This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json)
Hash identifier: ewI2aA5/giQVAAF1MYNQ81j/o+oDZRpRZvWGpnooUzw=
Subject key identifier: D3:49:16:87:3E:AC:5C:30:78:66:C3:6E:50:2C:3D:90:80:29:0C:91
Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Certificate serial: 06DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
Manifest number: 06D5
Signing time: Mon 22 Dec 2025 21:19:09 +0000
Manifest this update: Mon 22 Dec 2025 21:19:09 +0000
Manifest next update: Mon 29 Dec 2025 21:19:09 +0000
Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: /jJetVwhiyv6SCk6EGLlJimRIoPJuH1j4TDFOdeFT8Y=)
2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1
Validity
Not Before: Dec 22 21:19:09 2025 GMT
Not After : Dec 29 21:19:09 2025 GMT
Subject: CN=6949b5cd-45b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:0f:35:eb:2f:02:6d:05:b2:f4:c7:e8:f0:
6b:f1:34:4a:bd:8a:04:83:d0:50:cb:92:de:a8:e3:
af:f6:d6:f0:a7:43:80:d0:5c:f4:98:94:d4:7d:de:
94:1a:6c:00:00:2b:77:5a:5b:83:b0:e5:4d:03:e8:
24:fd:48:e8:66:7e:e1:a7:a6:3e:fe:f1:3f:8e:de:
1f:60:b9:7c:5e:a1:3c:95:c4:db:64:3b:dc:ab:11:
f0:53:53:65:ae:58:f0:b3:93:21:44:00:3c:56:c4:
96:ba:41:09:b4:a3:6c:bd:c5:16:cb:b8:0a:62:e6:
17:98:0a:66:b0:df:8e:99:ac:3a:7b:fc:8b:53:ec:
be:35:2c:7c:90:eb:0b:75:0c:1e:af:42:50:3d:4a:
ba:7e:ee:19:a5:1e:d5:f4:8e:c5:31:e2:a5:b7:53:
9a:43:af:3c:4c:98:42:92:96:25:3e:13:6a:2a:ea:
83:a8:fa:25:e7:c6:ee:07:50:38:b1:9a:e6:f4:fd:
45:e0:f9:05:70:24:e5:f7:bd:0a:90:6c:fa:e9:e1:
9e:c5:00:28:be:73:f0:38:c8:bb:45:88:a6:a8:e9:
19:79:e1:62:d6:47:d6:1c:ab:3d:8e:19:9e:b6:02:
74:2d:83:67:d9:65:2a:c4:df:19:90:a8:cf:1d:8e:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:49:16:87:3E:AC:5C:30:78:66:C3:6E:50:2C:3D:90:80:29:0C:91
X509v3 Authority Key Identifier:
keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:a2:8c:7c:2b:de:2a:03:c6:46:c1:38:52:21:19:58:8f:
20:0e:de:39:59:a0:a5:88:46:3d:43:c9:ab:12:64:2e:af:dd:
a0:59:4c:d3:fb:cd:25:64:fe:df:cf:35:40:0f:41:9c:9d:4a:
08:9e:21:2b:de:08:4c:19:41:24:11:54:6e:05:b0:1e:c1:fe:
ef:aa:f5:9a:b7:81:50:29:de:d0:65:99:1f:ff:7c:86:4e:a7:
b4:78:83:c8:56:7f:83:74:ed:d6:9b:4f:3d:d3:29:53:0d:d6:
a1:bd:24:24:f2:b9:b6:cf:27:b3:cd:81:5a:3d:fa:f8:5f:9c:
d2:e8:e4:73:b4:fd:7a:4a:96:99:6d:6b:7a:f6:85:65:64:d6:
b6:45:2e:60:c5:47:32:89:a4:af:38:5a:bb:5c:a3:12:55:7c:
38:d1:75:bd:50:b8:a0:08:ad:b4:a4:3f:47:1e:db:8f:28:e7:
cb:81:47:42:dc:2c:92:ca:4d:ee:ce:12:09:65:eb:b1:42:ef:
b0:cc:37:3c:56:5d:9d:ce:92:6f:c8:47:f7:1b:1d:e0:6b:27:
58:e6:8f:eb:cf:51:3d:c0:95:96:8c:e9:dc:e0:9e:fb:7f:44:
8a:b8:c8:8d:14:b3:cb:08:5c:c4:80:23:7f:81:71:b7:66:00:
5b:13:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:01 2025 by rpki-client