This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
File: iHgvgx82npb5eaJYXPJzyRbHtP0.mft (raw, json)
Hash identifier: GsQyxFxgBzFwtn8RXsev1oMGmyo5pQgSRpCsGdUOAss=
Subject key identifier: FA:7B:C1:AF:3A:4F:50:36:F8:D1:93:C6:80:1C:40:A9:7E:30:E2:10
Authority key identifier: 88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
Certificate issuer: /CN=A91B65E6/serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
Manifest number: 06EC
Signing time: Mon 22 Dec 2025 21:15:45 +0000
Manifest this update: Mon 22 Dec 2025 21:15:44 +0000
Manifest next update: Mon 29 Dec 2025 21:15:44 +0000
Files and hashes: 1: iHgvgx82npb5eaJYXPJzyRbHtP0.crl (hash: EsB/4cU0N/ND3KWlEZyRS/gOYj2eLLYBUX98uCoerDw=)
2: A0A96F80AD8511F08B0A1857C4F9AE02.roa (hash: IAiqZ7+h+k8237T4xv3w1ZM4/F+z2G79r7OGY4bCxVs=)
3: 2BC67A2A346711EF9EEB0F52C4F9AE02.roa (hash: wKKFIbG6rZYzWOquPQsQVLcMaVWXvSfOn3rpMeiquU4=)
4: 0F425E96346711EFA663CD51C4F9AE02.roa (hash: 0UszszQSlIl4E2WZV6BiPk26HX6TF60w5QFwSAW1SPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B65E6, serialNumber=88782F831F369E96F979A2585CF273C916C7B4FD
Validity
Not Before: Dec 22 21:15:44 2025 GMT
Not After : Dec 29 21:15:44 2025 GMT
Subject: CN=6949b500-d7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:44:01:ea:5f:51:e5:b9:fe:c2:67:1a:9a:
95:35:04:38:04:87:1b:d8:f3:18:22:46:9b:23:6a:
63:d1:27:18:3c:7a:46:a9:e7:dd:02:61:33:78:c7:
88:76:bc:12:3b:aa:1d:e3:22:5f:57:90:16:35:58:
12:c5:6a:26:c7:7a:49:d0:41:a6:46:83:59:c6:ca:
8b:0d:aa:25:5b:b8:57:ec:76:10:62:b9:31:e5:6d:
e6:fd:9c:d7:1f:0f:3b:87:54:91:55:d1:dd:a5:9d:
46:15:df:1b:46:a0:40:5f:74:85:1d:9b:87:9d:df:
44:2c:cb:17:93:39:a0:97:35:cf:22:64:2e:d7:29:
84:ee:8c:fa:8b:6a:5d:2f:af:37:0c:76:2c:f3:89:
9d:76:ed:91:d3:52:05:74:44:1c:6a:b5:5b:fc:7c:
e5:69:bf:c5:0d:3c:9b:15:62:25:6b:cb:ee:d8:b8:
93:f0:fc:b0:7a:02:33:e9:0f:57:93:a0:d9:3b:4c:
ce:46:25:18:03:72:64:23:e4:36:23:06:48:c1:25:
c6:1a:97:bc:98:c6:91:fd:d1:b0:59:f9:65:d1:a1:
9f:74:51:df:82:73:5a:b4:7f:fd:5b:cd:55:09:6e:
12:b5:3b:7b:b4:10:76:a6:17:52:fc:0b:ea:e5:2a:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:C1:AF:3A:4F:50:36:F8:D1:93:C6:80:1C:40:A9:7E:30:E2:10
X509v3 Authority Key Identifier:
keyid:88:78:2F:83:1F:36:9E:96:F9:79:A2:58:5C:F2:73:C9:16:C7:B4:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iHgvgx82npb5eaJYXPJzyRbHtP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65E6/87D1ED067A8711EB908EBD63C4F9AE02/iHgvgx82npb5eaJYXPJzyRbHtP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:23:b0:e6:3c:53:a4:b0:82:94:7f:5b:83:42:29:78:d1:
31:40:96:50:87:b7:8b:6b:36:6c:d6:21:2e:f5:32:4e:94:44:
1c:ea:3c:a5:de:3b:d0:46:44:09:c4:ea:36:11:dc:3e:f9:9c:
b6:e8:3a:86:f3:35:b8:0b:2a:67:99:df:01:12:bb:43:3a:7c:
d7:af:e8:d5:a2:69:40:8d:fd:de:fb:a5:82:85:f4:23:c1:1d:
56:b6:1a:a5:db:db:ab:82:3d:9b:16:5d:fc:2f:c0:ab:11:64:
5d:79:4f:9d:58:b1:1a:65:c6:e2:dd:78:4b:89:df:db:9f:d9:
27:2e:f0:87:69:3f:3c:f6:a3:23:2e:9c:d6:3c:dc:dc:74:9c:
f0:e6:ca:1a:aa:a9:67:72:2f:a2:c1:8d:33:e2:81:64:5e:5f:
24:7e:b6:74:a6:3e:b1:40:08:e4:bb:5d:00:1b:18:5c:35:f9:
fb:88:00:f1:5c:9c:e8:41:9c:69:22:72:ef:9a:c4:ce:26:20:
5c:17:f3:88:00:49:b2:56:0c:ae:28:94:57:e5:8b:e9:e5:1f:
17:57:03:74:84:ff:88:45:4f:35:71:d2:13:df:5e:15:3a:e8:
11:3d:29:49:70:07:f3:3e:f2:70:da:b2:f7:20:3a:de:95:e2:
31:0a:6e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:39:03 2025 by rpki-client