This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
File: _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json)
Hash identifier: EBBYwNedfeUp6GxmvJTWoQ+jBX1ubGOI7PR88FVSei4=
Subject key identifier: 23:43:07:04:11:53:B2:15:33:A2:58:BD:0B:44:A8:62:3D:CA:3C:62
Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
Certificate issuer: /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Certificate serial: 1F15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
Manifest number: 1F0A
Signing time: Mon 22 Dec 2025 15:49:57 +0000
Manifest this update: Mon 22 Dec 2025 15:49:57 +0000
Manifest next update: Mon 29 Dec 2025 15:49:57 +0000
Files and hashes: 1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: +m1WTmkN2B80rObVSRPnJmw58leRFAIvPk4sFFA/m0s=)
2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: C0V7rJkkp2JIZ4YaUDj+rMPHF5Fx4yPepeCUU5377D8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7957 (0x1f15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Validity
Not Before: Dec 22 15:49:57 2025 GMT
Not After : Dec 29 15:49:57 2025 GMT
Subject: CN=694968a5-d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:26:ba:bd:d2:28:d4:2d:5d:50:62:e0:0e:
42:12:fb:25:3a:dd:01:76:f3:dc:c6:6a:05:32:2c:
52:54:1b:d9:95:94:d3:ac:b3:03:79:50:b6:e0:08:
bd:45:69:ae:5b:14:25:c1:44:0d:87:d8:9c:5f:c1:
11:51:01:03:fe:68:4d:ee:a3:ce:d7:26:45:36:75:
4d:3c:82:75:19:aa:fe:08:20:13:8c:57:e0:20:76:
ad:2c:b0:1f:ad:de:61:f3:a3:6b:c3:1c:d5:6e:df:
b8:a6:03:62:8e:56:75:81:b3:10:70:d3:f4:04:a1:
e4:4e:0d:00:8d:7a:61:5a:56:af:ce:87:58:07:79:
04:86:46:0e:fc:03:7f:c2:0e:6e:5c:d3:cb:de:6e:
87:24:fd:9d:57:d8:e9:1c:ff:ac:bc:b2:bf:3a:2f:
f2:d1:d9:41:69:fd:77:fd:05:99:f7:23:29:44:a7:
67:80:c0:41:50:d8:df:23:15:78:20:8b:b1:fc:78:
37:d3:a9:8f:00:fb:52:ac:df:5f:95:3e:4f:15:48:
de:bb:20:53:cd:d8:ad:69:7e:fc:74:99:a0:b3:31:
ad:fb:5e:1d:eb:8c:2c:73:b1:fb:2f:6b:5a:0c:78:
d5:17:b9:00:0b:95:e3:f2:0a:34:61:42:1c:88:93:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:43:07:04:11:53:B2:15:33:A2:58:BD:0B:44:A8:62:3D:CA:3C:62
X509v3 Authority Key Identifier:
keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a9:a1:97:58:7f:3c:c3:6a:00:6c:d1:62:a0:60:d5:7f:87:
23:ad:a0:0f:46:5b:f0:91:9f:6f:a4:8b:5e:ff:82:f1:b3:e9:
07:a3:9e:6b:93:82:42:54:a1:51:44:48:50:5f:6d:e2:d1:47:
77:d7:8d:7b:76:94:28:97:57:89:a4:be:7b:3e:32:7f:7a:bd:
22:b1:81:86:0d:77:32:17:7a:d8:9e:e6:15:b4:9d:88:5b:9d:
e6:17:24:6d:e9:fa:e8:52:20:81:3f:ba:e4:e0:46:5a:00:c1:
d0:1e:52:d9:36:44:eb:b7:c3:e1:2d:2b:9b:ed:28:50:2d:1b:
a6:22:5a:cf:79:66:3f:40:da:2b:d1:31:b8:31:d3:f6:1e:bc:
b9:db:da:df:f1:70:db:1c:10:73:6b:e0:88:f0:db:84:56:2a:
de:21:89:63:f3:25:ef:46:34:8c:00:18:2c:cc:ab:85:e9:1d:
06:45:99:6c:7f:78:d6:32:38:80:e4:43:8d:e5:00:15:dc:0e:
2d:90:89:29:cf:f5:40:30:63:ce:fc:5a:f3:f5:9b:71:03:77:
7a:69:7b:e3:00:19:03:c9:4d:3e:5a:e7:98:41:d2:c3:c1:fb:
bf:76:f5:06:79:ce:29:26:d8:75:54:68:eb:e5:1e:1e:eb:b5:
86:b8:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:06 2025 by rpki-client