This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
File: _un91LDoMTGIoIn3qH-30BUyU4g.mft (raw, json)
Hash identifier: Oi0LtdGlb9nTicCbpW3H8AiLysJjCKI1zNm7OSKyMPY=
Subject key identifier: F3:F5:B5:22:33:BD:CF:74:53:21:0B:7B:8A:41:F9:3F:7F:46:E3:E6
Authority key identifier: FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
Certificate issuer: /CN=A918C673/serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
Certificate serial: 06D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
Manifest number: 06CA
Signing time: Mon 22 Dec 2025 21:22:10 +0000
Manifest this update: Mon 22 Dec 2025 21:22:09 +0000
Manifest next update: Mon 29 Dec 2025 21:22:09 +0000
Files and hashes: 1: _un91LDoMTGIoIn3qH-30BUyU4g.crl (hash: A/wocFek6VoGacgBO+qkBfufb/PRTHIKCDDP/xu8HTY=)
2: 5803FE3880CD11EB83E8035FC4F9AE02.roa (hash: NgLitwn58Hzqdz8jFqI6KtHUu7WwdEhFCnvHC3Qm5IU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl
rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1744 (0x6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C673, serialNumber=FEE9FDD4B0E8313188A089F7A87FB7D015325388
Validity
Not Before: Dec 22 21:22:09 2025 GMT
Not After : Dec 29 21:22:09 2025 GMT
Subject: CN=6949b681-8222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:fd:d3:ce:45:9e:b3:f6:8c:fb:2c:a9:0c:
40:7c:5e:2d:28:cd:72:99:e5:8a:e1:e8:5d:01:d2:
28:8e:c9:bb:64:86:26:43:6e:10:7d:2e:aa:91:09:
d0:9c:eb:c6:83:6e:74:bc:ec:0a:b2:d9:31:b6:83:
b1:73:5c:cd:bf:f6:89:e4:fc:c4:0b:e7:d6:fc:01:
2e:6a:ac:5b:5a:db:7f:e6:47:ed:0d:a8:22:37:ab:
96:b5:db:67:b9:1a:31:9f:3f:2d:d4:11:58:c9:1c:
4a:6f:e0:91:16:ab:a6:be:7a:72:60:e4:45:a3:62:
cb:8d:3b:bb:74:3f:74:78:39:46:c1:64:d0:0d:ef:
1a:40:45:f1:6b:7e:32:05:8a:9c:c4:13:7e:09:b1:
5d:c1:17:e6:84:ce:8d:1f:ef:04:1f:e3:70:42:f8:
89:6a:02:18:53:2a:fe:19:76:33:ae:93:06:51:cb:
61:a6:f0:7e:7a:57:a4:00:84:32:66:a6:5e:87:59:
13:44:15:45:fe:bd:bb:1b:75:de:9e:00:c9:5e:49:
d4:52:8a:bc:07:63:b4:27:da:8c:04:44:8d:95:79:
44:41:e3:84:c1:1a:5d:dd:33:4a:44:94:77:d1:dd:
1f:d2:0e:5f:fd:bd:89:53:86:fc:24:a4:cb:84:b3:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F5:B5:22:33:BD:CF:74:53:21:0B:7B:8A:41:F9:3F:7F:46:E3:E6
X509v3 Authority Key Identifier:
keyid:FE:E9:FD:D4:B0:E8:31:31:88:A0:89:F7:A8:7F:B7:D0:15:32:53:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_un91LDoMTGIoIn3qH-30BUyU4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C673/AE5FB10280CB11EBB77AB85DC4F9AE02/_un91LDoMTGIoIn3qH-30BUyU4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:1f:ca:cb:01:4d:33:fa:b8:5f:ce:c5:e9:81:9b:bd:af:19:
f2:95:f5:be:e5:02:bb:db:44:73:eb:f7:40:11:28:d1:62:05:
04:0b:c3:ce:21:25:8a:8d:4c:dc:3e:39:25:8e:1f:1b:c6:8e:
a0:b6:40:f5:50:f2:c7:24:ac:02:53:87:f0:20:fb:6f:30:22:
47:a9:59:de:04:1c:b9:06:7f:8f:58:44:0b:9b:d9:72:86:db:
ce:40:9b:df:2f:c1:92:fc:3e:62:68:c1:bc:a9:ab:2f:82:ad:
46:ff:5f:34:8d:79:73:f8:3a:a1:0e:ff:dd:7e:aa:b5:ef:a9:
ff:c0:35:55:c7:de:18:08:10:ef:69:78:af:63:b4:65:f8:fa:
f7:e0:e9:a2:13:b8:21:09:8d:06:dc:32:be:97:2c:80:8f:b8:
13:d8:5c:b6:b9:46:21:0d:d5:ec:04:24:82:05:a3:72:0f:25:
e0:84:e9:ba:ab:48:e3:ce:52:95:9d:a9:35:37:d2:46:ab:c6:
2a:af:7d:d1:6d:3d:aa:95:cb:6b:bd:5b:9b:3d:31:79:e5:b4:
0c:e8:92:22:84:79:87:36:2b:02:c0:9c:86:c4:3d:42:fd:c7:
c9:f9:a4:5f:c0:f0:a5:ce:a9:62:7c:e0:8f:cb:15:1c:f7:41:
3e:35:b0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:52 2025 by rpki-client