This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
File: e38qjYSvvYwzKp9LTmcJs65_CvY.mft (raw, json)
Hash identifier: TOEwQMCeRUIdT9e4PpLvTzyaepBGDIBpTRcqVhMzsOQ=
Subject key identifier: 92:0D:C1:3C:1D:05:38:73:24:BA:CC:BC:70:0A:5A:83:84:8C:62:3C
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Certificate issuer: /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
Manifest number: 71
Signing time: Tue 23 Dec 2025 05:52:12 +0000
Manifest this update: Tue 23 Dec 2025 05:52:11 +0000
Manifest next update: Tue 30 Dec 2025 05:52:11 +0000
Files and hashes: 1: e38qjYSvvYwzKp9LTmcJs65_CvY.crl (hash: 7H0jWwNWkLHJABQWrimFfFRJWDREpRUtunUJtfCAk7A=)
2: 0930CE00408411F0A6916727C4F9AE02.roa (hash: RmPJ00Uips89e1P+AW2N3rLdF8Pmzlx8rWyUZVnX0RI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Validity
Not Before: Dec 23 05:52:11 2025 GMT
Not After : Dec 30 05:52:11 2025 GMT
Subject: CN=694a2e0c-4205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:68:36:9d:b8:7b:d0:9f:fd:a3:40:53:79:
cd:58:44:e8:d4:de:71:0b:b5:21:89:0a:de:40:c1:
b5:f0:e6:13:99:6c:79:33:af:eb:24:e9:19:a8:80:
c9:6b:af:56:cd:50:1c:e5:99:d2:91:dd:8d:fe:48:
f7:3b:bb:d7:ee:48:77:c5:1c:d6:4a:24:36:c6:86:
20:ec:dd:04:3a:6e:85:a1:8e:73:78:5a:1c:4d:c1:
d8:48:63:f8:a6:bc:42:da:d4:d1:28:98:02:f1:68:
95:47:5e:48:ca:cb:b9:bb:4f:52:7e:09:db:bf:2c:
6f:c7:5a:6b:4f:ca:ed:66:23:72:39:40:f0:e1:3b:
8b:45:aa:a0:93:21:66:cd:a6:5c:92:d5:85:f4:f8:
a8:16:20:7d:65:3d:12:c1:38:dc:54:d9:89:54:26:
34:e6:14:00:9e:68:7a:0c:59:d5:b4:e4:56:db:80:
f9:43:6b:58:0f:0a:8e:fa:2c:8f:45:fa:75:1c:ca:
de:1f:f9:16:43:c0:21:0c:4d:7e:1c:90:9f:fa:93:
f2:39:94:86:48:c8:b6:d8:09:3e:be:2f:0b:20:4e:
ba:83:91:9f:e5:c9:84:57:16:c1:02:bf:ec:ec:25:
18:3c:27:da:c0:78:01:0f:9d:ff:56:0a:20:4e:5e:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:C1:3C:1D:05:38:73:24:BA:CC:BC:70:0A:5A:83:84:8C:62:3C
X509v3 Authority Key Identifier:
keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:63:8d:fd:70:e1:54:e2:e8:a9:ee:29:b0:fa:f5:d6:26:
8e:bc:15:7b:42:69:b8:9c:64:c5:e1:36:28:cb:d8:52:71:00:
da:b9:02:22:75:e3:7c:3e:e2:37:96:ad:32:c6:57:c1:f2:4f:
3b:e5:0b:4f:6c:7a:b8:b1:8e:2a:2e:dd:7d:73:c8:3b:2f:c9:
e7:7c:ad:65:3d:67:be:e1:a8:29:92:45:4c:ff:64:17:02:06:
5c:95:aa:68:5d:04:2a:5d:e3:1f:d3:71:5f:11:65:a5:9d:c6:
4d:eb:62:78:8c:57:dc:0a:7a:0a:9a:35:e6:2a:90:b4:fa:40:
7f:26:f1:1c:41:f2:7e:2a:18:09:b5:5d:16:a7:11:e7:8f:f7:
6a:aa:da:14:6c:c2:1f:0c:eb:8d:3e:62:25:49:9c:53:76:f0:
17:7d:85:f2:e7:a0:ec:3c:a9:03:7f:63:e6:be:45:19:20:ef:
a0:60:86:f4:b1:98:ea:c3:25:35:9c:58:77:02:47:bb:40:27:
d2:cb:ee:67:04:38:ac:3d:cb:13:8d:01:c4:bc:1d:65:ad:ff:
76:f9:4e:8f:f2:3a:ea:e8:ea:9c:d5:43:bd:ea:54:9d:ed:b1:
28:52:72:98:1c:af:04:8e:f5:39:59:a9:7e:8b:ec:d5:32:c0:
2a:af:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:54 2025 by rpki-client