This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft
File: R_rmMixRsd0CJJdveh0rkibQkOo.mft (raw, json)
Hash identifier: T/MgHYyEtvZ53ANbk7sc3ufhyXmOXMxw2XuUuZRMadw=
Subject key identifier: A9:71:2F:71:93:85:8B:9E:A6:A7:93:33:9B:E2:DC:10:74:E8:0D:FB
Authority key identifier: 47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA
Certificate issuer: /CN=A91A657F/serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft
Manifest number: 0101
Signing time: Tue 23 Dec 2025 04:10:26 +0000
Manifest this update: Tue 23 Dec 2025 04:10:25 +0000
Manifest next update: Tue 30 Dec 2025 04:10:25 +0000
Files and hashes: 1: R_rmMixRsd0CJJdveh0rkibQkOo.crl (hash: N2sCXVwqj6y3oIulNh5NvLZh96iSXvdGqmPABTKpQio=)
2: 7564FD08603311EFA997483AC4F9AE02.roa (hash: 2uXcB1i8WITKIgLPMfrpkWfwKGuNQ8k1IuvO8N+9V8o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl
rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A657F, serialNumber=47FAE6322C51B1DD0224976F7A1D2B9226D090EA
Validity
Not Before: Dec 23 04:10:25 2025 GMT
Not After : Dec 30 04:10:25 2025 GMT
Subject: CN=694a1632-3235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:e3:ce:fd:87:e9:7d:0a:63:9f:8f:21:5b:
5c:b6:b0:22:87:57:fb:46:8f:de:b6:3a:5c:5e:c0:
fe:ab:43:75:e2:c2:4c:b9:96:8f:18:82:c0:8a:7d:
68:73:9a:c1:1c:9b:cb:98:2f:33:59:82:a1:08:75:
be:6b:3a:68:1b:58:c8:12:dd:11:ae:2e:b0:08:f7:
34:ca:4b:bd:d3:72:f9:b8:9e:37:74:3f:c5:4d:4d:
9a:1f:20:c9:a9:f0:f8:13:ec:68:a2:8f:81:94:e5:
bd:14:5a:21:f0:0b:77:4a:1a:50:3b:9d:d8:52:b8:
57:c1:bf:dd:26:a4:e9:49:ca:86:ec:5a:34:e5:c2:
fc:26:5f:91:33:c3:d1:eb:00:47:03:ab:97:1e:6f:
98:f5:0e:ef:0b:30:e8:b6:f9:20:c8:5c:be:c0:1f:
1f:a1:69:e2:c9:1a:c6:93:05:96:05:df:9c:8c:4e:
6a:50:94:0f:14:1e:1e:e0:f2:27:e8:90:2a:19:ff:
5e:6a:ae:df:ea:3b:2c:23:51:17:f1:57:ae:e5:22:
d2:27:b2:ce:e7:fa:9a:ed:30:5d:18:cb:4a:20:d1:
46:d1:93:87:3d:23:7f:3a:d5:c7:25:85:0b:ec:dd:
f4:fc:6b:9d:cc:45:ea:30:ee:e6:38:ce:3b:42:4a:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:2F:71:93:85:8B:9E:A6:A7:93:33:9B:E2:DC:10:74:E8:0D:FB
X509v3 Authority Key Identifier:
keyid:47:FA:E6:32:2C:51:B1:DD:02:24:97:6F:7A:1D:2B:92:26:D0:90:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_rmMixRsd0CJJdveh0rkibQkOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A657F/E94BCC48603211EFA5F8EE7EC4F9AE02/R_rmMixRsd0CJJdveh0rkibQkOo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:da:3d:bd:bd:5e:66:ac:33:78:8e:41:e3:1c:bd:c4:e7:
4e:f9:63:09:1c:f6:bb:df:0a:a1:74:05:d5:61:bd:35:bc:ab:
71:57:b1:d3:72:22:64:b8:27:4e:37:d2:bd:10:31:20:0d:bd:
36:5f:5e:17:3d:01:b6:35:b0:f8:73:75:0e:8f:7e:6c:15:98:
57:29:81:60:d4:13:f7:95:da:b7:58:4d:82:19:2b:c1:93:72:
c1:3d:70:02:62:b0:23:1e:18:91:35:e8:c1:e1:bf:ff:8f:1e:
68:ba:04:31:8e:46:25:ba:dc:c0:10:52:ff:d4:ad:ab:3c:fc:
35:fa:83:be:d6:8e:b0:4d:81:a4:a9:d0:0c:dc:8a:06:45:86:
f0:ab:ef:65:1f:66:1e:77:28:4b:0a:66:e7:8b:07:be:10:f6:
10:bb:a4:11:1d:c3:b2:2f:86:b8:2f:87:4c:e4:55:00:8c:ba:
d6:45:ca:f1:5c:10:f4:53:72:8e:bc:14:1f:8f:67:1f:2e:73:
08:51:c3:69:48:0c:19:08:fe:11:c0:10:09:83:af:c0:9c:6a:
71:85:fe:72:f2:08:1f:8f:5a:d0:cd:04:a4:3f:be:a0:cb:a9:
1d:36:82:9c:8c:ca:09:09:d5:44:e8:b0:a5:8c:da:ac:8b:25:
2a:02:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:44:59 2025 by rpki-client