This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
File: Im9yidTjf-ziJgxk07y6esAxWnU.mft (raw, json)
Hash identifier: FqM4PP1ipILiYIxfAcyMMTAoJMCLo522iB7wkdR9rQQ=
Subject key identifier: 40:B8:6F:59:A0:BA:EF:90:A7:04:E9:9B:AC:09:A4:06:00:A2:ED:17
Authority key identifier: 22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
Certificate issuer: /CN=A91BC269/serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Certificate serial: 0393
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
Manifest number: 038B
Signing time: Mon 22 Dec 2025 23:51:25 +0000
Manifest this update: Mon 22 Dec 2025 23:51:24 +0000
Manifest next update: Mon 29 Dec 2025 23:51:24 +0000
Files and hashes: 1: Im9yidTjf-ziJgxk07y6esAxWnU.crl (hash: 9xQeAsKUjcNG62aC+br2kgbctcIi/W06zi5X4HP93NM=)
2: 16DDC0F4CFE811ECA193B36BC4F9AE02.roa (hash: Z0vQc/FiRt/D8hScnxTd8nBTWz7d3rs3scQ6DdSb1kk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915 (0x393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC269, serialNumber=226F7289D4E37FECE2260C64D3BCBA7AC0315A75
Validity
Not Before: Dec 22 23:51:24 2025 GMT
Not After : Dec 29 23:51:24 2025 GMT
Subject: CN=6949d97c-8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:08:e1:d0:cb:00:37:76:b1:6c:7c:2b:22:
23:c4:76:da:99:76:8d:21:e2:20:37:41:97:d5:ad:
99:67:aa:c7:2a:68:14:d0:e5:3d:b5:df:5a:40:7d:
87:ec:80:2d:62:60:c1:08:fb:5d:39:12:f7:04:a3:
e0:c7:16:2f:a0:7e:4b:59:d2:07:69:d6:0d:d4:13:
6a:40:c4:6e:2c:ff:b5:44:f4:93:87:d3:b1:77:6d:
c5:25:6f:2b:b1:dc:0f:eb:c7:44:e9:3d:24:3e:26:
fd:35:86:ab:4e:01:6a:35:2b:31:32:d5:a4:2b:07:
60:1a:2c:66:ec:46:f9:df:6a:98:0f:b2:71:56:d3:
18:80:9c:34:e1:c2:96:86:d2:91:fa:15:52:3a:08:
5f:53:9c:de:7d:c3:dc:a7:34:d4:53:92:66:82:46:
07:5a:f5:02:5e:47:11:6b:63:59:ab:42:b3:b4:cc:
0d:88:5c:21:17:81:7a:dc:91:5b:d1:79:40:c2:c2:
e1:18:ec:df:b7:f6:59:b6:c5:f9:f9:2c:07:9c:2a:
0f:f8:4b:a9:54:d9:d7:09:15:38:e3:be:d0:b3:88:
93:99:e0:81:3f:57:6f:04:dd:cf:86:40:fc:d1:a0:
0c:1c:9c:7c:12:62:d5:c9:48:51:94:7a:fd:97:2d:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:6F:59:A0:BA:EF:90:A7:04:E9:9B:AC:09:A4:06:00:A2:ED:17
X509v3 Authority Key Identifier:
keyid:22:6F:72:89:D4:E3:7F:EC:E2:26:0C:64:D3:BC:BA:7A:C0:31:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Im9yidTjf-ziJgxk07y6esAxWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/B1613118CFE511EC94BBC75AC4F9AE02/Im9yidTjf-ziJgxk07y6esAxWnU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:e9:5e:b5:a7:35:2c:3c:00:40:9a:c7:d2:df:f9:d6:c5:59:
b4:d9:6d:4a:bd:9f:e5:b7:61:bb:c6:4b:5f:82:62:b1:55:5a:
24:81:f4:19:9e:e3:e0:ce:d0:38:ff:1f:ff:a6:90:37:6a:88:
b4:65:07:ad:94:b4:6d:c6:0f:94:af:a6:16:fd:2e:97:e0:05:
1b:46:ee:a0:21:da:41:5d:a0:f9:e7:89:02:d9:6c:29:e6:e2:
45:cb:6d:64:78:5c:3c:88:04:a7:ae:0f:c9:98:85:9a:96:ee:
01:80:a0:11:3a:fb:dc:cb:b2:8d:3f:00:da:49:d7:73:49:91:
ea:5f:6d:1d:a1:95:c8:9e:8e:8d:27:ea:10:37:4b:26:86:ab:
bb:28:42:e8:3a:31:d9:69:4e:09:92:45:92:3a:74:a3:ea:7d:
15:aa:d3:4b:60:bc:ac:52:54:cf:73:fc:29:cb:2a:42:37:62:
bd:07:1c:5b:84:f9:f6:d2:8d:65:7a:3d:09:45:0e:36:22:4b:
e8:34:f8:a4:72:c3:da:00:f9:2d:00:a9:6f:c3:6d:34:25:2c:
52:5a:25:d0:f8:e6:bb:87:d7:06:11:d3:f7:8e:da:d0:e6:6d:
6f:e3:33:a1:6c:d0:1f:3c:d0:1d:7f:bb:33:f6:81:99:20:81:
d3:bc:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:48:17 2025 by rpki-client