This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
File: aj72cYLbsPbM88pBN4wBGYBq6b0.mft (raw, json)
Hash identifier: PORhG7TFulOuX4bspL90RboRfMDVuzzwKkVZ78uTjSw=
Subject key identifier: 66:6F:50:73:D1:F9:31:7A:C1:83:92:B5:0A:D1:DD:70:3C:63:24:88
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Certificate issuer: /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
Manifest number: 92
Signing time: Fri 21 Nov 2025 04:30:59 +0000
Manifest this update: Fri 21 Nov 2025 04:30:58 +0000
Manifest next update: Fri 28 Nov 2025 04:30:58 +0000
Files and hashes: 1: aj72cYLbsPbM88pBN4wBGYBq6b0.crl (hash: 3jjk5uUj6/6bKcxkLAulBmTmXp+TJzfEq2QwnFmiHU0=)
2: FDE6938CE90C11EFB9D98326C4F9AE02.roa (hash: EQY90pkMKZS20T7XhciTL191HbTMnbpWtQHaja8QyGI=)
3: F449A3FCE9C811EF9972A934C4F9AE02.roa (hash: 7MwfNHRXASMEn22ZfT4zj9oG/ZQKY9GDP1pjifjdSXI=)
4: FD63D5BEE90C11EFB9D98326C4F9AE02.roa (hash: XHfUu+5yh0x5y1fbUjOYEtUpMyJC2J2Z1oZf8nnZcak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Nov 2025 04:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Validity
Not Before: Nov 21 04:30:58 2025 GMT
Not After : Nov 28 04:30:58 2025 GMT
Subject: CN=691feb03-509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:29:6b:1a:46:f1:03:ee:ea:29:6e:2f:ef:
00:96:99:77:9e:87:8a:a5:6e:78:a3:74:a7:6d:b9:
f7:27:6d:b5:a8:d2:77:55:82:ab:db:e5:e1:02:25:
0a:6f:bc:0a:f5:25:70:f6:b4:6c:7b:39:7a:dc:1b:
58:b4:8f:6f:6f:8c:e5:e4:ea:6c:bb:9c:c0:18:31:
83:7d:a0:b3:73:2f:10:11:32:89:58:a9:8e:b1:01:
ee:5f:f4:68:2f:26:ed:a3:1b:97:3d:64:9d:47:4f:
27:36:1a:b4:0c:ee:66:f2:5d:34:fb:04:87:aa:f7:
dd:24:e0:22:ff:cd:3f:ec:7c:11:c5:5d:f8:93:e8:
30:72:98:33:8f:44:aa:74:e3:93:f1:b6:4d:91:8c:
e3:89:f9:c0:ed:12:b7:2e:66:25:07:3f:15:99:c9:
b5:7e:1c:cb:48:35:5e:7f:ea:8f:e8:ba:6c:b9:f6:
27:27:1e:ab:b0:b0:4f:c7:b3:e2:93:cd:bf:0a:6d:
62:f8:ba:fa:81:84:de:ce:99:01:c7:6b:6b:1d:57:
17:dc:5d:55:90:69:87:48:9d:37:ef:08:67:2e:c9:
94:9d:23:ff:40:2c:46:46:34:7a:3e:1b:c0:48:40:
f6:37:95:04:98:35:94:0f:9c:e0:e4:30:ca:b9:b3:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:50:73:D1:F9:31:7A:C1:83:92:B5:0A:D1:DD:70:3C:63:24:88
X509v3 Authority Key Identifier:
keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:d3:13:e6:cc:ee:5e:fc:2e:79:ba:3e:0b:ef:77:3d:1f:fc:
b4:23:d2:e3:37:5a:9d:20:33:f7:c9:f3:bc:a2:7c:4a:04:46:
1d:56:4d:c7:8f:6d:13:3e:3a:60:dd:9d:6e:6a:6d:6f:2a:2d:
52:81:9b:71:3d:42:51:21:02:20:51:90:94:87:57:36:4a:31:
5f:99:40:96:8a:90:b8:14:ba:13:50:6c:6e:43:da:20:85:d4:
f8:ec:b2:c9:94:22:81:1b:36:13:97:1a:aa:0a:b6:e9:92:96:
52:e9:d7:61:36:3e:af:ff:16:ef:48:1a:c3:a7:37:dd:a4:c2:
c6:ce:c1:1e:fb:af:0c:89:69:a1:20:e8:7a:87:a5:8b:7f:aa:
cf:f0:d4:d8:4e:ba:0d:2d:27:be:db:af:2a:f6:d4:44:6c:2e:
44:20:37:07:43:ae:fb:aa:94:ba:6f:b9:c7:73:ef:57:b6:31:
22:1f:d8:75:23:8d:0e:3e:f0:4e:b0:79:d9:09:ee:58:bf:24:
42:9f:2a:ba:e9:ea:7c:3e:af:c2:cc:e8:49:c2:00:2a:24:8c:
96:b7:c4:2f:d1:c1:b9:74:e5:c3:a3:33:28:d1:ca:5a:fa:fb:
ac:38:f6:6c:04:27:29:bc:e7:cd:60:c3:75:59:c8:3f:1c:e6:
91:52:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:44:24 2025 by rpki-client