This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json)
Hash identifier: k2VMe13TyKchYcM8OD7P9RCmYKrU+bQ/L47ZJ2dTN68=
Subject key identifier: 26:55:6B:3C:1B:36:F4:93:47:B6:FF:8B:00:1A:7E:EB:87:45:F6:51
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial: 1225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
Manifest number: 1208
Signing time: Thu 18 Dec 2025 17:00:13 +0000
Manifest this update: Thu 18 Dec 2025 17:00:13 +0000
Manifest next update: Thu 25 Dec 2025 17:00:13 +0000
Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: JLJk2sSTioUOM36SMPYn7puF+gunRJewv1AeTJetcn4=)
2: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=)
3: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=)
4: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4645 (0x1225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Validity
Not Before: Dec 18 17:00:13 2025 GMT
Not After : Dec 25 17:00:13 2025 GMT
Subject: CN=6944331d-2176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:b9:ae:bb:a9:09:53:82:96:f0:82:a1:40:
dd:3c:b2:d7:cd:df:cd:27:1b:83:9a:02:f9:6f:d6:
bf:df:40:e0:25:1a:2d:79:ee:a2:98:76:19:b4:44:
9d:8b:1e:ea:3c:f4:0e:bf:bf:11:91:5d:82:4d:e8:
3c:d3:6c:f2:41:c7:43:1a:07:15:21:fe:a8:a1:08:
c8:74:a1:c1:f3:a0:67:ac:fb:13:ce:4b:99:f2:cd:
e3:98:7d:70:95:47:48:a7:96:22:4d:b1:aa:0f:74:
0b:12:ed:4e:b5:b5:a3:13:50:3b:7d:51:48:f2:4d:
04:93:b4:d1:07:6f:a0:56:0d:7e:33:b4:64:5d:ab:
be:5a:7d:10:f6:88:0d:70:2c:54:23:55:9a:6d:9b:
92:3a:c7:d7:96:f8:48:f6:b2:b4:22:f9:c7:59:75:
42:04:dc:25:96:f9:86:ac:36:c2:71:46:f8:24:63:
47:f0:8b:e9:71:67:91:27:67:c7:f3:c3:30:4a:dd:
b9:e7:70:73:3f:29:12:6a:ea:ff:3c:6c:ce:5f:bd:
51:7b:76:70:dd:1a:47:b8:55:58:64:fc:62:da:a2:
c8:7f:ee:ca:43:11:f2:e2:c4:c4:41:00:9e:fd:ec:
ff:f2:40:5c:b3:21:52:48:52:d3:1e:5e:3b:21:3f:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:55:6B:3C:1B:36:F4:93:47:B6:FF:8B:00:1A:7E:EB:87:45:F6:51
X509v3 Authority Key Identifier:
keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:2e:00:b5:d7:5e:37:4c:d5:a5:61:03:47:4a:d8:dd:8f:0c:
e4:27:bc:7f:56:db:95:e1:f1:43:a6:04:00:ca:f4:78:7f:35:
a3:5c:75:91:f8:31:11:b5:a0:15:17:83:07:89:ca:d8:29:34:
88:43:1b:93:6a:d7:92:30:24:a1:4c:5d:a2:6d:bf:12:a6:b5:
58:a6:6a:df:8e:33:0e:a7:bd:32:dc:bc:ec:82:74:b0:c9:df:
53:d1:e2:9a:fe:cf:62:65:7b:d3:2e:00:67:a9:18:50:65:c5:
eb:09:72:11:7a:24:18:bf:b0:54:3d:5f:f4:22:cb:3c:6f:53:
3d:c0:87:7f:84:0e:40:dc:dd:c7:45:75:3d:c0:41:cb:ec:1c:
3f:27:ed:7a:75:b3:8e:47:6f:7f:0a:05:39:66:15:8f:d6:2e:
c3:46:81:b2:6d:0e:9c:5a:2d:c0:80:d9:c8:99:93:68:ce:17:
9b:0e:b2:52:ca:88:70:5f:ba:f8:0e:7a:1a:3a:19:99:91:e3:
91:13:83:07:4d:d4:e0:0e:bc:f2:63:f0:21:39:8f:61:41:46:
b6:d1:97:e1:cb:a8:a0:6d:cf:6d:2a:88:85:27:ed:d8:a0:ba:
8b:ce:78:f0:82:7c:ae:b9:ca:12:5b:90:64:7d:d5:64:5b:2b:
33:17:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 16:41:50 2025 by rpki-client