This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json)
Hash identifier: FyAKejcILMyZg/NYifHZ/xcw9F8Gs9EZQIhCxzx3P1g=
Subject key identifier: F0:A3:84:AE:D8:96:0F:C0:7D:7F:84:D9:68:CB:D5:B4:EB:2F:09:AF
Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Certificate serial: 06B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
Manifest number: 06AE
Signing time: Mon 22 Dec 2025 21:31:49 +0000
Manifest this update: Mon 22 Dec 2025 21:31:49 +0000
Manifest next update: Mon 29 Dec 2025 21:31:49 +0000
Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: HikwkTry6/0AxpOjtDR5UPhbtJR/NZsNlGpgHKtQSYM=)
2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: Y2ugT7F/Nq9bo4RxO3pzLxKsvKtinv0AiQJTvZ2Vh+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1718 (0x6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Validity
Not Before: Dec 22 21:31:49 2025 GMT
Not After : Dec 29 21:31:49 2025 GMT
Subject: CN=6949b8c5-1ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:4d:e8:75:42:44:59:71:69:68:b4:6b:a6:
a1:11:2b:a0:72:2a:fb:11:ab:12:b7:7c:1a:d7:09:
2b:e2:e6:cf:6a:4b:74:70:aa:10:19:b2:8f:ce:90:
56:d6:92:49:58:20:4a:0a:f7:3c:90:b4:99:1f:6f:
1f:46:61:cb:1b:1e:8b:19:88:30:33:b7:49:ef:13:
ff:28:7a:64:c6:75:63:ea:0b:9d:be:8a:c5:c0:01:
86:96:cf:75:86:49:2d:d9:df:e5:e3:1b:2c:82:24:
4f:d3:d7:1b:b5:8d:4b:d3:05:fe:71:a4:98:6d:63:
93:fd:69:b1:41:91:4f:a2:39:7f:65:7d:4f:c0:3f:
d4:82:f7:a7:53:2f:7d:8f:59:9f:1c:27:4a:90:f8:
d9:c6:f8:6d:ea:9f:0b:0d:18:4d:2f:64:cb:ca:f3:
ed:3f:a8:29:5c:a3:f7:12:d8:b4:49:4b:ca:56:b8:
a7:66:63:6b:a3:67:df:18:49:5e:77:a6:2e:55:9a:
b0:45:ec:35:46:80:fa:e5:25:ce:96:e1:4a:dc:8b:
e8:14:84:12:fe:de:44:5e:74:4f:ad:ed:b8:1e:be:
35:7f:b1:10:99:35:8f:31:63:d3:2c:36:2b:a7:13:
57:38:98:00:6f:b2:24:0c:bf:93:7d:dd:35:2b:74:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A3:84:AE:D8:96:0F:C0:7D:7F:84:D9:68:CB:D5:B4:EB:2F:09:AF
X509v3 Authority Key Identifier:
keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:50:f8:2b:28:ef:76:1f:68:bd:99:3d:1d:93:05:13:30:
1f:13:50:2f:9b:e3:48:e3:41:9d:0e:10:95:42:75:ac:1b:6b:
71:02:1a:c9:d6:a3:04:a0:88:0c:8a:e3:b5:fd:d2:f9:03:86:
cc:9b:dc:60:93:ff:aa:23:b2:5f:df:8a:a3:76:4a:3d:fa:52:
3c:62:8b:10:b8:3b:41:b2:87:4f:37:49:50:c7:9c:49:20:63:
45:b1:8b:12:fa:3d:11:b5:1a:d1:f8:17:09:69:34:6b:89:ad:
05:75:77:05:2c:63:90:de:72:d6:f1:f2:17:95:fe:e4:a9:b9:
cc:23:50:4b:69:8b:61:13:58:19:d4:fd:00:36:a7:e1:4c:3b:
c1:a2:a5:94:a2:60:bc:b8:85:14:a9:26:99:77:fa:5e:11:c3:
14:af:66:dd:ff:3f:f8:71:89:91:20:4a:a4:38:65:00:5a:90:
50:61:2b:99:33:51:67:5a:62:c4:03:0f:7b:47:05:d2:34:0b:
e5:37:1b:62:ae:08:a7:97:d1:e6:c1:56:d2:ca:0c:99:d6:88:
47:18:f0:79:a6:6c:13:ac:74:f7:c8:d0:fc:8e:6f:ba:54:be:
70:47:14:d4:8b:4e:91:36:b7:31:62:ad:db:b8:ff:91:4d:7d:
62:37:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:49 2025 by rpki-client