This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
File: RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json)
Hash identifier: mXJf2t6PaWyzCT8/v3HVuyx7TxYCyV+jh9EoWCD5WVk=
Subject key identifier: 78:76:1B:65:6C:38:33:72:09:09:B1:1D:C2:18:CA:39:C1:FE:AD:76
Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Certificate serial: 01EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
Manifest number: 01EA
Signing time: Fri 19 Dec 2025 01:48:03 +0000
Manifest this update: Fri 19 Dec 2025 01:48:03 +0000
Manifest next update: Fri 26 Dec 2025 01:48:03 +0000
Files and hashes: 1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: oslIFQ/AwXhg+Vwtyo7okXniQjR3iwwjbZmfEJMr46Q=)
2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: BCIBhB1yRhPPINtU+Jvj6+AcCagEYHcs0oGO7PLSo3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A
Validity
Not Before: Dec 19 01:48:03 2025 GMT
Not After : Dec 26 01:48:03 2025 GMT
Subject: CN=6944aed3-a032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:5d:85:09:51:9d:f3:41:c6:d2:51:5a:ac:
de:df:a2:dc:3a:ac:9e:fd:14:0a:c7:14:3d:33:94:
cb:c4:b0:91:8f:59:67:1d:46:cf:6f:da:fd:3f:1f:
f7:57:68:fd:86:0a:18:19:3e:ca:ca:1a:0e:f4:dc:
18:ff:33:af:e7:4f:d4:75:33:23:fa:37:66:89:1a:
89:e1:3f:d1:eb:55:55:53:b7:06:89:28:93:0a:47:
98:09:68:ca:9c:55:99:8c:82:55:8a:d1:41:8f:0e:
3d:ac:ed:65:80:bb:c0:f9:a2:05:65:ff:3c:87:5c:
c4:d0:bb:71:ee:d5:02:3d:63:de:bb:e7:b6:93:e6:
51:ee:75:71:c2:cb:da:1d:c3:58:c8:67:11:46:1f:
df:c4:c8:bf:8d:af:d5:d9:5b:9d:fb:67:c2:0d:98:
c4:66:ee:5b:0c:cf:28:d5:ba:7e:10:99:02:87:b2:
31:8b:be:3a:3d:de:e0:c6:9d:f7:f9:a9:82:f4:33:
78:9b:3e:6b:b5:ff:5f:e7:60:58:24:37:78:6f:a0:
18:2c:58:07:d0:d2:bd:b5:5c:92:c4:46:dd:21:35:
d0:e6:95:69:b0:dd:8b:84:2b:ed:6d:e0:4f:05:9f:
97:86:e3:ef:80:bc:a6:f0:2f:d2:d8:4c:92:5d:ab:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:1B:65:6C:38:33:72:09:09:B1:1D:C2:18:CA:39:C1:FE:AD:76
X509v3 Authority Key Identifier:
keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ed:25:62:c7:4e:40:b1:86:10:2e:1c:a7:40:b4:4b:98:24:
6d:a8:08:4b:3b:15:46:bf:c3:bf:79:9f:8b:c2:c7:62:e0:99:
20:0e:c0:f8:46:93:e9:e8:a0:1c:ab:1f:39:c1:79:9b:f8:0d:
ce:3b:f7:31:dd:46:bd:bf:a8:88:78:38:d2:7c:fe:47:40:4e:
d7:25:39:e0:e3:22:12:6d:87:b4:f7:e1:49:40:7b:d7:2d:c0:
9e:7b:77:3e:2c:cd:21:3a:7f:ab:ab:ef:23:95:e3:d4:61:75:
00:0c:4c:0a:70:cc:6c:9b:55:6c:f5:1f:34:1f:2e:ab:db:8e:
39:0e:91:76:67:2b:2b:f5:c2:92:8a:15:7c:57:35:70:86:c0:
cb:2e:a2:b0:43:b6:0d:67:b2:3c:09:1b:2d:e8:fe:31:4c:d7:
44:95:67:85:16:22:d6:0c:4c:2e:6e:e2:33:6a:9b:fb:86:13:
26:20:66:1a:e5:0e:22:cd:b4:94:92:fa:1d:43:42:ea:56:79:
af:53:e7:d4:cd:21:1f:04:42:04:c4:a5:f5:fc:c3:ca:56:8e:
b8:a5:6f:3a:f5:6f:fe:42:6e:80:a0:e8:d6:07:1d:17:2a:b0:
3b:b5:79:c5:90:52:82:3f:33:82:c8:ce:e6:0a:f6:1e:b0:05:
90:ee:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:17:24 2025 by rpki-client