This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json)
Hash identifier: uj98ehEnvikrz0jzbO+6vJQJ9L3ju2mfbO21jG507gg=
Subject key identifier: 09:0B:87:5B:25:46:11:8B:96:C2:7B:3E:7E:7A:A9:86:F2:D9:91:00
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
Manifest number: F3
Signing time: Wed 03 Dec 2025 03:40:47 +0000
Manifest this update: Wed 03 Dec 2025 03:40:46 +0000
Manifest next update: Wed 10 Dec 2025 03:40:46 +0000
Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: GlFBD1CJui9ebJigxiLQABFwMQuUVA41Bi57e5pNHjA=)
2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: BteKkWaHztNY5RPMXMdQaz6E2A7IVRfTkJnalZdJs5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:40:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Validity
Not Before: Dec 3 03:40:46 2025 GMT
Not After : Dec 10 03:40:46 2025 GMT
Subject: CN=692fb13e-5fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:ac:36:34:23:37:e1:f1:47:4b:ee:0a:a3:
27:e0:7d:0e:6c:e2:ea:12:47:4e:a5:c8:5f:f4:31:
7e:10:6b:79:fd:e9:a3:69:f3:65:6e:c2:e4:29:fc:
7c:4c:12:06:17:40:9c:1d:cc:07:56:19:2c:d1:07:
b3:0b:81:96:97:7e:0a:cf:b6:41:87:c3:38:7f:0c:
11:ed:e9:1f:3d:16:72:c9:ae:f6:a2:6d:3f:68:0b:
8d:2f:08:5e:c8:fd:0c:fc:e2:a6:12:98:f0:ca:0e:
e0:f0:3f:93:ae:9b:61:56:ca:fe:75:e4:0b:da:08:
2b:0e:e6:f0:64:b8:98:25:6b:c6:3a:ba:f9:5d:fb:
72:cf:cc:23:f8:bc:3a:65:21:db:f1:a1:31:a6:00:
cb:c0:d9:49:47:c7:7b:f1:0e:9b:9e:ff:0f:85:83:
5b:db:0b:c2:73:24:ec:3c:d1:d0:bc:86:19:47:02:
9e:f6:11:bb:c6:74:68:38:be:eb:fd:83:65:7d:94:
7f:76:61:eb:e3:a6:71:c8:6f:f1:23:ac:2f:47:80:
34:b8:67:34:b1:fe:7c:fb:a7:2b:93:96:41:47:a7:
d4:9c:40:8e:87:4e:a0:0f:39:2a:76:0a:57:a0:fc:
a7:1d:00:85:2f:f8:ea:b0:42:da:19:8e:79:fa:30:
02:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0B:87:5B:25:46:11:8B:96:C2:7B:3E:7E:7A:A9:86:F2:D9:91:00
X509v3 Authority Key Identifier:
keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:92:a8:2a:c2:62:21:58:e9:8c:66:9d:56:57:04:51:6a:08:
8c:1f:0f:74:cc:0b:9f:75:98:5a:de:ce:76:19:23:42:a0:22:
f6:76:9a:79:98:9e:bf:77:8c:08:65:17:7b:54:9e:97:5e:b7:
3b:49:c2:15:94:f3:f2:60:40:76:7c:c4:13:14:b4:5d:aa:5c:
4a:ae:e4:7c:03:cc:78:0c:00:df:27:88:84:8a:ae:8e:d0:92:
f8:4e:e7:ca:2c:2b:bf:0b:79:b6:e0:47:39:37:b3:31:32:76:
ae:20:21:b2:0f:89:59:44:3b:68:71:b0:fb:8a:a8:05:f7:ae:
b2:90:2d:3a:93:8d:4e:c0:fb:64:3f:4d:cb:95:90:39:e9:ea:
2f:f8:44:aa:18:2e:5d:a0:28:66:d8:f2:72:55:ac:ee:19:27:
94:a4:53:da:80:a1:58:8c:c3:d4:9a:70:1e:a7:3e:c8:9a:fb:
16:c7:d4:a4:dd:20:6b:69:4e:f1:69:75:15:88:ea:c3:dc:aa:
83:62:29:91:f7:f2:76:84:ac:9d:76:cb:43:18:e4:64:37:36:
e2:53:01:20:db:a0:86:f2:c3:8e:09:cb:b7:e1:76:60:c8:4e:
cd:53:ad:8a:40:5e:2d:86:27:ea:52:2b:70:58:0a:b9:69:cd:
db:ce:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:44:21 2025 by rpki-client