This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
File: 57QbPSVuxr0M5xIbNw3kdBuDXmE.mft (raw, json)
Hash identifier: gjZeaFVa/I8ZHXqEBfDDjaxhAT/RgXeZN214gaAR16s=
Subject key identifier: E2:0F:06:93:A7:7A:7F:3E:AC:A9:51:27:36:7A:E3:DC:E7:89:08:17
Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Certificate serial: 0E67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
Manifest number: 0E58
Signing time: Mon 22 Dec 2025 17:25:42 +0000
Manifest this update: Mon 22 Dec 2025 17:25:41 +0000
Manifest next update: Mon 29 Dec 2025 17:25:41 +0000
Files and hashes: 1: 57QbPSVuxr0M5xIbNw3kdBuDXmE.crl (hash: Rd0rkhoFDW/nxQu/0Y4LqeqasOwyTfhtT0iYjBw9wQo=)
2: 0F56E156828C11EDA6BCA176C4F9AE02.roa (hash: 6jQR+LA7AhS3kcRLFdYcgiTc91j8m964KZdBUexFMD8=)
3: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (hash: f/BgI5BL/1PcY7ExwBK48s2FrmJ9kEJMRjBuMiCgse4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3687 (0xe67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6A39, serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61
Validity
Not Before: Dec 22 17:25:41 2025 GMT
Not After : Dec 29 17:25:41 2025 GMT
Subject: CN=69497f15-6c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:a6:27:e6:95:87:11:d6:d2:f1:3b:3b:eb:
0e:f3:cb:fd:0b:f5:58:67:ee:7f:89:fa:35:98:67:
c7:b1:7c:cc:96:2d:c5:8e:87:ab:59:0f:1f:e0:ae:
f8:ec:00:b1:6d:96:71:40:97:c1:af:2c:0c:42:e2:
2d:e4:52:73:d4:06:3b:f2:79:82:af:53:b7:81:01:
66:39:31:f7:77:93:e4:4e:3a:ba:b1:ae:0b:a6:db:
55:36:a7:f6:51:bd:8d:59:fe:88:5a:d3:6c:52:64:
33:23:c1:ac:ab:88:2e:f0:76:99:f2:c3:45:4f:1b:
73:1b:37:c3:5d:df:28:da:13:a6:de:21:b0:7a:d8:
38:90:f9:a7:23:8d:25:f9:ed:8c:9e:16:40:82:c6:
da:89:ec:7c:49:e7:cb:e2:13:a7:fa:06:6f:9c:9e:
48:45:2e:67:75:1f:38:fb:70:d2:5a:08:8c:e5:d5:
ea:59:1a:8c:8d:b5:d0:41:9e:e7:3d:e1:7f:35:5a:
b9:c1:cd:fc:79:80:5c:e6:43:04:82:5a:f9:c0:81:
c0:13:bb:26:51:ad:00:fb:41:9d:e4:ed:40:e4:40:
89:61:71:6d:77:f4:c3:cd:a0:b1:f8:1e:2c:db:d8:
0c:0c:72:27:54:23:a4:b7:36:cb:01:18:5e:9e:8a:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:06:93:A7:7A:7F:3E:AC:A9:51:27:36:7A:E3:DC:E7:89:08:17
X509v3 Authority Key Identifier:
keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:da:dc:60:0c:2e:51:02:c8:b5:e9:2b:2c:05:79:6c:d6:bb:
3e:62:ab:b8:c0:a2:b3:20:27:98:19:c7:bc:43:b1:cd:06:c3:
fc:61:ef:e9:ac:b7:e9:d6:b2:ee:85:41:56:7b:40:a7:34:c5:
2b:00:77:de:86:95:97:c4:05:69:9c:13:eb:a7:16:94:a3:5e:
d0:cb:15:a5:f5:71:5b:1b:56:b9:1a:d9:d6:1a:2d:62:d6:59:
b0:b3:8c:d7:be:6b:34:d0:fa:3e:ca:7e:7f:23:93:6b:09:8d:
3c:06:62:9e:2f:11:0e:49:d2:ab:2b:22:d3:63:a9:83:b0:9b:
d1:ed:8c:d7:88:4b:23:8e:db:ce:b0:0b:9d:b1:7e:86:e7:12:
1b:04:de:43:76:54:97:5a:ce:f0:fc:dd:57:84:0c:a8:bb:03:
a2:79:fe:0b:45:92:60:fa:b9:f6:03:97:cd:32:12:f4:11:12:
71:ee:be:8f:7c:f2:f3:ef:8c:36:d1:2e:ae:04:9d:0b:01:71:
c9:a7:77:4b:48:2d:b0:cc:77:07:0b:37:67:52:f3:a0:29:43:
e5:9b:8a:76:ad:ba:d4:dd:1a:dd:4f:d2:51:ef:b9:54:c7:f8:
d1:92:5e:6e:fa:b3:61:5c:06:37:28:6c:3e:12:09:c8:25:5f:
8c:b4:d8:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0
MUI4MzVFNjEwHhcNMjUxMjIyMTcyNTQxWhcNMjUxMjI5MTcyNTQxWjAYMRYwFAYD
VQQDDA02OTQ5N2YxNS02YzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnVmmJ+aVhxHW0vE7O+sO88v9C/VYZ+5/ifo1mGfHsXzMli3FjoerWQ8f4K74
7ACxbZZxQJfBrywMQuIt5FJz1AY78nmCr1O3gQFmOTH3d5PkTjq6sa4LpttVNqf2
Ub2NWf6IWtNsUmQzI8Gsq4gu8HaZ8sNFTxtzGzfDXd8o2hOm3iGwetg4kPmnI40l
+e2MnhZAgsbaiex8SefL4hOn+gZvnJ5IRS5ndR84+3DSWgiM5dXqWRqMjbXQQZ7n
PeF/NVq5wc38eYBc5kMEglr5wIHAE7smUa0A+0Gd5O1A5ECJYXFtd/TDzaCx+B4s
29gMDHInVCOktzbLARhenoo1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIPBpOn
en8+rKlRJzZ649zniQgXMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx
QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkEzOS83MzBGMDBCMkIxQzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhy
ME01eEliTncza2RCdURYbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBq2txgDC5RAsi16SssBXls1rs+Yqu4wKKzICeYGce8Q7HNBsP8Ye/p
rLfp1rLuhUFWe0CnNMUrAHfehpWXxAVpnBPrpxaUo17QyxWl9XFbG1a5GtnWGi1i
1lmws4zXvms00Po+yn5/I5NrCY08BmKeLxEOSdKrKyLTY6mDsJvR7YzXiEsjjtvO
sAudsX6G5xIbBN5DdlSXWs7w/N1XhAyouwOief4LRZJg+rn2A5fNMhL0ERJx7r6P
fPLz74w20S6uBJ0LAXHJp3dLSC2wzHcHCzdnUvOgKUPlm4p2rbrU3RrdT9JR77lU
x/jRkl5u+rNhXAY3KGw+EgnIJV+MtNjy
-----END CERTIFICATE-----
Generated at Wed Dec 24 03:21:58 2025 by rpki-client