This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier: EjNzPiE6RI8So2blstvSnCSl/yxkbK/qQi0XxMb8JeU=
Subject key identifier: 2D:90:CB:55:4A:44:E8:8E:AD:D5:64:25:73:FA:FB:C6:5D:99:16:AA
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 039B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number: 038D
Signing time: Sat 06 Dec 2025 23:25:53 +0000
Manifest this update: Sat 06 Dec 2025 23:25:53 +0000
Manifest next update: Sat 13 Dec 2025 23:25:53 +0000
Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: HBlzaTaFiWm1VsQ3hjvgVYRRztE/h6jY+N9oWjSG5nU=)
2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=)
3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:25:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923 (0x39b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Validity
Not Before: Dec 6 23:25:53 2025 GMT
Not After : Dec 13 23:25:53 2025 GMT
Subject: CN=6934bb81-1cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:71:4e:45:b2:a0:e5:dd:7f:88:2d:1d:ab:5d:
6b:ec:39:df:f0:62:71:7e:1b:b5:09:c9:a6:b1:55:
89:8e:a5:16:c1:6a:8c:46:d7:e2:98:8b:9b:64:38:
0b:1e:41:63:f6:b0:81:39:7c:56:3b:20:bc:b9:68:
3e:58:4b:78:9f:b5:69:0e:92:90:82:bd:dd:8b:b8:
fe:0a:26:80:90:6b:30:ee:79:80:b1:a1:fe:da:1f:
c3:c5:22:dd:b4:44:47:6a:bc:66:98:f9:11:0c:bd:
8e:d9:84:17:13:bb:0f:c8:60:52:8b:7f:8f:9e:70:
93:07:4b:51:d4:70:cf:fa:f0:19:2c:c8:3b:b5:b1:
e1:0c:b7:ba:53:62:48:b4:b8:c4:58:93:6e:ff:0a:
74:d1:d5:ac:c4:21:cd:e3:3c:13:67:15:6f:c6:97:
26:39:c9:dd:fe:df:7e:69:5a:fb:4b:36:8a:bc:e7:
15:e2:bc:3e:87:98:b4:b8:ce:a5:7d:ab:57:85:6e:
f8:7e:25:96:69:63:48:d2:b5:64:00:e2:e0:90:e6:
a7:5c:41:58:6d:9e:51:5c:90:d9:27:70:cf:1b:32:
4f:9b:cb:5f:cb:00:d4:26:d8:a1:a9:35:ca:54:61:
a2:43:3e:4a:0d:ec:0e:10:f2:6e:cd:9a:e6:59:f7:
f7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:90:CB:55:4A:44:E8:8E:AD:D5:64:25:73:FA:FB:C6:5D:99:16:AA
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9b:61:49:cf:ae:ee:49:7f:c6:a6:d0:01:09:db:c1:06:30:
6e:b2:41:7b:76:20:af:b8:8c:93:f9:8f:ab:be:af:3b:3e:fe:
c0:8a:a8:10:b2:7c:ad:c3:0a:45:60:fc:39:e7:bf:86:dc:f5:
3d:a6:51:e3:c3:b5:32:f6:f4:f0:f6:6b:7a:a1:6d:b6:db:dc:
34:ee:25:b0:6c:d6:ed:4a:6b:7e:c4:22:9b:95:39:87:fb:82:
5d:a2:4a:d9:b9:a6:3a:f3:11:f6:49:0a:8b:a6:bf:77:d6:77:
84:7f:50:0d:28:fa:32:7a:e0:48:02:7e:36:31:11:64:50:ca:
e3:e5:3f:06:47:ef:9f:ee:bc:5a:6d:1e:36:02:48:9b:c7:e9:
31:e4:77:b1:a3:a8:f9:73:dd:06:c7:3e:2b:50:46:e2:2d:b5:
73:4f:4f:4d:33:73:1f:f9:30:18:01:60:1f:a5:47:f1:1f:18:
e3:11:af:03:49:6f:25:5d:94:ed:cf:db:70:18:4a:03:4e:65:
11:2b:cc:90:48:71:39:26:95:84:18:60:2d:54:9f:18:2e:95:
55:eb:82:fa:95:0f:ee:7e:ae:21:d1:f8:d7:43:8f:5a:43:ab:
a6:08:ab:c7:57:78:55:70:d5:9c:f4:16:ae:bf:20:58:8b:72:
02:51:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:13:31 2025 by rpki-client