This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
File: RrT_jckWend9mNhfL1Id0TZwc7M.mft (raw, json)
Hash identifier: tHjopNYU7nqbuJgdpitbFrzrRBkAiJhqVaae9k8z17s=
Subject key identifier: 07:AF:E3:EA:9C:AB:26:E1:7B:3B:E5:A8:42:1A:15:1E:C9:95:E3:0C
Authority key identifier: 46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
Certificate issuer: /CN=A91ADE0A/serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
Manifest number: 0504
Signing time: Wed 24 Dec 2025 15:42:36 +0000
Manifest this update: Wed 24 Dec 2025 15:42:36 +0000
Manifest next update: Wed 31 Dec 2025 15:42:36 +0000
Files and hashes: 1: RrT_jckWend9mNhfL1Id0TZwc7M.crl (hash: EHvEVCyn70Xu4/i8QPO/YWSjarpODuSL0JXhvIXaw14=)
2: B3789882F23211EC9A7DB924C4F9AE02.roa (hash: mHbYCPxnBj3PWJdh7qbfDGDK73T1pf2kWSW1uT2gXIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=46B4FF8DC9167A777D98D85F2F521DD1367073B3
Validity
Not Before: Dec 24 15:42:36 2025 GMT
Not After : Dec 31 15:42:36 2025 GMT
Subject: CN=694c09ec-9186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:7a:99:25:ec:1a:db:9f:88:a6:b4:ab:01:
89:9b:be:0b:8f:f2:cb:6c:12:19:b3:9e:ff:fa:3e:
75:96:e2:f9:64:fa:89:63:bd:e4:b5:3d:1e:81:c6:
3d:cb:c5:75:ac:05:4e:2a:bb:d9:26:4f:42:b0:b5:
f6:82:43:c8:44:2b:47:96:0a:1d:b1:62:0e:80:c4:
fd:37:d7:48:04:b3:7e:85:ed:76:4e:90:81:c9:c3:
69:32:0f:8b:a4:3f:5a:bc:a9:3f:e5:2b:26:27:bd:
35:22:d3:f2:5c:c2:08:ba:4b:fa:2e:bb:8f:0f:d3:
76:95:d0:a0:77:08:e8:17:54:af:d0:0e:ad:af:95:
dc:54:a5:d4:e2:46:81:a9:f0:2f:60:a2:52:72:f6:
f7:04:2f:a9:86:94:89:31:b5:27:14:f9:90:b3:61:
e6:d1:ee:96:de:bd:25:63:f2:30:05:46:32:ad:da:
23:1e:eb:d4:eb:39:a3:f5:2a:cb:34:bb:93:d1:80:
1d:76:3b:c2:76:c8:44:bb:9a:53:9b:0a:af:23:b4:
65:0f:2c:09:e9:43:9a:e9:4a:50:98:e4:f0:4f:62:
71:fe:fd:73:ee:16:ab:39:f7:7b:b3:b4:b9:0b:39:
0a:42:bb:ae:9a:5a:63:36:66:91:d2:6b:89:02:50:
11:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:E3:EA:9C:AB:26:E1:7B:3B:E5:A8:42:1A:15:1E:C9:95:E3:0C
X509v3 Authority Key Identifier:
keyid:46:B4:FF:8D:C9:16:7A:77:7D:98:D8:5F:2F:52:1D:D1:36:70:73:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RrT_jckWend9mNhfL1Id0TZwc7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/43567EE43D2811ECBEF77C76C4F9AE02/RrT_jckWend9mNhfL1Id0TZwc7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7d:f6:9d:70:42:ed:31:c0:62:a5:09:2d:d4:eb:22:4b:f8:
fe:8d:81:6d:ec:94:aa:9c:91:aa:67:54:b2:79:7b:ae:ec:ae:
e9:3c:ef:39:b6:3c:99:15:41:6f:42:74:d9:e7:85:30:43:08:
c1:10:af:a8:f6:46:ff:6d:d4:f7:ce:c4:2d:be:45:b9:4d:4e:
c7:6a:b8:77:e7:cb:68:68:2b:93:99:27:b2:92:ae:3c:16:c1:
41:aa:3c:0d:ba:b1:ea:4d:2f:27:53:10:c7:7f:48:69:8e:f5:
05:d2:f1:57:dd:81:8e:c8:c3:f8:4e:e5:f3:dd:92:94:09:80:
55:4b:3c:f3:a0:fc:78:55:b7:64:16:97:40:bb:ae:45:e4:dd:
09:10:39:05:c8:b0:51:a8:dd:b6:ec:76:43:86:f9:77:26:ff:
d7:2f:05:13:f3:c0:19:2f:99:53:e5:98:38:e7:1d:32:3a:98:
7a:73:e1:e6:79:8a:10:d0:30:55:90:fb:0f:d5:15:4b:0f:d7:
0c:0f:ed:63:a4:9a:74:b7:87:16:53:ea:0b:b9:7e:58:48:4e:
67:bd:34:59:f7:6d:ee:c1:6c:f4:68:e2:68:7f:75:00:cf:a7:
6f:67:d9:aa:ed:9c:94:40:ac:33:20:12:a4:46:89:2b:07:af:
c5:21:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:52:16 2025 by rpki-client