This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json)
Hash identifier: 7B1YGD02Zy7dnstpDlv3rxG0GL4VQdRNtsitSjblA7I=
Subject key identifier: 94:B5:59:0D:73:D5:97:59:90:41:71:74:0B:F2:7A:30:D7:8E:F6:8D
Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
Manifest number: DE
Signing time: Sun 07 Dec 2025 03:47:33 +0000
Manifest this update: Sun 07 Dec 2025 03:47:32 +0000
Manifest next update: Sun 14 Dec 2025 03:47:32 +0000
Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 1uxFM9Xhwqoko3wOBiZ5JinI7DrQjo4Yrs5eCeKFrJw=)
2: 35525B92845611EFB053C341C4F9AE02.roa (hash: VrKew/904a7WGaHwfTfVmRygoJsUgD+2JGEhLd8TxAY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 03:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC4FF, serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F
Validity
Not Before: Dec 7 03:47:32 2025 GMT
Not After : Dec 14 03:47:32 2025 GMT
Subject: CN=6934f8d5-8609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:42:a5:11:e9:e7:19:18:3d:ef:a3:43:a5:
7a:ed:ef:11:59:7b:84:09:ff:4f:53:6a:a8:35:9d:
64:d9:0d:e1:ba:27:ae:23:8d:55:72:18:c9:9d:10:
4c:bd:9b:98:fa:91:ba:1f:94:24:55:db:d4:19:27:
e5:5b:1c:cb:09:e6:b1:c5:14:b8:39:6d:a6:b5:c8:
50:d1:b4:8d:32:c5:44:23:f0:3f:bc:87:82:d4:44:
e1:89:e1:bb:9d:11:3f:38:b4:8d:20:78:8e:dd:a1:
7d:5e:15:fc:26:80:31:2c:a1:78:c1:d1:9d:42:11:
8f:e3:4b:c9:3a:7a:82:f4:52:ff:f0:88:76:69:11:
28:e3:d3:f5:a0:0e:ef:7b:a3:b7:f7:29:61:b4:e1:
92:88:de:56:0c:97:b6:07:bb:66:4e:36:e6:13:2e:
79:4a:1a:e3:c2:8a:bf:ef:fa:b7:8c:b8:e0:a8:76:
a5:a3:a2:b5:90:02:28:36:d1:dc:b7:ec:98:69:a7:
f7:0b:64:24:0c:5e:7c:5a:68:75:0a:9b:fc:d8:b5:
92:0c:4f:f0:f5:1a:60:b5:d4:10:6f:74:29:d5:8d:
a3:91:e9:35:d4:73:ab:88:9b:be:db:98:c7:58:c0:
b6:8e:12:b0:9d:bf:82:56:49:1f:4e:69:c0:6a:72:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:59:0D:73:D5:97:59:90:41:71:74:0B:F2:7A:30:D7:8E:F6:8D
X509v3 Authority Key Identifier:
keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0a:1a:60:fb:43:5b:91:7f:4f:57:7a:27:1e:92:f7:09:4b:
44:92:41:9f:74:98:ce:ec:a1:3d:c3:12:d8:4a:05:1d:e2:ac:
21:f4:87:ea:74:c5:ff:10:bb:f7:c8:be:94:aa:60:cc:1d:b4:
05:f0:82:88:26:db:79:8b:56:bd:0e:12:d4:22:ea:e0:8a:6e:
fd:28:28:1c:07:ff:1c:17:79:83:48:01:b7:24:cb:86:cd:f6:
a0:3f:c9:6a:a8:db:cf:3b:0e:7a:7f:65:6d:49:b0:1e:c4:e1:
99:78:48:68:89:ce:f4:e7:08:85:40:4e:be:ea:69:ff:97:83:
91:a4:ed:15:3c:cd:e4:17:43:c4:82:bc:1c:8b:c8:e3:56:26:
4c:f4:c4:47:40:02:c7:9c:50:62:3e:5f:57:4e:e7:7e:03:5b:
6e:02:6b:c4:09:b6:ce:83:70:c8:5d:00:b3:22:b9:c5:06:f7:
5d:c9:34:27:4b:96:b2:6d:5f:6f:da:b1:1d:3c:38:30:26:fb:
f1:88:42:db:f0:d3:60:5b:37:f7:45:86:36:8f:04:3c:18:f9:
2f:62:97:db:25:b4:17:0a:2e:9c:b9:d1:4b:a2:a2:de:6d:9c:
91:ac:f6:2b:44:68:ff:ba:a7:3e:6b:de:6d:15:7e:43:60:f2:
44:f5:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:38 2025 by rpki-client