This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
File: FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft (raw, json)
Hash identifier: UmApkcEgmDXDDjfyC5is93hakqQeLyAflTnJBk5IKd0=
Subject key identifier: 53:14:38:D2:92:91:B0:3B:56:67:4A:30:D5:4F:CF:75:62:4D:4F:69
Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Certificate issuer: /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
Manifest number: 22
Signing time: Tue 23 Dec 2025 06:34:10 +0000
Manifest this update: Tue 23 Dec 2025 06:34:09 +0000
Manifest next update: Tue 30 Dec 2025 06:34:09 +0000
Files and hashes: 1: FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl (hash: WtQIpsd/40kB/nXV0PzLKaz8G+3aaMDapFG3Xhg6zSY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Validity
Not Before: Dec 23 06:34:09 2025 GMT
Not After : Dec 30 06:34:09 2025 GMT
Subject: CN=694a37e2-450e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:d6:ce:86:14:80:90:02:50:d8:ab:be:53:
98:5b:73:28:f7:85:e9:cd:54:e1:6b:36:6c:3b:e9:
da:47:05:59:b4:06:fa:cc:e3:ed:b7:50:fd:5b:54:
54:94:75:71:c5:1c:7b:de:9e:fb:aa:6c:76:13:5d:
65:44:26:eb:d7:a9:1b:70:60:c5:ac:8b:0d:4c:14:
19:8c:07:a1:56:70:9b:e2:0f:db:24:b9:1b:f0:25:
6c:f0:17:9d:4a:b3:06:83:1e:5e:08:7a:d5:2e:8c:
1f:e5:b3:06:0f:bf:5f:8c:17:d7:51:3c:b4:29:f1:
fe:64:c9:c9:14:8f:2c:7e:66:bf:b3:dd:f8:f8:f2:
3e:dd:10:68:c0:37:c9:26:0b:84:96:d0:02:3c:fd:
97:b1:64:1e:90:89:d2:23:9d:fc:82:50:61:77:7c:
d7:5a:22:f6:b6:d1:6f:b5:70:22:0c:88:1a:96:ee:
b3:1d:dc:50:e4:c6:bd:95:d4:24:0c:48:bd:cf:99:
b2:b9:43:56:a5:18:a5:52:86:17:e2:25:9f:a2:2e:
91:d2:bb:6a:2e:17:72:32:fb:9b:be:9d:4f:69:82:
17:c1:43:3b:65:4e:a8:da:48:2f:e4:8b:0a:f7:81:
1a:57:a3:a6:7d:ae:de:87:09:27:75:57:ad:45:0c:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:14:38:D2:92:91:B0:3B:56:67:4A:30:D5:4F:CF:75:62:4D:4F:69
X509v3 Authority Key Identifier:
keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:e2:d6:4a:fa:45:e1:42:56:01:dc:d8:57:56:2d:db:46:43:
f3:85:93:f9:f5:c3:5f:72:09:e3:f1:19:1f:e6:c3:56:99:73:
43:e5:aa:8a:bb:d8:17:30:69:7e:35:a4:e3:be:3e:4e:b6:b8:
1a:c5:50:68:96:74:c2:ce:79:1c:9b:03:8a:b5:4e:93:80:de:
ff:54:05:2d:95:aa:b5:9b:94:74:4a:06:d9:7f:c5:4e:f3:a9:
dc:da:d5:75:88:9e:5b:d5:10:01:45:ab:69:dc:bd:71:4e:99:
cb:66:ae:55:5a:1c:fc:92:52:8c:42:da:76:eb:ad:dc:b2:07:
7e:df:4d:07:6c:9f:49:05:21:c3:c5:53:3b:5a:d4:92:c9:fd:
1d:0b:8a:b2:4a:0c:1f:3d:c8:e0:e3:82:24:e0:b5:b7:f1:d1:
16:b5:dc:b1:36:10:a3:3f:ce:8f:b8:83:c0:03:5d:69:61:27:
ab:1f:1c:79:48:e9:c5:8f:85:37:07:32:31:89:e5:ea:94:4b:
67:6b:e4:84:7c:84:be:f9:13:32:a2:37:f7:fb:ad:63:45:90:
ee:17:74:bc:35:5f:7e:0d:80:c6:f8:1c:36:51:e5:8e:2d:1f:
1f:91:51:b8:ec:bd:d9:c2:f7:73:1e:1a:e8:96:42:dd:75:fa:
d6:03:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:48 2025 by rpki-client