This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
File: V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft (raw, json)
Hash identifier: JJs32DFU7tdZrh+vpGeYsHhiz6Jp4+TFzergbJk7p6I=
Subject key identifier: C6:A8:DD:37:BC:2C:B9:8E:DC:E2:AF:B2:D6:4A:1C:05:D9:94:E5:87
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
Manifest number: D4
Signing time: Tue 23 Dec 2025 04:42:25 +0000
Manifest this update: Tue 23 Dec 2025 04:42:24 +0000
Manifest next update: Tue 30 Dec 2025 04:42:24 +0000
Files and hashes: 1: V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl (hash: wnqrHNGNZSZL78lySW5dFyoLODo6gzQ/O95hKADQF74=)
2: EC509DE4501211F0BE5D2025C4F9AE02.roa (hash: 59709TYd4BYZbsPTssB//DoW2gqjEPI/Hf7sdt1S0uw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Validity
Not Before: Dec 23 04:42:24 2025 GMT
Not After : Dec 30 04:42:24 2025 GMT
Subject: CN=694a1db1-b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:07:95:75:49:6e:b6:8c:4a:e6:14:aa:05:
b7:a6:f6:88:de:6e:aa:17:7a:7e:81:c5:d2:c8:69:
4e:1f:62:ec:c2:a1:e2:b4:7f:1a:b8:05:8e:e0:e6:
30:3f:62:63:58:a2:8f:a0:18:f4:19:c1:d6:0a:4e:
35:24:7c:d1:ef:e0:d9:46:07:da:a0:6a:92:9e:50:
2d:a1:b6:b1:c0:97:bb:b0:5c:c1:f6:82:d2:e2:88:
38:52:33:14:24:94:41:f3:4b:95:12:69:03:04:53:
7e:47:35:58:1f:16:3e:80:df:31:96:1e:51:61:68:
c0:80:80:5c:a8:ad:d5:59:3c:f3:b0:91:af:5e:0b:
76:b0:0b:43:02:f2:7a:19:c7:c4:50:6f:29:8e:db:
ef:ac:e2:02:4b:c2:91:b5:97:a7:c5:da:35:9c:35:
d1:d1:b3:b8:61:0e:22:42:ee:28:81:ed:3d:c9:63:
26:59:a3:2f:cc:9c:a6:5e:11:fd:16:5c:3c:5b:aa:
7c:cd:0d:1d:a1:81:28:d2:b0:69:22:9c:e6:f1:31:
0e:a0:2e:d8:41:64:17:2d:b7:45:b6:ec:a3:fb:aa:
8b:45:f9:59:1e:3d:e9:cd:a3:b9:ab:7b:d7:93:61:
d0:4b:52:64:28:21:ba:c9:69:2c:14:4b:fc:31:f3:
34:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:DD:37:BC:2C:B9:8E:DC:E2:AF:B2:D6:4A:1C:05:D9:94:E5:87
X509v3 Authority Key Identifier:
keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:60:08:77:3c:e9:3c:93:ae:7b:40:27:00:0d:c5:f1:81:0f:
88:74:e7:83:2a:af:f7:b8:c7:49:c1:f6:94:ea:96:a6:e4:e2:
82:7d:2f:23:e8:f6:f7:5e:65:7c:19:03:5f:7b:89:11:2a:65:
01:02:39:f5:d8:06:2a:e4:fb:24:40:f4:85:ed:d1:c6:f5:13:
a7:d1:30:ca:af:c8:f3:84:bf:f0:0b:3a:a8:b6:69:02:20:2c:
2f:51:61:2c:ef:0d:8b:2a:31:2f:6b:8c:be:80:95:d2:95:eb:
28:8c:42:99:da:47:c3:9e:1b:ac:43:97:22:9e:06:7f:18:ea:
6b:17:c3:ba:1b:3d:ea:30:f4:eb:28:6c:2e:ed:7c:e6:52:11:
4f:53:a5:11:53:f7:1f:13:9e:f6:92:95:9a:b8:b4:34:f9:92:
42:7a:93:69:21:92:9b:94:9d:2a:97:79:31:fa:db:5c:52:9a:
db:50:f4:84:1e:d7:41:ee:1a:d0:a5:56:4f:e7:29:0d:95:98:
14:4b:4f:65:71:06:7f:06:a7:1c:b9:75:74:7a:1a:b6:e9:39:
e3:3e:1f:43:56:19:46:cd:52:e0:15:a8:c5:23:e5:42:2e:f4:
cd:39:9e:c8:90:22:30:59:f6:b3:6f:51:f7:b9:cd:de:1b:eb:
e1:78:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:09 2025 by rpki-client