This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json)
Hash identifier: tQNjKMmjQT68CZsIl9WQcbsUD8AtGG7A83jONG7bcqQ=
Subject key identifier: F2:4F:7B:B4:43:A6:23:6E:59:54:18:A8:BE:3A:E7:C0:A8:58:55:B2
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial: 0AF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
Manifest number: 0AEE
Signing time: Wed 24 Dec 2025 18:55:38 +0000
Manifest this update: Wed 24 Dec 2025 18:55:37 +0000
Manifest next update: Wed 31 Dec 2025 18:55:37 +0000
Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: fLXXGCoqq2Uy3h684alTfPsw8lfzRZz+bzx2DKSAD/E=)
2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2804 (0xaf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Validity
Not Before: Dec 24 18:55:37 2025 GMT
Not After : Dec 31 18:55:37 2025 GMT
Subject: CN=694c372a-44c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:e6:13:f2:a5:33:09:9a:2f:49:d8:83:cd:
ea:ec:db:4f:a4:b9:75:b5:16:ea:55:fa:c5:e5:f7:
19:1c:31:3f:c2:a2:ee:1e:0d:fb:dc:da:39:fd:31:
90:81:ff:50:66:a1:02:53:84:13:18:a7:88:47:8d:
30:c1:15:c8:12:06:95:6c:af:f5:ce:ec:37:70:7f:
d4:31:e3:f2:64:cc:f1:68:2c:f4:fe:1c:96:ed:ab:
0f:d5:5e:2d:63:f6:e4:45:55:a3:b9:3d:79:5f:d3:
97:18:cb:a8:36:1c:85:61:5e:49:52:9a:ed:47:55:
76:8c:c7:ed:c0:9f:89:14:c3:de:a5:ef:e3:49:9c:
b9:47:47:86:46:2c:b4:55:1d:1c:6b:f0:f9:93:b3:
44:d8:a6:23:00:11:ff:dd:4a:e2:f1:e1:7f:d5:16:
ee:e9:99:80:07:87:bc:0b:8d:96:bb:81:fc:06:52:
9b:a0:0b:78:13:cf:9a:8a:87:31:fa:81:aa:9d:b3:
bb:a7:4a:a8:4b:7e:9b:1c:a7:41:4f:45:9d:82:7d:
5e:44:0e:9b:c6:08:1d:f4:91:ce:8f:3c:e8:63:92:
af:d8:8e:a8:42:8a:f2:0b:8f:c9:66:ba:a5:c8:17:
de:52:2b:cc:7b:6f:59:da:e1:44:80:00:36:4e:6f:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4F:7B:B4:43:A6:23:6E:59:54:18:A8:BE:3A:E7:C0:A8:58:55:B2
X509v3 Authority Key Identifier:
keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:64:68:dd:9f:ea:13:0a:33:cd:09:f4:67:e9:b2:5d:9b:
8b:2e:e4:08:77:5a:67:4e:69:e5:f4:a0:3c:7c:b3:16:51:68:
17:bb:e4:cf:0f:46:08:42:85:5c:cb:64:18:91:30:09:0c:e5:
22:82:22:c6:23:56:ae:52:ea:b7:02:6a:90:ec:dc:f9:d1:8e:
80:e3:31:ae:c6:82:a6:45:c9:c5:d5:21:34:e7:a6:e2:73:8a:
88:7d:08:e7:4f:77:2b:67:28:ec:e7:39:31:5f:e4:c8:85:be:
0c:ac:67:24:e8:23:7e:a4:e2:00:b2:66:67:c0:6e:55:6e:6e:
00:0f:b2:43:04:a6:1b:c4:63:93:58:34:5b:bf:fc:f5:7f:4a:
7a:fb:17:a6:ef:30:ef:4c:08:83:5f:42:ff:6c:52:e9:45:97:
5e:00:08:0b:d1:ff:3f:20:79:b9:24:71:c7:bb:fd:b4:2f:4c:
12:42:86:5a:db:7e:88:9f:19:90:b4:4b:ca:d2:36:cf:47:20:
af:83:42:b5:6d:37:c2:e8:d7:45:71:aa:d1:14:3f:5a:ca:4b:
2a:91:f9:78:3d:20:fd:db:7a:2a:70:4e:98:06:55:54:92:22:
e7:9b:0b:a5:88:ee:74:52:d5:5a:4e:75:42:14:8e:a3:17:4b:
b4:e4:73:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:00 2025 by rpki-client