This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
File: AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft (raw, json)
Hash identifier: oZu26r7kTgVYVbDz8wAp1ApPubFHfsfXEv9AE3FR7gE=
Subject key identifier: 0C:E9:62:FF:B4:00:62:10:55:73:65:4C:F0:07:E6:70:00:A2:21:3F
Authority key identifier: 01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4
Certificate issuer: /CN=A91788FF/serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
Certificate serial: 0110
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
Manifest number: 010D
Signing time: Sun 21 Dec 2025 04:10:17 +0000
Manifest this update: Sun 21 Dec 2025 04:10:17 +0000
Manifest next update: Sun 28 Dec 2025 04:10:17 +0000
Files and hashes: 1: AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl (hash: c9/YMxIzDMzu7/Gb1tRUI+1ZL+3oFCS8G38/8wbV+yY=)
2: 726BD5E645CF11EF854E2262C4F9AE02.roa (hash: NhOdHEmUoQd5YvUf9TabAJ2MpFyvN1YFKpx5g77iQO8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl
rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91788FF, serialNumber=01F1ED08CDE27136F397D0734AF2A35E5D527DD4
Validity
Not Before: Dec 21 04:10:17 2025 GMT
Not After : Dec 28 04:10:17 2025 GMT
Subject: CN=69477329-340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:6b:35:74:77:af:df:99:78:18:7d:73:98:
a0:46:8f:74:47:a3:3d:20:6d:ec:41:14:19:dc:0b:
81:a5:f2:7a:4f:62:bf:23:cd:81:67:21:c8:1c:ff:
3c:ae:bc:24:46:5b:d3:38:f2:01:1b:39:98:df:52:
69:ec:f5:63:06:94:04:ec:a6:d6:b6:23:05:30:3a:
f9:b2:76:f5:22:d2:64:f4:47:ee:a5:ce:ac:f1:5b:
8d:11:b3:8a:ec:3a:01:0e:bb:6f:a4:f6:40:7e:c6:
6f:15:9e:5d:ef:74:32:72:eb:7f:68:9b:87:34:e1:
8c:a1:b3:a6:e2:f4:cd:f8:55:ba:1d:95:cd:db:63:
bd:e0:07:02:dd:82:0a:9a:86:d6:4a:10:5c:45:bb:
a6:0f:30:30:7a:57:eb:d2:53:da:fe:19:db:fe:88:
00:4e:4f:a1:2b:b7:97:74:9a:2d:28:fd:04:85:2f:
82:f3:1e:84:75:06:cf:d3:c8:38:60:ed:0f:8b:da:
94:39:2a:37:28:34:51:a3:ed:e9:6a:59:b3:92:42:
3b:1b:80:9f:ef:86:29:d4:0e:36:cc:e5:e9:b2:10:
56:88:d1:66:35:76:93:53:29:a6:7f:af:dc:17:f1:
e8:15:9b:6c:43:0a:a1:3b:cb:c9:47:9c:0d:03:74:
c1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:62:FF:B4:00:62:10:55:73:65:4C:F0:07:E6:70:00:A2:21:3F
X509v3 Authority Key Identifier:
keyid:01:F1:ED:08:CD:E2:71:36:F3:97:D0:73:4A:F2:A3:5E:5D:52:7D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfHtCM3icTbzl9BzSvKjXl1SfdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91788FF/BDEB297445CD11EF8E82644EC4F9AE02/AfHtCM3icTbzl9BzSvKjXl1SfdQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:ae:b2:26:b2:06:47:4d:f3:7b:74:fc:b1:dc:7c:41:d8:94:
9f:a7:58:f8:d0:4b:6d:b4:bf:1e:55:1d:c9:e7:b1:12:8a:3b:
e6:cc:3c:6c:b2:d9:b8:a3:b7:95:00:b5:c6:38:14:18:90:27:
a6:86:4d:8e:cf:fe:b9:e3:db:fb:f6:4d:ee:20:ad:24:00:95:
14:39:2a:d8:6e:70:47:8d:19:06:4d:c3:4c:c4:68:66:27:a0:
dd:54:bb:a1:ce:be:ee:6f:fa:d6:13:80:68:b6:28:cb:bf:9a:
2d:57:e0:90:a8:5e:3e:5c:84:44:46:59:66:12:ec:c2:a2:87:
78:25:c7:c8:d1:f4:fb:b1:33:0e:f5:16:5f:be:91:22:4a:6f:
2c:73:4c:67:d5:c2:b8:64:e7:1e:aa:f2:f0:03:b8:f6:8d:1a:
71:c7:c6:67:b7:48:db:7a:95:3b:b4:b3:10:cd:55:8b:65:02:
a4:c3:32:08:b7:f2:db:1e:35:3f:b6:6e:3f:4b:f1:14:c8:1b:
2d:60:6f:3d:3b:1f:81:6f:0b:e7:17:a5:bc:f2:20:fc:f5:02:
96:59:9f:7d:1a:df:86:e8:fd:be:13:f4:c4:27:9e:d5:b9:65:
d0:cf:32:33:18:c7:af:15:93:be:07:8d:80:02:5b:ac:9e:0e:
16:20:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 22:36:55 2025 by rpki-client