This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
File: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft (raw, json)
Hash identifier: I7idgBoXDU+dpyTAFEZmshl9wFdh6BYX1U0fQ1JVuyc=
Subject key identifier: B9:8E:43:3D:9E:69:81:13:2F:F8:39:A3:4E:88:9C:1D:87:DB:D5:C5
Authority key identifier: 74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
Certificate issuer: /CN=A91A2C5A/serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Certificate serial: 0260
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
Manifest number: 025C
Signing time: Sun 07 Dec 2025 00:11:19 +0000
Manifest this update: Sun 07 Dec 2025 00:11:19 +0000
Manifest next update: Sun 14 Dec 2025 00:11:19 +0000
Files and hashes: 1: dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl (hash: +mQuEFfgQzsgZ2zC1HM7ATUJUeiEjGdqDHRPT01IEDk=)
2: 88DA4EC83E3511ED8B05E85AC4F9AE02.roa (hash: Bpmtc+dst8i9fWSSTK2qFRlGSZiBtVfIZ/yU5akTF90=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2C5A, serialNumber=74BF2FE26D44FFEF63DE683F424248240FB7229A
Validity
Not Before: Dec 7 00:11:19 2025 GMT
Not After : Dec 14 00:11:19 2025 GMT
Subject: CN=6934c627-3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:ae:9b:55:55:f8:cf:f8:bc:a6:43:e4:1e:
9f:53:7d:f1:de:1c:90:60:05:0f:f5:de:25:db:28:
79:00:d3:ad:70:38:68:47:70:9c:1a:ad:6f:82:84:
66:0e:2e:83:c6:d1:34:dc:33:17:dc:bc:18:ff:db:
eb:b5:46:77:8c:86:33:01:f6:29:e4:6e:c6:2a:dd:
df:f1:29:21:16:91:04:22:f1:e1:ba:46:ab:ff:b3:
d2:98:eb:3f:ad:03:ad:83:bd:99:c0:d2:9e:22:7a:
1c:cc:04:3b:74:43:3b:20:94:cf:f2:b3:ab:bd:95:
d6:67:4f:62:c1:92:7c:15:eb:c8:81:88:02:c3:ba:
53:95:35:00:7c:fc:c9:e7:50:46:27:9b:49:20:f2:
df:13:01:67:07:f0:d0:aa:c2:cc:d7:74:49:2c:71:
32:99:14:f2:ab:f5:05:65:85:72:c8:de:ae:39:e3:
41:a9:e1:a5:0d:67:b9:a4:c4:c3:9c:ef:2a:79:4a:
b1:3e:66:04:fb:8d:66:17:8b:b7:bc:e8:68:ac:51:
05:26:c3:3f:81:ec:da:f3:fa:2a:c1:f4:cd:4a:4e:
4e:a5:30:f0:96:04:3c:9b:68:67:c6:b1:4c:c3:09:
62:f6:61:9c:2b:94:4c:db:5d:83:a8:62:fd:ac:49:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8E:43:3D:9E:69:81:13:2F:F8:39:A3:4E:88:9C:1D:87:DB:D5:C5
X509v3 Authority Key Identifier:
keyid:74:BF:2F:E2:6D:44:FF:EF:63:DE:68:3F:42:42:48:24:0F:B7:22:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5A/0AEF0FD83E3211ED8DD7E06AC4F9AE02/dL8v4m1E_-9j3mg_QkJIJA-3Ipo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:b9:5e:b2:74:ad:45:0d:27:32:1e:a7:31:35:47:e0:fa:31:
d6:f6:67:84:48:76:0e:5d:cd:95:53:fb:b1:ac:40:02:39:6d:
cb:7f:0c:f5:99:fb:a0:54:83:8c:05:04:30:95:5a:c5:f7:4b:
8c:fd:02:9b:36:ac:91:82:e4:38:c9:7a:c5:1f:f8:9e:59:7e:
c0:51:e0:f7:a6:84:ca:55:c5:1c:ab:74:53:b3:ca:c7:5b:77:
3e:56:71:80:92:0d:f9:d9:65:1c:90:2c:c2:02:59:b2:01:1c:
97:40:53:30:ef:71:ea:ec:db:33:50:b9:e2:04:0b:aa:09:95:
25:1a:30:4e:57:c6:d7:5e:01:f8:9b:d9:10:69:71:4c:9b:57:
f2:ae:13:19:c5:4d:1b:33:94:61:43:9d:e2:fc:64:10:d8:23:
b3:c1:db:59:00:9e:44:96:56:e0:f8:38:54:dc:1d:2e:b9:23:
9b:73:8c:e8:9a:79:d5:5b:7f:e3:dd:96:9a:1f:b6:79:a2:c2:
64:84:20:b8:aa:6e:0d:b4:20:3d:cf:5c:42:51:a4:74:4e:57:
d2:d9:95:e0:ee:78:52:0c:58:e3:8f:2d:f6:dc:36:99:03:e8:
c5:5a:94:36:ba:97:01:fb:cd:9a:05:c2:b9:54:98:ed:14:ac:
70:b6:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:43:14 2025 by rpki-client