This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
File: xDm8101kBSuyA1McRgSa1ANYj8c.mft (raw, json)
Hash identifier: ZoPuLN2rRZo2ymAdLMuXuS0aQ3LLubFjhBaXpRlvVeo=
Subject key identifier: 80:30:05:61:7C:09:5C:D7:70:45:61:40:4E:C1:07:5B:4E:84:20:84
Authority key identifier: C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
Certificate issuer: /CN=A91775D8/serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Certificate serial: 0705
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
Manifest number: 06FD
Signing time: Mon 22 Dec 2025 21:11:58 +0000
Manifest this update: Mon 22 Dec 2025 21:11:58 +0000
Manifest next update: Mon 29 Dec 2025 21:11:58 +0000
Files and hashes: 1: xDm8101kBSuyA1McRgSa1ANYj8c.crl (hash: LDEc/qQY17jJTfEg4kp3Ow7zqk6E38joaaif85qr7E4=)
2: 18D9E13C5CE611EC80EC7E76C4F9AE02.roa (hash: FREW3BYIhAyr82gwSpG+aXABGrdd/q2DunYmdFOCRY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91775D8, serialNumber=C439BCD74D64052BB203531C46049AD403588FC7
Validity
Not Before: Dec 22 21:11:58 2025 GMT
Not After : Dec 29 21:11:58 2025 GMT
Subject: CN=6949b41e-2e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:74:aa:6f:d6:22:cd:c2:2b:57:2c:7d:51:
de:7a:88:9c:67:34:13:4b:ee:f9:60:d0:8b:91:f6:
e9:cc:d4:3c:49:e7:38:b8:a6:ee:01:4a:98:a1:6e:
56:10:02:02:10:cb:6c:72:3e:c7:bd:06:22:a1:11:
4e:51:14:0d:00:a5:30:ef:8e:65:78:1b:9e:3d:62:
28:f1:18:36:d6:71:90:fe:eb:9e:ef:ec:59:e9:51:
74:15:09:e8:73:d2:13:6e:51:65:bb:3f:b6:e9:2c:
f8:07:56:09:c7:91:77:78:3d:31:21:ca:59:fd:c5:
ee:da:5c:3d:ff:03:f7:b0:86:63:69:04:11:03:93:
3d:b3:57:94:1c:56:61:f6:de:7e:fe:e6:e1:89:44:
f3:a3:aa:59:2f:25:7d:82:5c:24:54:4b:70:42:e9:
c1:3b:42:45:ad:e6:0b:16:25:68:55:de:a2:7f:3c:
f7:30:8f:06:47:ba:dc:9b:c1:9e:3f:85:9e:97:84:
bb:0d:ab:c2:55:87:42:d2:50:23:f3:13:d2:1a:06:
fd:b0:13:4e:6f:da:5d:17:22:43:e5:30:2e:25:69:
e3:13:41:8c:f7:18:d9:07:e7:3c:47:89:3b:01:1f:
39:7b:21:54:22:02:07:0a:06:93:30:7e:79:87:8d:
86:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:05:61:7C:09:5C:D7:70:45:61:40:4E:C1:07:5B:4E:84:20:84
X509v3 Authority Key Identifier:
keyid:C4:39:BC:D7:4D:64:05:2B:B2:03:53:1C:46:04:9A:D4:03:58:8F:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xDm8101kBSuyA1McRgSa1ANYj8c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91775D8/51C9F6AE705F11EB997BBB16C4F9AE02/xDm8101kBSuyA1McRgSa1ANYj8c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9f:3b:71:37:71:54:32:1c:b6:89:25:2a:c4:99:7c:d2:5b:
2b:64:f4:7b:16:cb:4a:1d:e3:25:50:50:24:e7:c4:cf:d3:e2:
3e:6d:d5:f6:90:b4:e9:87:67:71:76:8c:f5:08:02:d6:c3:77:
73:05:de:aa:8e:60:d9:fb:bd:f2:d9:02:c9:c4:ed:ac:75:39:
1a:df:ac:a4:0a:1c:f5:4f:fe:1d:55:c5:12:f2:e8:4f:ab:8a:
ac:eb:2d:8d:d6:c8:13:65:3e:02:4d:32:6a:d1:96:0c:53:7b:
5a:6b:f5:29:07:1f:ab:6b:7c:a8:ee:09:a8:0a:a8:89:6e:ca:
8d:da:e5:04:6d:73:04:74:43:25:ae:b6:41:84:e6:32:4d:f5:
ec:bc:9a:ff:47:a9:20:6c:a8:aa:eb:71:4b:81:05:eb:9f:08:
32:36:85:91:57:0b:db:65:ac:0f:2e:f1:5a:9e:d9:2b:b3:d9:
37:04:7d:90:7d:53:fd:12:8d:0c:e3:51:df:96:71:f0:b3:69:
7a:7a:b8:88:0c:6e:e9:33:b8:b8:af:d0:15:ec:0f:01:a3:5d:
76:3e:01:32:f2:83:e8:e8:e1:53:8a:24:30:72:f4:e8:8a:68:
f4:97:bd:b5:91:e1:2c:b7:ce:9c:e2:0a:a0:97:1d:66:72:4e:
33:e0:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:22 2025 by rpki-client