This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json)
Hash identifier: u/Saykft8mTtL1/3gk4P6szPn7vBCczIRuUdiqUnfdY=
Subject key identifier: F0:E1:EE:12:41:C0:CE:40:5E:E4:C4:09:F2:44:B4:F2:2C:3D:5C:B0
Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Certificate serial: 04BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
Manifest number: 04B6
Signing time: Sat 20 Dec 2025 23:11:57 +0000
Manifest this update: Sat 20 Dec 2025 23:11:57 +0000
Manifest next update: Sat 27 Dec 2025 23:11:57 +0000
Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: KFQqVnXmQCI2/xmYLGkFZyPZo8paa8DBqxlozLa/OQM=)
2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: c5NMAe1CqQurJqS1H1w7Md/EROAKq1xZbqnKJkldnUI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8
Validity
Not Before: Dec 20 23:11:57 2025 GMT
Not After : Dec 27 23:11:57 2025 GMT
Subject: CN=69472d3d-7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:96:0a:64:05:e1:61:5e:7e:40:e5:10:40:
73:16:01:83:b7:b7:6c:2f:8f:df:b8:1d:95:3e:35:
73:b9:6d:ad:9f:b5:93:4f:07:6c:f6:1b:83:ba:29:
84:b9:b0:5b:51:18:71:1d:ce:1f:68:ba:cf:5a:6b:
04:76:cc:20:a5:5c:b6:bf:50:ce:12:c5:c1:3b:d5:
a3:15:b5:ec:ea:e0:74:18:df:3f:24:6b:69:c7:ba:
7c:82:e1:d3:6a:2a:8a:e3:39:69:ae:f6:50:84:78:
34:2c:f9:17:da:d9:20:78:83:c8:26:67:2f:2c:88:
45:34:ce:f2:68:f5:5c:63:39:a8:51:84:8f:2b:dc:
6b:e9:a7:66:97:f1:0a:90:d8:50:07:b7:07:74:4d:
07:47:71:97:00:b3:cb:30:0e:e2:88:d4:22:70:06:
3e:9a:e5:01:0b:fd:98:76:d5:4c:12:66:1c:5b:e6:
c0:9b:89:9c:7a:af:bc:0d:9b:b7:a3:15:83:7e:eb:
60:61:ae:20:20:ac:d0:77:b2:c7:5d:d4:8e:de:55:
92:b4:7a:4c:c5:1e:b0:71:d4:92:b4:9a:d9:26:ef:
66:11:92:a3:60:bd:b5:90:ef:ac:48:7f:a1:cc:5d:
82:b1:ab:05:f0:6a:09:6d:6c:6e:76:71:d2:16:b2:
6a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:EE:12:41:C0:CE:40:5E:E4:C4:09:F2:44:B4:F2:2C:3D:5C:B0
X509v3 Authority Key Identifier:
keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:2e:10:44:ad:c6:9f:87:29:82:7f:d6:2a:89:ec:7a:d0:94:
78:7a:eb:90:f1:36:eb:ce:5c:24:18:50:7a:73:78:57:80:7c:
bc:90:78:fc:c3:a3:d1:2c:7e:2e:68:b7:f9:5c:e9:c7:a5:cb:
3b:c1:fd:12:9c:ba:14:fe:a8:72:a2:3f:fe:ad:ad:be:e8:d8:
e1:22:9a:71:7b:f2:c6:95:0d:a0:3d:c7:c2:72:98:df:79:ef:
57:bf:ad:a3:63:d5:5b:27:23:f3:39:80:25:e9:b3:76:4d:0f:
e5:70:b9:b5:f1:af:8b:1f:64:5c:d0:71:34:4e:d6:f9:c4:70:
6c:5a:ca:5e:a4:30:55:7f:a1:39:51:9a:db:20:44:06:9f:ca:
80:7e:48:b2:c9:7d:62:7c:2b:e8:cc:ec:aa:4a:04:80:ba:b3:
07:0f:d9:46:f4:ad:01:84:02:5f:f8:6a:70:a8:41:a0:54:cc:
bf:62:16:fa:42:2c:f3:0e:41:b0:61:99:06:4e:95:c3:0f:84:
0f:c6:eb:53:c7:e7:1c:7a:b4:b1:55:dd:50:34:4b:2c:0a:0c:
ef:ee:81:f1:18:97:82:45:58:f1:9f:bd:d2:38:4c:e2:20:76:
af:26:4c:1e:3e:7f:3d:55:3c:39:2b:f4:a5:ed:20:8e:9a:69:
af:e6:fb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:00:12 2025 by rpki-client