This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
File: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft (raw, json)
Hash identifier: GW5/o3J1LnVU/E00UeXN9JUZ6Vvwh+9+LNoahETeBWc=
Subject key identifier: 82:C9:77:24:52:6B:F0:8B:21:E1:50:AA:47:84:E7:D0:5A:8D:E9:8F
Authority key identifier: 68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
Certificate issuer: /CN=A91C4750/serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Certificate serial: 0881
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
Manifest number: 0879
Signing time: Mon 22 Dec 2025 19:55:57 +0000
Manifest this update: Mon 22 Dec 2025 19:55:57 +0000
Manifest next update: Mon 29 Dec 2025 19:55:57 +0000
Files and hashes: 1: aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl (hash: Ef5amIr94xwkxFU6cpPoKmcBMgtaRtRayKFfUKhZRJY=)
2: DA1A98C4DABE11EAB12A5209C4F9AE02.roa (hash: xnTcG0VVgFarV7NphsJDgbhRV6XedAyDHFeL5PTrEnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2177 (0x881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4750, serialNumber=68763E92A2C17853167576651103F81F59ACDC1A
Validity
Not Before: Dec 22 19:55:57 2025 GMT
Not After : Dec 29 19:55:57 2025 GMT
Subject: CN=6949a24d-12bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:cb:22:ca:58:c7:d2:6e:57:00:d1:a5:09:
af:b6:32:74:4d:7b:b6:36:dc:9d:e9:91:7e:5a:0c:
67:c5:17:39:2b:14:a2:92:04:85:fe:c3:2d:d9:a1:
4d:ca:c6:4b:43:05:69:56:ff:91:46:3c:f3:98:40:
2c:b0:b9:33:05:91:9d:b3:78:1f:68:3c:71:e9:fa:
4c:64:31:1b:bc:9a:31:4a:64:a1:66:9c:0f:2a:27:
29:f4:6e:3b:b4:27:d0:d1:4e:02:a6:61:28:6f:e4:
f6:d6:fd:9a:ec:0c:0e:5c:37:2f:3b:97:1f:be:f4:
e2:cf:d9:c7:c1:21:24:c7:0c:bb:ab:2f:0f:1a:2d:
89:06:7b:0f:0a:c8:49:5a:c2:af:7b:8d:e8:50:ee:
cd:83:cf:bd:33:5f:87:10:ca:3e:c1:2f:36:41:7c:
96:bf:83:4a:71:c7:25:b7:f0:6d:62:9b:12:0f:f3:
73:3a:b0:81:55:cb:31:dd:80:c2:26:21:92:91:0d:
7b:37:61:b7:e6:34:20:f1:9f:dd:0f:42:78:fe:53:
23:a4:7d:af:9e:3c:35:bb:2c:35:62:a0:f2:b6:6b:
ac:29:cf:b3:57:ba:e6:b8:e3:73:a7:8e:d4:68:fb:
66:f7:4d:bf:94:5a:42:6e:22:de:8a:d1:03:2f:a7:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C9:77:24:52:6B:F0:8B:21:E1:50:AA:47:84:E7:D0:5A:8D:E9:8F
X509v3 Authority Key Identifier:
keyid:68:76:3E:92:A2:C1:78:53:16:75:76:65:11:03:F8:1F:59:AC:DC:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4750/90D5EC5ADABD11EA8FC62387C4F9AE02/aHY-kqLBeFMWdXZlEQP4H1ms3Bo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:e7:a5:96:ca:b0:eb:62:be:cf:d1:8c:19:d2:ab:fb:9f:a5:
e3:4a:d1:d4:e5:56:59:ca:71:56:26:27:a0:70:c0:b8:ab:bd:
63:cd:2e:64:20:d5:18:a7:9c:77:7e:b4:80:67:ce:e5:44:d1:
15:66:bd:00:c0:dc:f9:08:2d:ac:e6:d5:f2:f2:fa:f4:bc:29:
ef:7b:37:d9:2d:f0:35:43:61:f4:85:08:9a:c7:ee:57:14:0e:
e9:ef:8e:9e:8f:bb:fe:e2:14:54:e3:65:ba:2b:a3:93:f0:eb:
da:1e:ec:b4:00:9c:8e:55:d9:13:7a:eb:bc:c8:37:2e:64:f6:
37:fe:dd:03:38:5b:8a:fb:9d:73:5c:06:15:e7:2e:db:00:db:
b4:a9:42:9f:b8:8e:e3:13:ef:ca:8a:5f:af:ad:29:6d:b2:16:
81:ca:31:8f:dd:0b:ea:8e:b7:be:5e:91:66:ff:11:f9:46:f1:
e6:02:6a:aa:84:d4:34:6c:fd:5d:91:ff:86:02:ea:50:67:8a:
ec:b4:cc:46:86:93:56:a7:44:21:13:fb:0c:d7:60:90:04:b7:
ba:c9:d1:07:a2:98:d3:e3:63:c3:60:23:3e:07:56:48:80:f9:
91:d6:28:b6:ad:b8:3d:c8:97:e7:4f:09:7d:64:2e:1c:91:a9:
c8:36:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:29 2025 by rpki-client