This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
File: voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json)
Hash identifier: ulBUm/L8NrV54/Fp7wVk2hYDucmpTq98IV4uEnzBjS4=
Subject key identifier: 4D:88:83:EA:4A:BA:44:08:2E:5A:21:15:5D:4C:71:80:E3:48:22:5C
Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F
Certificate issuer: /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
Certificate serial: 07FA
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
Manifest number: 07F9
Signing time: Sat 06 Dec 2025 15:07:48 +0000
Manifest this update: Sat 06 Dec 2025 15:07:48 +0000
Manifest next update: Sat 13 Dec 2025 15:07:48 +0000
Files and hashes: 1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: ALY9TV0WE+oMCWIx/2pddgxVL2cSSwUvMATas9MJtYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl
rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8C13, serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F
Validity
Not Before: Dec 6 15:07:48 2025 GMT
Not After : Dec 13 15:07:48 2025 GMT
Subject: CN=693446c4-1f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:27:1c:33:23:ff:cd:9e:10:c8:1f:5b:fd:
5a:c2:96:8d:26:5a:4e:09:01:80:94:06:08:f1:2a:
04:01:2c:ae:dc:17:b6:d8:93:35:e6:51:2a:38:3e:
cd:34:08:bf:b0:b2:d5:09:6d:12:36:f4:b3:b6:c3:
18:56:57:72:55:63:8f:b4:2b:d6:5a:9a:63:01:31:
e9:1b:93:42:a3:25:49:41:7f:ba:dc:a4:8f:d7:32:
13:12:51:87:bb:11:9c:52:38:6a:a1:3b:3a:d9:fd:
b5:1e:70:2a:c9:30:ad:15:08:e4:6c:38:13:5d:cf:
9a:7b:5e:0b:3b:00:0d:38:36:6d:48:53:86:fb:70:
97:ce:02:a8:94:b4:45:c8:4a:81:fd:70:35:ee:ac:
3a:6d:4b:c9:02:d2:bf:72:1b:1c:0e:f5:58:fd:34:
74:57:77:64:8d:ff:d3:8d:ff:02:9a:25:8d:4b:39:
6b:2c:d7:19:ff:b1:ad:a7:7f:3b:d3:5a:81:da:9c:
8d:6d:91:6c:c7:02:e7:cf:f6:61:a4:7a:27:6e:ec:
a9:ae:62:57:83:c4:09:47:40:0d:2a:90:af:a3:f5:
66:d1:31:89:88:74:87:b2:fa:9d:0b:d1:56:95:0d:
c1:f0:84:cf:b3:59:da:82:72:88:6a:71:9a:42:ce:
8f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:88:83:EA:4A:BA:44:08:2E:5A:21:15:5D:4C:71:80:E3:48:22:5C
X509v3 Authority Key Identifier:
keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:d4:f0:1d:b0:0b:4c:ec:c7:e5:71:9e:a1:ba:14:85:01:b1:
cc:01:a9:1a:10:16:83:e3:49:51:ce:45:ec:db:e5:2a:b1:1a:
6c:a1:84:a5:d2:3c:5a:0a:31:67:71:5e:a7:53:eb:f8:8c:f9:
ad:16:c2:40:fe:50:33:49:24:f3:75:0f:25:cb:b8:33:51:c7:
18:01:00:a6:d4:bd:5f:c8:f9:19:15:5a:32:3e:f9:a2:8a:b4:
bb:47:9b:1d:13:8c:af:9e:cf:5e:b7:57:6f:0d:1e:f0:df:df:
cc:ab:31:f0:e2:49:f4:c0:e6:63:80:56:87:c3:96:80:6f:4d:
1a:8d:d7:f5:e8:5c:73:06:68:eb:eb:88:f5:e4:d4:1d:30:18:
48:18:e1:f0:76:3b:bf:00:0e:1a:0b:40:cf:65:f5:25:4f:13:
a5:b5:64:70:47:a2:c7:df:44:cf:9e:a0:dc:16:b9:0d:52:fb:
c5:ff:85:f0:0e:06:89:2d:d3:23:75:0b:f9:7e:8a:9d:54:ae:
43:80:43:48:ca:52:24:26:02:5f:7d:96:f0:fa:6d:9b:ee:f5:
0c:2e:d0:6c:8f:f6:3c:b6:94:be:08:36:46:67:f3:9a:fc:da:
50:cc:e6:03:38:a9:bc:e9:18:85:88:fd:2b:fe:ab:21:99:4a:
0c:44:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:33:23 2025 by rpki-client