This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json)
Hash identifier: XkyZ7zFTqnGyYWy6jNGrhqxN2BBSPVslbLJT/Zx/+EQ=
Subject key identifier: F3:D2:95:B8:24:F5:FF:0D:D2:7E:F4:F3:0E:85:50:6C:AF:4A:03:A9
Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Certificate serial: 0184
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
Manifest number: 0181
Signing time: Tue 23 Dec 2025 02:40:03 +0000
Manifest this update: Tue 23 Dec 2025 02:40:02 +0000
Manifest next update: Tue 30 Dec 2025 02:40:02 +0000
Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: Dynx+CnbsbZaj9hDgFObLFRm3W90RUga9IKjqNfSMVU=)
2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: ewSndXmGK4bIjd/hEYzsemW56YoGlHl9wDoTOirwBNg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0
Validity
Not Before: Dec 23 02:40:02 2025 GMT
Not After : Dec 30 02:40:02 2025 GMT
Subject: CN=694a0102-b50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:37:40:b7:88:58:4a:45:54:c6:b7:27:85:
37:23:45:f5:98:01:a5:67:22:cf:b9:6b:38:45:fa:
ed:39:8c:f8:8b:c3:e8:4a:1d:32:b8:42:cd:c7:5e:
12:1e:a9:1a:82:59:64:88:64:e4:59:bf:5d:8f:81:
9e:76:84:c5:34:e6:cd:c0:c1:f8:ca:67:e9:96:c3:
58:07:5f:c8:d5:b5:40:de:eb:bb:1a:49:9b:1a:25:
de:74:8b:c0:b1:37:c0:2b:e8:ae:fd:f8:20:7f:58:
e4:00:cb:09:fb:c3:f8:0a:11:2f:cb:66:8d:09:b9:
b8:91:81:e1:cc:7d:70:aa:53:68:94:74:d1:0c:0f:
72:27:00:3f:1b:d7:98:03:d1:05:e2:38:ea:a6:75:
bf:7c:a4:93:45:1b:5c:49:4a:ea:8a:64:54:39:a4:
e2:25:fb:25:5c:40:88:8c:03:f4:0e:8d:24:90:13:
ba:a7:3b:91:9c:cb:d5:92:80:82:e5:e8:2d:33:c0:
b6:9d:6b:24:54:50:20:67:cf:be:1f:c3:d7:f4:c3:
48:53:fc:30:f5:58:32:fe:b8:99:a3:3c:e4:04:17:
9e:75:59:94:35:9c:1a:bb:67:e8:40:a4:01:df:4f:
2b:af:07:c5:35:27:4f:17:c2:86:ee:b2:10:9b:87:
0d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D2:95:B8:24:F5:FF:0D:D2:7E:F4:F3:0E:85:50:6C:AF:4A:03:A9
X509v3 Authority Key Identifier:
keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:09:64:3f:3c:6f:38:ab:ba:ee:82:e2:5a:5c:7d:4a:ae:f4:
8d:98:9c:3d:ab:f1:c8:09:20:0a:30:0d:f7:b5:10:ed:c2:fd:
22:f5:ce:2a:b6:4e:ad:72:d7:5f:62:18:ed:42:42:db:71:73:
a0:0e:21:eb:b8:3a:b4:a0:30:3f:55:7a:5f:0e:31:1c:25:1f:
53:d9:42:93:56:57:0f:f8:3d:04:a2:81:81:c6:c9:82:83:69:
f4:a5:fc:1d:07:eb:6f:76:67:c3:4a:9a:a6:f7:b9:e5:e5:7a:
bd:ba:59:c4:d8:b4:76:03:e2:fa:17:60:52:f7:b6:cc:cd:85:
40:f4:98:e2:89:b4:2d:f4:ed:26:fe:27:e6:5d:38:f7:85:b1:
14:66:35:51:bc:fa:f0:e4:97:8a:53:f2:9d:21:45:fe:cb:ab:
9d:87:ba:76:9f:be:44:a3:b6:6c:c0:41:22:9a:11:36:73:7e:
61:d2:20:9e:d6:d1:40:41:40:85:8a:17:69:b1:cb:7d:b5:4a:
c6:8a:d3:eb:e8:9a:45:7b:ba:38:62:c8:89:e4:44:f9:18:ac:
43:6d:c7:bd:7b:71:06:9c:b9:08:cb:bd:fc:42:f0:69:26:b7:
bc:4d:f7:07:80:f7:db:2d:36:78:7c:f8:d0:79:5f:fc:61:b8:
21:38:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:30 2025 by rpki-client