This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
File: MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json)
Hash identifier: 9ktlpvh3YEXp9J85lYiHNEdaxkEMw/06diCrf1T7V+c=
Subject key identifier: FA:0B:96:1D:3B:CE:94:37:C5:93:70:87:EC:0D:FE:62:81:83:2C:FE
Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
Certificate issuer: /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Certificate serial: 06D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
Manifest number: 06C8
Signing time: Mon 22 Dec 2025 21:25:27 +0000
Manifest this update: Mon 22 Dec 2025 21:25:26 +0000
Manifest next update: Mon 29 Dec 2025 21:25:26 +0000
Files and hashes: 1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: Tr7WzRs4d46ytOOVkyLDtOlkVlMUv54SOFQZgBp7UK8=)
2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745 (0x6d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Validity
Not Before: Dec 22 21:25:26 2025 GMT
Not After : Dec 29 21:25:26 2025 GMT
Subject: CN=6949b747-8128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:db:1a:6f:02:6b:9e:c8:78:e2:d3:8b:f5:
50:5f:e3:9a:b8:ae:6f:ce:b5:7b:1f:91:eb:9c:47:
1c:b9:a3:84:51:df:5a:56:8b:78:2f:a2:cd:9d:4b:
94:f3:55:3e:61:e8:55:d4:bc:c4:09:e1:41:da:ff:
45:e8:b4:91:d0:65:65:2e:ff:d9:b8:6b:3e:97:4e:
c7:6d:2a:22:2c:37:80:97:28:d0:e7:35:37:c4:cc:
62:35:fa:fe:6c:e5:f2:db:66:66:2f:c7:19:4c:cc:
f3:16:6b:b0:7a:8a:aa:c7:6d:41:ab:11:09:87:6d:
43:e0:5d:d4:83:d6:ad:ce:67:8a:47:52:4c:e4:05:
32:0f:fe:3a:c4:3d:ec:45:37:a0:10:3e:4e:49:f4:
7a:b3:b6:52:9a:bc:43:95:f7:75:f3:63:11:bc:93:
9e:a5:06:25:40:5d:a6:c6:ee:3a:c8:d7:df:0c:39:
95:a3:b5:fb:19:6d:05:8f:62:6d:6e:44:ff:96:3a:
d1:f9:31:a9:6c:86:60:a8:9a:f1:d6:39:01:33:a0:
42:8d:3d:ae:33:c8:69:3a:2a:60:a3:d3:1f:7c:c9:
a6:51:08:7b:29:c0:2a:d1:06:3a:1d:ae:ed:87:70:
75:9c:53:4a:1c:a6:52:00:47:de:62:85:97:7b:51:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:96:1D:3B:CE:94:37:C5:93:70:87:EC:0D:FE:62:81:83:2C:FE
X509v3 Authority Key Identifier:
keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a8:f8:d6:5a:7d:fc:2f:d0:85:2f:45:7c:1b:14:c3:8b:c0:
00:27:fb:e1:75:83:07:78:24:33:9c:48:1c:23:8d:82:80:2e:
d0:d9:8a:a7:a3:20:a0:b2:7a:64:4c:62:d1:b0:dd:7f:5b:80:
d0:8a:92:15:c3:6d:7f:d0:2f:cb:6c:f4:1b:08:56:dd:af:0d:
d1:8b:b5:66:7a:9e:a6:bb:52:63:04:0a:70:c5:e7:49:4d:c2:
9e:6a:61:e8:50:ce:4a:b1:44:3e:26:0c:95:c6:a7:ea:bf:68:
c3:e0:dd:b5:21:66:2d:d1:14:66:7c:51:2e:16:36:fd:b8:0c:
43:2f:48:de:12:64:70:50:f9:2d:5e:e4:96:e0:37:f6:99:94:
9f:7c:c9:ff:f0:6a:56:f7:4c:16:5b:ec:21:a0:2e:b4:32:8a:
f3:b6:70:72:30:52:da:ca:25:4b:2a:18:bb:5a:75:5e:7b:64:
74:8b:02:dd:eb:5f:b1:fa:ac:59:63:ea:cd:5f:09:d2:91:a5:
0b:55:50:e4:ba:f4:9c:91:b4:b7:a2:e7:3b:25:32:cc:0b:35:
64:81:d3:42:75:34:c4:57:ba:be:74:38:65:87:e8:25:4e:89:
4f:8c:d3:5d:1a:f3:9a:7c:ea:07:de:c0:2d:59:94:61:8b:89:
81:0a:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:36 2025 by rpki-client