:41:ae:ab:9d:18:52:67:37:e5:cc:41:
3d:0a:80:3b:51:e7:b9:1a:c6:b1:72:12:b9:6c:6e:
d7:84:03:c1:fb:08:c1:3a:f0:5b:7d:0f:7b:89:d6:
f6:d0:1b:8f:8a:60:6a:7d:bc:66:73:c5:db:de:7b:
8f:48:84:82:96:5f:cb:d0:dc:e7:96:d3:4e:2e:3a:
77:e1:f3:30:94:67:0a:65:a7:a9:d7:eb:d8:53:d8:
da:6e:27:7b:63:f5:4c:1e:3e:3f:9a:a7:f6:ce:28:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:50:74:E4:2B:D5:2F:5D:4A:2E:E2:C1:AD:F2:5E:43:8B:F1:50
X509v3 Authority Key Identifier:
keyid:4D:27:89:51:E2:BD:8A:D2:85:B9:40:A8:EA:9E:57:E3:79:71:1E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TSeJUeK9itKFuUCo6p5X43lxHms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/16637C2EA4E911ECAF3FB152C4F9AE02/TSeJUeK9itKFuUCo6p5X43lxHms.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:fa:c4:e4:6d:7b:d0:cc:6b:c6:9a:8b:19:07:9a:a1:75:3d:
b1:3f:fb:85:53:e7:23:a3:71:bb:68:4b:2f:a0:20:47:fe:10:
cc:5c:f6:c3:eb:95:06:eb:fc:6a:60:16:df:0a:90:3e:80:03:
6c:24:92:e6:a1:88:40:5c:4c:20:1e:56:77:49:cb:43:bd:7c:
1a:97:6f:c2:1c:54:94:78:a1:4a:fc:f4:33:43:a9:0e:57:9e:
3d:70:45:c5:a8:b9:f2:31:5a:ef:2c:c5:35:30:be:92:11:2f:
fd:c5:15:56:94:81:4b:a4:76:9f:ef:84:65:e3:ef:06:38:ae:
2d:84:99:62:5d:c0:01:d1:ba:ef:7a:b9:22:80:47:09:90:3c:
81:10:6b:b1:6f:57:e8:ca:43:8a:ed:e2:ce:11:ac:b0:6a:78:
74:1b:3e:8c:8a:0b:77:c6:5a:4f:55:2d:cc:c6:1b:74:94:09:
8e:42:bd:f0:14:2e:db:72:ab:8d:3f:bd:73:2b:d8:a1:32:d9:
b5:c4:99:47:d1:e1:61:a6:1c:75:56:90:07:01:b5:fb:96:cf:
08:98:f2:01:eb:f4:9f:dd:0c:bf:f3:14:4d:bd:e2:05:e7:a0:
18:08:15:03:f0:c1:f6:dd:2a:62:04:b1:8b:5a:f6:c2:c6:7e:
da:ad:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:15:02 2025 by rpki-client