This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File: cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier: saUOQDvrAGui8B87eg6s96Sh0t5MEZob6Qsjz4NtXoE=
Subject key identifier: F0:53:76:BF:29:AF:D6:18:FF:41:C1:88:52:44:D5:0C:B6:E3:34:A2
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer: /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number: 0511
Signing time: Sun 14 Dec 2025 22:56:08 +0000
Manifest this update: Sun 14 Dec 2025 22:56:08 +0000
Manifest next update: Sun 21 Dec 2025 22:56:08 +0000
Files and hashes: 1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: upsbS+40vaaur2jdj37nknpsw/+15pgXacq9X/tYDGo=)
2: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: IONLpqLbIWNcEINYfdYWnA0lQhPUSCbB7gozoJAI8ic=)
3: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: 4ooeZLcPwkHZ/ZShvap31EsyiH4g04EjDdlB/3H2WWc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 22:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Validity
Not Before: Dec 14 22:56:08 2025 GMT
Not After : Dec 21 22:56:08 2025 GMT
Subject: CN=693f4088-8bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:c0:b9:34:42:64:aa:e6:72:e6:40:2e:0c:
ac:f0:19:5a:80:54:5a:7d:25:fa:50:56:ab:9a:cf:
7e:a0:9d:ee:6d:da:fa:e3:03:76:c3:3a:8d:01:db:
18:bd:37:c2:96:91:f6:05:46:f5:e2:a6:cd:77:28:
58:76:c7:5c:d3:6f:1d:5a:80:1f:b1:8c:a6:ec:27:
60:00:5e:75:b5:05:8c:82:8e:24:e6:7a:22:aa:12:
d0:6e:5c:5c:96:ca:43:03:ed:ea:77:82:ee:2e:e7:
0a:24:cf:ba:6f:6e:9a:6e:f9:49:a4:d6:0d:f4:05:
c3:17:a4:df:d9:1a:68:3a:9f:da:cf:a3:17:cc:ed:
3a:c3:fa:2f:fe:9f:da:87:47:e9:74:f8:ea:4d:be:
0c:52:cd:ff:6b:53:ae:86:b4:d1:2c:66:48:f2:e9:
f5:a8:bd:5f:33:55:30:1d:ab:f2:13:1f:55:6f:40:
7e:2f:36:e7:ad:cc:16:f3:54:07:49:6a:ad:13:e9:
b7:fe:b9:89:0d:4b:e7:d2:24:6e:d6:81:d6:c0:f5:
90:7e:de:a8:8f:b4:36:c0:7a:44:5b:70:9b:d5:34:
fe:f2:3d:dc:9d:c2:2e:e9:1d:09:ce:b6:f3:60:d8:
b0:10:b9:34:ee:8e:da:ff:95:5e:c0:f7:84:66:7a:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:76:BF:29:AF:D6:18:FF:41:C1:88:52:44:D5:0C:B6:E3:34:A2
X509v3 Authority Key Identifier:
keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e4:dc:2a:65:d6:94:7a:cf:4a:69:fb:90:f0:9d:d8:30:40:
cc:17:5c:7b:4c:be:3e:2c:f5:8c:55:60:75:4c:bb:67:48:f0:
d1:4f:3c:a9:7a:ea:48:9b:c2:4a:76:03:9b:56:27:70:c3:32:
88:c9:52:d8:12:c8:51:8c:99:c5:24:b0:ae:81:e9:ad:a3:59:
da:7f:50:97:af:a1:1e:24:cf:38:d3:bc:f9:81:0c:2c:6c:8a:
f9:a0:64:02:93:8b:76:7d:28:0e:23:8e:e3:45:4d:6c:bf:76:
d8:5a:4b:4e:7e:e7:7d:33:1d:e4:26:2d:cb:9a:62:45:d9:ce:
6b:81:bb:ee:8e:a1:e3:43:cc:97:b9:2b:09:8e:c5:f6:fb:02:
fa:64:dc:8a:da:e3:6c:ec:81:e8:ff:70:bd:93:fe:2f:70:54:
58:45:2c:5f:af:e3:02:96:ab:59:14:57:c3:83:61:7d:9e:8a:
b3:0b:19:b4:9e:dc:8c:36:4c:54:d7:1f:f6:87:77:cb:a4:52:
a1:1a:a2:cc:74:a5:f4:63:8c:c3:9a:55:29:ea:8e:55:e8:c7:
b0:2f:fe:7b:5b:38:2d:81:39:d3:80:6c:7a:98:89:57:b7:6f:
46:5d:3d:2d:4c:9c:a9:7d:61:ce:f8:37:3c:90:46:ac:3e:4f:
08:18:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:52:41 2025 by rpki-client