This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
File: pSvwKHcZGUlxLT2tKdSreid57EM.mft (raw, json)
Hash identifier: H1JuBfVyUlunje/+q3BFMA/EieVGZYFkdwrin4YcRcQ=
Subject key identifier: EA:69:DB:18:5D:AB:B3:E9:E9:7C:D2:F4:69:FC:BA:08:B4:8B:F6:7B
Authority key identifier: A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
Certificate issuer: /CN=A91AA618/serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Certificate serial: 0118
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
Manifest number: 0116
Signing time: Tue 23 Dec 2025 03:53:00 +0000
Manifest this update: Tue 23 Dec 2025 03:52:59 +0000
Manifest next update: Tue 30 Dec 2025 03:52:59 +0000
Files and hashes: 1: pSvwKHcZGUlxLT2tKdSreid57EM.crl (hash: yIKHxzcw4gnc+b3/AL9pSOU0H57cR5bciB0xeQg7UrU=)
2: 88F562E83DAD11EFAA46E417C4F9AE02.roa (hash: n9WiQjAGu9O9bLeoq38kpAQ+Tw7nAmw19T1TLy6Ivwo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA618, serialNumber=A52BF02877191949712D3DAD29D4AB7A2779EC43
Validity
Not Before: Dec 23 03:52:59 2025 GMT
Not After : Dec 30 03:52:59 2025 GMT
Subject: CN=694a121c-5752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:18:f2:ec:9e:24:28:a0:dc:ef:fd:62:34:
62:d8:59:78:23:97:fd:6e:3a:09:fd:24:95:6d:21:
89:65:77:62:f6:e6:5b:64:84:2b:eb:6c:65:8f:11:
e0:35:8f:a1:b9:4f:07:5f:a6:dc:eb:6b:f0:49:c8:
21:28:3f:98:a2:19:c6:14:6c:88:8e:ab:7a:c9:62:
55:cf:11:6c:87:54:b9:24:23:dc:68:99:41:96:4d:
4c:66:dc:6b:ad:32:77:76:7b:28:7e:b3:4b:b7:c7:
59:b2:ad:07:fb:7b:cb:0f:79:49:4e:50:e7:62:3f:
b9:c0:d5:51:df:0f:b1:a4:c2:3b:f6:c6:6f:07:1c:
2f:47:b3:64:48:c1:5b:f5:00:91:97:08:60:19:90:
88:ad:a7:e9:59:78:f9:0f:ce:dc:72:56:0c:22:b5:
89:0b:46:5a:1d:4f:24:56:72:67:06:bf:ef:3a:74:
2f:40:b6:db:40:09:c9:61:42:f3:f0:f0:55:cb:da:
af:3b:f6:00:0d:36:bb:4f:31:f5:82:f4:8b:72:3a:
0f:57:4c:f2:b4:71:f7:2b:eb:b0:86:90:a9:d8:be:
b8:67:bc:3f:d8:26:91:35:65:80:cd:b2:a9:17:17:
67:07:3a:f5:0d:f6:9c:e2:b6:c0:91:ba:18:11:15:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:69:DB:18:5D:AB:B3:E9:E9:7C:D2:F4:69:FC:BA:08:B4:8B:F6:7B
X509v3 Authority Key Identifier:
keyid:A5:2B:F0:28:77:19:19:49:71:2D:3D:AD:29:D4:AB:7A:27:79:EC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pSvwKHcZGUlxLT2tKdSreid57EM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/557EAB3C3ABE11EF8619D220C4F9AE02/pSvwKHcZGUlxLT2tKdSreid57EM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:85:85:f7:40:d0:5a:a7:44:ca:57:5c:20:40:68:03:52:ce:
dd:18:d0:34:f0:9c:01:90:8f:d5:94:e5:58:5a:0c:27:cb:4d:
cb:45:e5:fb:52:a0:d9:c7:19:a7:b6:7b:06:19:de:2e:de:c0:
d3:d2:c9:8f:44:a0:55:d0:0e:65:8a:e1:f2:b9:c7:35:34:29:
f0:87:a8:2a:b3:06:39:42:15:71:c3:c0:65:1b:39:44:12:d0:
40:e0:06:58:22:68:86:c1:69:24:1c:36:50:b3:11:a8:ce:7c:
61:8e:0f:60:a6:d2:e1:80:45:8f:ec:a8:b0:2a:4a:a0:2c:66:
4b:12:f1:b8:c1:f2:66:61:6f:c8:69:d6:73:91:90:47:eb:22:
48:31:33:d0:f3:22:79:94:01:47:13:ce:a0:50:18:74:8f:a4:
ae:d1:71:4d:eb:5b:13:6b:5c:5b:9a:21:fe:6b:03:46:df:f3:
5e:6c:3c:91:d3:10:7f:a5:73:d0:4e:0b:b9:85:7c:b3:fa:8e:
33:b3:7f:c9:d4:03:15:5e:63:e0:6f:10:3f:ee:4b:4c:39:99:
67:77:73:8a:76:fc:de:b6:4d:2f:1d:8a:ee:ac:0e:de:65:f2:
a0:0f:05:46:99:4d:7b:b3:8e:e9:3f:be:7b:96:d6:6d:ac:1e:
88:6c:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:35 2025 by rpki-client