This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: a/KVYpj8/QBaRX46xdZ3+VLKtKD8hd4mh+HpjjHiYA4=
Subject key identifier: A5:B4:B9:B6:B7:20:D0:B9:03:6D:5D:65:D8:59:44:5B:80:68:E3:8C
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 023B
Signing time: Sat 27 Dec 2025 00:59:37 +0000
Manifest this update: Sat 27 Dec 2025 00:59:36 +0000
Manifest next update: Sat 03 Jan 2026 00:59:36 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: K+jdI7JgjbfY8SEWecyVl6sZC33HFmDFL4KXhr9FZv8=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Dec 27 00:59:36 2025 GMT
Not After : Jan 3 00:59:36 2026 GMT
Subject: CN=694f2f79-4635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:b9:d9:5d:45:7a:7a:26:33:4a:07:bc:df:
42:d1:a5:f7:dc:a2:79:4b:c0:6a:6c:f6:aa:04:8e:
28:0c:53:5c:b3:a5:36:25:8c:e1:16:4f:53:45:06:
6e:a5:1c:53:4d:93:c0:aa:fd:bb:f3:98:27:86:43:
2a:9d:45:99:c8:01:f7:be:af:72:61:d4:f6:c1:29:
6f:db:e3:19:11:2a:4c:fe:2a:d7:eb:1b:3c:dd:4b:
79:ae:ee:f6:26:1f:48:3e:4e:15:74:33:fe:5e:e4:
2f:5f:d5:2c:7d:08:8c:45:e3:65:79:86:59:95:05:
4b:34:1e:38:35:e4:c0:ed:75:96:56:99:25:76:fd:
70:41:01:96:40:38:ef:a0:60:38:a4:c8:4c:4b:ad:
94:b5:56:28:cf:27:dc:67:19:53:d2:03:96:15:6e:
b2:71:7c:a3:f2:cd:63:ac:d4:1c:e0:d6:0e:39:54:
ee:77:b7:72:fd:73:e1:ab:28:7b:b4:a0:40:d9:aa:
02:32:65:57:7f:e4:5d:ea:bb:c7:3f:3d:44:0d:ba:
90:4b:78:23:cd:81:ee:f2:dd:2a:ba:01:5e:a2:24:
9c:f5:73:91:86:e5:a5:74:0d:ea:09:81:45:13:97:
a2:6a:28:17:22:f3:77:1b:3d:73:3c:5c:fc:fe:fb:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B4:B9:B6:B7:20:D0:B9:03:6D:5D:65:D8:59:44:5B:80:68:E3:8C
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:0c:1f:30:32:6c:4a:3b:a2:e5:44:59:6b:d5:51:d6:82:6d:
25:80:cd:71:79:81:63:92:c4:29:e7:20:9e:ab:2c:43:00:88:
1c:d7:7a:7b:5b:22:60:b7:96:67:d2:1c:fa:f5:56:69:97:97:
7f:c8:3c:ab:bd:15:8c:af:54:55:e8:5a:80:bb:f9:a9:94:5d:
56:65:b4:c5:aa:2d:a7:99:72:38:12:d9:fc:ed:aa:a5:58:d2:
28:70:e8:c8:fe:4e:7a:18:86:d0:51:45:9f:cb:13:f5:eb:50:
11:c0:5d:e3:29:b2:e1:5b:8d:eb:4b:fd:cc:9d:54:e0:a4:f3:
45:1c:25:0d:2c:6f:28:fb:fe:d3:83:73:54:ec:3b:23:ad:41:
43:b6:1e:b9:57:3f:17:fa:e2:29:2b:00:eb:74:32:4c:3a:ba:
9f:a1:9c:96:c4:dc:d7:7a:aa:cb:eb:b5:a4:c5:70:a4:74:48:
04:5f:25:99:7a:b1:e3:d8:cd:5e:de:3e:e6:cd:8a:23:0f:58:
1a:4d:81:6b:ec:15:c1:6e:2c:62:4d:e0:b7:9a:99:83:f5:8d:
6c:78:c6:db:63:fc:b5:1b:39:ad:90:ae:b4:74:96:79:fe:60:
17:0a:08:89:ee:f0:8c:9f:da:8b:e8:90:cd:5c:d5:0f:b6:70:
1d:7a:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 13:24:45 2025 by rpki-client