This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json)
Hash identifier: htjuONTkWOJE/kMMJe4dz/KwY8uaLbblh9Wm5WSQjMo=
Subject key identifier: DB:D1:92:AD:7B:58:19:A9:D8:5E:A6:2F:C9:34:5A:64:C3:91:E6:92
Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
Manifest number: 0144
Signing time: Tue 23 Dec 2025 03:24:44 +0000
Manifest this update: Tue 23 Dec 2025 03:24:43 +0000
Manifest next update: Tue 30 Dec 2025 03:24:43 +0000
Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: iHLNSX2LBorp1vcxV95Dnm8XTH7Jb2xU6ivgD3861Bo=)
2: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: 8YLAmzfkAq7wWaHxcBzfEAiWvy9p4CNzd9sT8leEWdE=)
3: AC82414A392511EF88F70D39C4F9AE02.roa (hash: wtDTYViLvQ71y8LfCWrpB6kCmz/GyFN75jh6EmmBpDw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179
Validity
Not Before: Dec 23 03:24:43 2025 GMT
Not After : Dec 30 03:24:43 2025 GMT
Subject: CN=694a0b7b-4e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:60:04:31:b6:e7:ac:d3:32:04:1a:22:48:
31:55:1c:1b:d9:82:61:56:33:4a:0c:15:d8:09:1b:
1a:e8:df:ba:63:df:0d:ea:9b:bf:7b:ff:88:46:bf:
3a:82:95:3d:df:9a:60:15:89:d7:43:33:ba:f9:5f:
47:95:e7:70:f9:9f:e6:80:a6:a1:e1:3f:f4:d0:bd:
5d:17:99:fa:65:af:47:df:c4:b9:e2:02:56:25:40:
d7:cb:ed:5a:27:47:f6:fb:c4:05:3e:c8:9e:0a:ca:
73:fa:73:c2:0f:78:2c:38:fd:61:40:34:83:e8:76:
15:4e:63:f2:22:6e:b6:10:c7:41:34:31:83:44:29:
8d:3c:9a:37:79:ed:74:2e:c3:2a:6f:d9:9f:0c:7f:
72:22:71:41:ac:e4:63:f6:43:02:61:05:e8:8a:e6:
0e:cd:a7:f0:4c:5b:b5:89:e3:8c:8b:6f:33:1b:d2:
06:ad:5a:f6:b2:fa:8f:85:be:60:01:33:d3:b4:d6:
eb:20:f7:8b:db:a4:03:d1:3f:32:d7:36:bc:98:32:
35:a7:ed:47:26:47:31:05:ab:3a:73:17:a1:14:6f:
18:69:0e:91:88:2f:f0:7f:8c:1b:38:69:ad:25:c9:
18:39:0f:e6:3d:b6:b6:34:2e:e2:3d:aa:06:06:b8:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:92:AD:7B:58:19:A9:D8:5E:A6:2F:C9:34:5A:64:C3:91:E6:92
X509v3 Authority Key Identifier:
keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:60:cf:46:3e:37:e6:c3:3c:bd:33:66:02:f9:ee:0f:1f:5e:
8e:29:fa:00:4f:3d:bb:c6:31:ae:f3:47:1c:bf:dd:c4:86:6b:
8c:99:d0:bb:2d:a5:78:f6:e1:6b:1a:25:32:49:bf:0b:a7:47:
c2:0b:77:d0:4f:5e:96:67:55:31:f9:e6:1b:49:be:e8:0c:99:
79:1f:07:fb:9e:16:b1:fa:74:bf:c8:a8:16:41:d8:7b:b1:fc:
53:86:0b:d3:9d:e3:40:3b:67:a3:21:b6:a5:f7:fc:1b:4d:71:
da:c0:42:84:0d:95:e7:cf:95:94:91:bc:ce:ab:2e:4b:c0:db:
72:d2:ae:22:ea:d1:a0:d1:8e:81:14:96:0c:4e:dc:62:3c:6e:
d9:e5:87:13:26:5b:7c:24:f6:a7:bb:18:56:d5:90:35:62:a4:
fb:7f:d8:2d:72:c5:e5:f5:a3:45:36:9e:a3:03:a2:65:81:cb:
96:ba:1b:f8:9d:7d:16:60:23:2a:b4:35:4d:9e:40:82:a3:2f:
44:26:36:9c:77:df:a3:90:b9:01:bb:29:04:f7:5d:de:bf:f6:
f3:6a:f3:f2:16:64:21:af:71:09:45:01:b1:ff:04:11:f3:ae:
cd:1b:2b:20:41:7c:5a:93:34:4f:b3:81:e8:35:d4:18:b4:4a:
50:a8:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:04 2025 by rpki-client