This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File: e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier: p2ucky99oUBU8IdYqOeLCzJ/kc4T5D+dptaUIby1qWY=
Subject key identifier: 2E:BA:D8:EA:77:14:C4:83:60:E2:98:F9:BD:B4:2C:24:1C:7F:7B:27
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer: /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial: 0D35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number: 0D18
Signing time: Mon 22 Dec 2025 17:42:34 +0000
Manifest this update: Mon 22 Dec 2025 17:42:34 +0000
Manifest next update: Mon 29 Dec 2025 17:42:34 +0000
Files and hashes: 1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: S0mkMQr+RjazQaoN86xzBZNb55Y5NB2UNGFaoqnHBrw=)
2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:42:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3381 (0xd35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Validity
Not Before: Dec 22 17:42:34 2025 GMT
Not After : Dec 29 17:42:34 2025 GMT
Subject: CN=6949830a-691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:c0:e1:22:6f:fc:fa:4b:0f:31:37:ab:59:
46:7c:2f:89:ac:b8:7a:2c:4e:89:97:27:fc:a3:19:
36:c1:36:75:60:1f:07:85:4f:76:58:73:db:a8:00:
c2:5d:62:32:5b:a1:3d:67:7d:ad:eb:49:49:97:a2:
b4:02:32:a8:d7:3e:34:f8:2e:9f:35:e8:77:67:7e:
44:50:f1:34:fe:c0:04:95:d7:2a:2c:ec:86:1b:a9:
61:7b:32:3d:d3:84:c8:76:7e:0e:73:bc:f9:75:b8:
56:fe:5d:83:e4:23:1e:44:8e:d1:95:ae:ac:47:0d:
3d:cd:f0:d0:db:23:9b:b8:8a:d1:8a:f5:81:0e:dc:
68:e0:77:37:e4:a7:ec:b7:f6:cb:42:4c:de:f7:d8:
eb:c9:2d:6d:9d:39:b3:61:86:f1:6c:b1:1f:25:4f:
cb:a9:4d:ab:3f:c2:d7:fa:48:34:70:e7:d6:64:1b:
90:9a:1d:ef:70:36:fb:2e:72:38:4b:fe:92:b9:74:
ff:d9:e4:dc:41:98:5c:a1:2f:51:a2:20:b4:78:84:
08:72:27:8b:2a:69:f1:23:0d:16:9c:9f:e5:f5:13:
ec:d7:07:4f:40:95:c8:1f:16:49:60:4c:5b:28:cc:
dc:fc:92:5b:a1:09:8d:a5:f0:72:e9:0e:d9:50:3e:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:D8:EA:77:14:C4:83:60:E2:98:F9:BD:B4:2C:24:1C:7F:7B:27
X509v3 Authority Key Identifier:
keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:90:9c:ce:99:99:9d:bc:e1:ab:16:9e:d4:13:a2:41:f8:
fb:08:17:41:a5:3d:27:46:09:e7:11:c9:bf:75:9f:ab:25:18:
70:67:8e:df:25:3f:9c:dc:fe:25:11:d1:52:f5:85:bb:84:a4:
a3:57:e1:98:f6:c5:de:5a:82:8f:28:c5:0e:91:d2:a3:23:cb:
30:8b:a1:72:28:97:72:d2:a0:b4:f8:3f:fa:6f:15:fb:9a:2a:
29:3d:c4:a7:3c:ca:2e:0c:76:f0:a3:f8:33:bc:35:e6:9f:8b:
8b:d7:65:ad:2d:0a:cf:1f:b7:04:a9:93:c7:11:77:24:fc:b4:
0c:16:39:a2:f0:6b:97:33:bf:d5:3e:76:8b:41:08:ff:fc:98:
8b:1a:c8:32:29:06:66:02:5c:59:d7:b6:41:63:15:b7:7a:08:
32:a4:81:fb:5b:a6:15:b8:59:f3:8e:26:c0:1d:8a:8a:97:0b:
13:43:d6:dd:f9:27:79:5b:2f:d9:ec:bb:c4:f1:52:3b:20:ec:
19:bd:4e:c0:6e:12:48:79:2c:9f:e7:13:0b:47:41:01:3a:a9:
21:c6:8f:3e:6a:ff:d3:f4:09:14:e4:8c:ff:59:3a:cc:dc:55:
58:f4:5a:ae:56:e7:e2:d5:7a:ad:c6:30:e3:b4:b5:ea:e0:92:
bf:02:14:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:25 2025 by rpki-client