This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json)
Hash identifier: +kiCb7PR36mtd4CmS7OUwLsi1MZ6WDDiZ6JYRCGAJbU=
Subject key identifier: F9:A0:8A:0A:D6:54:3C:D8:37:44:05:8C:7A:C2:87:6D:BC:70:6A:68
Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
Manifest number: 022E
Signing time: Mon 01 Dec 2025 00:45:57 +0000
Manifest this update: Mon 01 Dec 2025 00:45:56 +0000
Manifest next update: Mon 08 Dec 2025 00:45:56 +0000
Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: yTKqZullFmLbYxIaFhs9vS4or9IkYOthc4WOaRy6NVY=)
2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 00:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40
Validity
Not Before: Dec 1 00:45:56 2025 GMT
Not After : Dec 8 00:45:56 2025 GMT
Subject: CN=692ce545-b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:c6:7f:16:6a:09:7a:1b:ad:f8:06:ec:75:
ef:49:a8:8b:1f:d3:de:02:18:36:b7:76:a4:67:f3:
5c:b3:2a:00:82:b8:a3:cc:c2:e8:0a:24:a5:0d:7d:
19:c0:ae:75:8a:59:69:1b:86:90:14:62:e4:3a:3e:
85:f9:8e:95:42:b0:af:36:72:44:77:00:8a:19:61:
3b:f7:ad:9c:f5:f7:eb:90:31:51:b5:1a:ec:5a:68:
6b:28:31:6a:36:e2:13:80:b2:67:d4:b3:fe:35:14:
35:20:94:26:a2:83:e8:cc:ce:b2:0b:bc:57:78:00:
df:5b:df:94:0e:95:e5:bf:22:d4:94:b9:f2:80:0e:
f2:06:09:69:01:eb:21:e7:98:22:21:6e:e2:0e:e3:
f7:17:2b:b0:4d:9d:fb:a0:ff:03:b4:61:2d:ff:5e:
ef:d3:e0:df:1d:62:76:09:93:43:4f:33:95:e9:45:
77:4b:e0:03:a0:6a:96:49:2e:07:d9:59:dd:9b:27:
4e:95:2a:2c:98:79:0d:ee:16:48:9b:00:38:5b:dd:
2a:92:8a:4e:d7:82:9c:e4:93:f3:94:9f:96:c8:f4:
5f:c9:00:d2:b5:6f:c9:20:38:2a:ee:ef:bf:24:08:
e0:0e:4f:6f:4b:37:7d:e8:bf:45:4f:01:32:64:d6:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A0:8A:0A:D6:54:3C:D8:37:44:05:8C:7A:C2:87:6D:BC:70:6A:68
X509v3 Authority Key Identifier:
keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:3c:19:90:7e:3b:95:ed:49:65:45:d3:70:82:ac:0f:c8:b6:
8d:a9:91:dc:62:5c:3e:30:18:47:08:c3:87:91:98:cb:bb:eb:
5b:d2:76:d3:82:11:7d:07:f5:a8:f2:16:d6:51:cf:cb:b0:80:
20:ba:8d:25:ee:0c:ed:e7:ad:bd:f1:58:2f:8e:6d:75:aa:8e:
cb:ea:03:02:9f:67:ca:f4:a2:f6:cd:fc:f7:3d:c4:68:ec:ca:
8e:5a:8a:7c:bf:b6:61:f9:1d:8e:ce:36:b9:82:3f:69:a1:96:
a1:88:83:e7:f2:64:c2:7b:56:8f:27:9c:ab:36:f2:b9:a4:a7:
11:e9:ae:98:ee:bf:bf:8e:c8:4c:7b:df:39:38:b1:80:7d:61:
43:f7:6b:d5:0d:14:fd:e3:c5:35:bf:c1:79:3a:8c:5a:4a:d3:
30:d0:d9:51:f2:8a:4b:4f:1c:41:0b:7f:41:48:89:66:38:e7:
02:6c:ac:de:69:77:fc:ce:0a:18:26:72:9b:1d:03:73:53:5e:
45:eb:a3:58:74:40:03:34:27:24:cc:7e:c7:87:52:a8:ca:4c:
5e:b4:e2:fa:b7:4c:e8:0d:17:ce:be:c2:c3:a9:c7:d9:0a:bd:
d0:3f:8a:b0:3e:99:31:7e:1b:dc:c4:65:be:b7:d1:c5:90:61:
e4:6a:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 1 16:11:14 2025 by rpki-client