This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
File: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft (raw, json)
Hash identifier: O38+zREwT8yiayieL7VlTjOwi1pNibkddVC/1qUGiq8=
Subject key identifier: 36:18:00:5D:6B:DC:72:EC:69:D1:11:F4:16:96:F7:3A:78:38:7F:4A
Authority key identifier: ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
Certificate issuer: /CN=A91652B5/serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
Manifest number: 08
Signing time: Wed 03 Dec 2025 06:11:54 +0000
Manifest this update: Wed 03 Dec 2025 06:11:54 +0000
Manifest next update: Wed 10 Dec 2025 06:11:53 +0000
Files and hashes: 1: 7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl (hash: /gxgaO5eLDBTjzq0/10+YdVgXBi59h6+QB8G+hpMOSE=)
2: 346B68D2C5B311F08AB01C2DC4F9AE02.roa (hash: 7b809MtdVxQZa3RrAAdljRTw+wj2N5amx06TBiSeigY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:11:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652B5, serialNumber=ED23A8E89E56BCBDA1C00E497C4883D795E52D54
Validity
Not Before: Dec 3 06:11:54 2025 GMT
Not After : Dec 10 06:11:53 2025 GMT
Subject: CN=692fd4aa-ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:e4:bd:78:97:a6:98:11:38:75:33:3b:4f:
63:d0:4c:ff:bf:15:9f:d8:36:b3:72:6a:ec:0c:5e:
02:d2:db:a7:05:be:fb:78:87:9f:62:40:f1:ad:40:
08:2d:6a:04:7d:ef:47:26:e0:bf:46:41:5c:10:99:
4f:38:a2:6d:24:19:81:dd:71:1e:17:5b:db:c6:32:
e6:51:56:d7:db:45:c6:73:66:bb:e8:0f:a5:13:52:
76:8b:6b:c3:97:15:f5:c4:b7:4a:52:f4:be:0f:85:
27:a6:6f:9b:30:32:a7:fe:bb:c1:cb:36:3e:2a:4f:
78:0e:6c:88:08:43:72:fc:70:02:d5:ee:b3:b6:f8:
85:40:cd:0b:b7:5a:b7:2d:18:e2:cc:af:34:cd:da:
e7:c4:09:30:fc:78:f7:5d:93:3c:91:ce:b8:36:0f:
37:2c:49:ec:97:9d:08:ad:03:42:b3:50:86:f7:71:
50:da:e0:04:2c:3e:54:97:8a:1f:d5:e8:c4:71:80:
d4:16:30:a1:b7:22:85:db:be:26:11:7f:7a:4c:d6:
e9:ae:05:cd:35:aa:e4:40:57:b8:29:e8:46:cd:97:
7c:ce:40:08:a9:71:58:b9:54:d8:c1:cc:da:cd:26:
5d:35:48:5c:b4:48:46:19:5b:04:a7:6f:2b:73:cd:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:00:5D:6B:DC:72:EC:69:D1:11:F4:16:96:F7:3A:78:38:7F:4A
X509v3 Authority Key Identifier:
keyid:ED:23:A8:E8:9E:56:BC:BD:A1:C0:0E:49:7C:48:83:D7:95:E5:2D:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SOo6J5WvL2hwA5JfEiD15XlLVQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652B5/6FFB624AC5B211F094A0792BC4F9AE02/7SOo6J5WvL2hwA5JfEiD15XlLVQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:fb:0f:14:3c:5b:9a:2a:ce:33:bc:2d:cf:a7:1b:8e:2f:60:
29:e7:a1:00:3e:83:3b:d3:61:a7:c0:5d:6f:ad:20:ad:2c:58:
66:ec:39:3d:7c:2c:df:b0:24:e8:ad:0c:96:db:59:9a:a6:d8:
fc:ec:f2:21:e0:2f:82:83:e3:f5:77:e7:80:45:94:f4:c8:d0:
f9:ea:4d:fd:03:60:02:0f:b3:8c:e6:4f:0b:4f:30:c0:a6:8d:
a4:f7:b0:69:35:e3:a7:75:ed:7a:73:71:d3:63:31:65:f6:3c:
be:d7:71:74:8e:11:ad:37:15:d6:07:0b:d8:00:95:aa:73:37:
35:9b:1b:a3:29:88:11:f0:8c:a4:a9:dd:e9:c5:a5:60:79:74:
59:a3:db:39:d7:cc:3e:e0:3f:37:81:95:71:ee:95:8d:8b:ec:
6f:cc:cd:81:d4:d5:78:8b:87:c6:87:c1:e3:08:1b:c1:b5:55:
50:89:be:d1:5e:6a:5c:3f:85:1e:07:0b:09:ef:c3:f9:3d:80:
1e:1c:83:f0:2a:c0:00:71:7c:49:b3:3c:3a:36:68:47:f8:56:
91:33:62:15:9f:e0:2e:cb:7d:53:6d:10:41:34:ac:d5:61:6a:
d5:c3:68:1a:ba:45:b6:06:2d:a6:36:84:80:9a:4d:ea:a1:b0:
a4:04:ab:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:12:30 2025 by rpki-client