This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json)
Hash identifier: Qjev1unN1T6q3U7uj5ZIZmXuRrKcpFVXvVq0memdp0Y=
Subject key identifier: 77:67:FF:02:02:BF:42:65:79:25:C5:81:91:B6:8B:84:2A:D0:FE:48
Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Certificate serial: 0499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
Manifest number: 0494
Signing time: Mon 22 Dec 2025 23:07:17 +0000
Manifest this update: Mon 22 Dec 2025 23:07:17 +0000
Manifest next update: Mon 29 Dec 2025 23:07:17 +0000
Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: EDBJqO+LZ99eAUlydIfEmBsgiTwfNmJOrsg6U67D/tM=)
2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: 5jUnpiK90pdhSrw0aDnaZCFzrrcXvAV1QTg4pIkNsPM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7
Validity
Not Before: Dec 22 23:07:17 2025 GMT
Not After : Dec 29 23:07:17 2025 GMT
Subject: CN=6949cf25-7ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:40:55:c7:f8:8d:bf:dc:9f:77:a1:43:ed:
f5:9a:16:9a:d4:ce:b5:67:b6:25:4e:f0:69:fe:81:
3f:e6:3f:55:7e:b3:f6:0f:7a:72:8d:0b:eb:70:df:
1f:db:24:03:c1:02:6a:93:c9:83:12:25:57:68:21:
38:dc:bd:8a:33:3d:f6:26:37:5b:d5:bf:d9:68:31:
bd:55:2b:a1:e3:70:06:b7:a1:3b:44:af:76:22:37:
42:93:cd:42:38:1e:46:fb:94:19:1c:f5:1b:3d:d8:
f3:44:88:2a:be:22:89:0c:3f:ae:a8:d1:c1:9e:26:
23:49:13:23:84:5b:24:d2:f8:4c:7c:d0:e8:ae:de:
1f:6b:03:7f:97:c6:e5:ef:74:11:15:0c:3c:74:5d:
b2:5f:d2:f7:31:c7:94:e6:ab:92:12:f4:f7:69:00:
a6:58:9e:2c:02:7d:c3:e9:db:91:19:a5:a7:81:3a:
03:8c:33:b4:9e:c7:15:29:0b:df:8b:a7:65:73:1d:
2c:8f:a1:1c:c4:e1:47:21:db:9a:b1:9d:d9:9b:c9:
41:b5:3e:78:13:c1:3e:bd:5e:2c:d5:b3:d4:3c:73:
3a:74:ad:1a:bb:ec:e8:28:ca:66:ec:a1:ca:fc:79:
16:80:55:22:d7:50:57:1e:44:9b:90:79:d5:9d:2e:
9e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:67:FF:02:02:BF:42:65:79:25:C5:81:91:B6:8B:84:2A:D0:FE:48
X509v3 Authority Key Identifier:
keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:4f:bb:b1:18:75:64:ed:0c:04:8a:60:08:a2:89:26:67:04:
b9:e8:44:24:e1:78:ce:f3:ed:16:ed:57:19:04:4f:43:10:c6:
18:a6:68:28:3e:b5:40:09:76:08:e1:88:9b:46:d3:3a:78:4e:
2d:26:4f:fa:61:55:6c:9b:81:ec:4b:77:c5:62:c8:ba:77:a0:
da:bf:75:a7:a0:7a:63:61:51:b2:32:40:05:c6:26:d8:97:48:
8f:12:50:6d:ad:e2:b5:2a:cd:d0:ca:0b:40:29:a5:8c:f6:70:
37:8f:d7:6e:77:57:ac:bc:6c:e8:dc:6a:05:72:24:b7:18:6b:
09:73:ea:97:51:3e:91:25:fe:74:21:98:6c:5d:74:e0:3b:b7:
05:b3:c3:60:c6:9d:e8:65:78:99:11:f9:d5:55:a3:de:59:91:
d0:15:b4:dc:1b:8b:2f:02:7d:d5:20:b0:83:14:76:59:4e:db:
57:0a:93:84:5c:9b:15:19:4c:46:90:75:ed:82:de:02:f3:2f:
6e:70:7c:12:38:4e:b4:cf:03:10:a9:99:d0:dc:d5:51:24:7b:
f9:07:ec:bd:83:28:97:b0:be:6a:7f:73:10:e3:db:c5:31:4a:
94:c8:36:47:a3:91:25:2f:d1:f4:19:02:2e:b3:be:7c:7c:64:
1e:9c:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:56 2025 by rpki-client