This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
File: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft (raw, json)
Hash identifier: PXZhJPZCILjskE/QLCZ/zqb/CeR4ZDkpr2U+dXOW2LY=
Subject key identifier: DB:89:74:80:A8:3B:15:20:E2:8F:D9:C2:FC:31:12:F9:CD:39:AE:40
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
Manifest number: 01EA
Signing time: Tue 23 Dec 2025 01:45:44 +0000
Manifest this update: Tue 23 Dec 2025 01:45:44 +0000
Manifest next update: Tue 30 Dec 2025 01:45:44 +0000
Files and hashes: 1: ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl (hash: r3ihTMq6TlhzRcz3eC8wRvSKBKw3oUL32UdKglFQONI=)
2: 9F79846406E911EE88450147C4F9AE02.roa (hash: LvbEefo/jIzRbw1qkY9iXb8amhsCn8ZD4oSsz6Ev0wA=)
3: 9EE8F55206E911EE88450147C4F9AE02.roa (hash: R6zicuGc5j5WIEznRKzKMEUHTEcekYg+eZaMy/xb74A=)
4: E5925096093911EEABCFA170C4F9AE02.roa (hash: COVvPwRRBQaYkijAL/8dGT7ATCUM7/oNgeAZamGV0AU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:45:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Dec 23 01:45:44 2025 GMT
Not After : Dec 30 01:45:44 2025 GMT
Subject: CN=6949f448-694a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:ff:03:c1:54:cd:cb:ef:16:f8:59:9c:93:
a2:19:50:49:5d:00:6c:b6:a5:85:fe:f0:72:c6:55:
d3:db:03:83:e4:f5:8a:7c:fa:b8:85:88:1c:1e:b7:
3c:f8:71:a2:a5:ad:71:b5:f7:2d:2f:6f:e4:98:cf:
be:72:fd:04:20:c7:20:61:bc:ed:20:98:61:68:a9:
ce:95:6c:32:d0:1c:3c:0e:f6:5d:5e:fc:d5:44:f7:
ac:43:73:fe:f0:e6:56:9d:36:16:67:48:1a:8d:49:
ec:21:a2:2a:8e:3a:71:50:91:0c:1e:47:0a:ea:de:
74:58:19:5c:eb:67:56:87:07:20:9f:a8:ca:9b:b8:
80:7b:11:b8:e3:ea:4d:8c:75:73:7a:0c:47:1e:4d:
5c:04:b3:2b:f5:50:7b:b4:fd:73:9c:48:ee:ef:8a:
e3:f2:db:66:e6:ce:5e:e6:9f:cf:2a:c0:2a:94:19:
06:00:33:9f:5a:45:0e:b3:f1:f3:ed:29:24:3a:27:
d6:b9:b7:b5:52:8a:b1:21:1b:6e:f4:76:8d:b8:8a:
b1:64:de:b3:02:02:13:61:31:2b:7c:d1:5b:92:66:
3a:36:0a:1a:5a:62:1d:e8:73:9e:83:a5:80:2c:53:
1a:4d:a3:75:0c:7f:2d:ca:fc:03:1a:45:2c:64:ca:
af:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:89:74:80:A8:3B:15:20:E2:8F:D9:C2:FC:31:12:F9:CD:39:AE:40
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:c3:06:27:3c:58:7d:d8:4a:7a:46:bc:66:37:ba:01:52:e1:
70:12:1a:5a:1f:b3:67:b5:f3:93:19:49:60:42:e4:79:e3:dc:
6f:74:eb:da:41:20:96:40:8d:39:ab:4d:9e:4a:92:ed:7d:9c:
91:b7:de:09:2b:24:58:6f:d9:86:25:c6:24:44:18:4f:dc:23:
4b:af:41:e8:6f:0e:eb:29:34:bf:57:2d:ee:d9:12:7f:4b:98:
a7:0b:71:69:73:14:38:ea:2d:86:d4:b1:bc:12:d0:ea:5f:f3:
17:7f:f8:29:c2:97:7b:45:e4:af:88:07:fe:8e:5e:9e:7f:5b:
fd:5c:5b:0c:ed:b2:bb:75:8d:92:16:43:5d:7c:d7:2e:ba:43:
50:a9:d6:df:0c:11:eb:40:a7:ec:5f:40:05:10:dd:a0:95:13:
f5:5d:48:f4:05:a5:d8:86:ad:8b:3c:57:19:47:83:1c:a0:0d:
fa:71:44:6d:2a:e2:24:17:d5:8b:27:a5:1f:36:07:b5:5c:44:
95:95:d9:a9:a5:cb:51:d1:62:5a:74:bb:f8:69:12:0b:30:4b:
fd:03:c3:59:e3:4c:f7:71:f9:45:e9:c3:d2:53:62:79:87:c6:
00:bd:34:ce:11:40:98:61:ca:f0:52:9c:cf:03:61:7e:2e:f0:
21:5e:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:16 2025 by rpki-client