This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json)
Hash identifier: SVa2SkbJ8qJDahVsJK/WYiJvCuqjjvoh810bnDV6rB8=
Subject key identifier: AB:42:75:30:D4:07:FD:B4:0A:E0:08:44:AB:D5:2A:64:F2:64:4E:F1
Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
Manifest number: 0300
Signing time: Mon 15 Dec 2025 00:32:48 +0000
Manifest this update: Mon 15 Dec 2025 00:32:48 +0000
Manifest next update: Mon 22 Dec 2025 00:32:48 +0000
Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: NJkGq3TVofwf5u7J7W2GIkw4M3juqin8RuKlcuhJ/O4=)
2: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=)
3: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=)
4: 7D4462BAC93311F0B048172CC4F9AE02.roa (hash: 3CgCTp3bzKYZXfeq4ZljTed0rolq+eWipeXPCnowOi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 00:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE
Validity
Not Before: Dec 15 00:32:48 2025 GMT
Not After : Dec 22 00:32:48 2025 GMT
Subject: CN=693f5730-4a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:84:1e:c4:36:01:e7:cc:ca:cc:4c:51:fe:
f2:3f:13:79:bf:54:4c:61:61:71:94:be:30:be:08:
e9:e2:11:c3:8c:09:c0:60:4a:6f:aa:c7:36:7f:e3:
a1:4c:bb:7c:7e:d0:e1:bc:40:0c:9c:83:1e:6d:be:
e0:4b:df:32:13:fd:27:9a:02:12:6e:3e:91:5e:87:
21:2d:28:2b:3a:36:2f:4f:ce:e2:a5:f6:08:18:5e:
5c:96:72:96:8c:ea:60:bf:8e:f7:cc:9b:16:1e:bf:
d5:b1:bf:63:d8:bf:1e:89:b2:62:06:74:c8:21:30:
f6:46:55:e0:16:48:8e:65:08:f7:cc:7d:e6:1f:d4:
7e:51:2e:e0:ff:02:90:97:1d:93:77:5b:3a:d7:c7:
64:fa:ee:d3:3d:ac:34:b5:52:9b:1c:62:11:a8:7c:
b9:07:26:1e:f1:03:13:c9:26:d8:4d:10:30:dd:9b:
e1:fb:8d:f4:4d:98:da:56:91:1d:fe:53:36:80:ea:
5b:f0:30:9d:ad:9d:be:fd:0d:7c:4f:d8:0f:eb:6a:
f1:64:b8:29:b2:11:33:20:31:37:b1:c2:56:56:d3:
be:84:50:96:e4:b6:bd:e2:fa:75:d8:58:ea:12:38:
9c:b4:8b:8e:4d:59:c4:0d:fc:49:19:fc:5e:09:1c:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:75:30:D4:07:FD:B4:0A:E0:08:44:AB:D5:2A:64:F2:64:4E:F1
X509v3 Authority Key Identifier:
keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:87:20:ab:bd:99:87:b2:3f:ed:eb:7b:25:75:ee:a3:1d:ec:
09:0f:e2:16:74:73:f9:52:87:87:cf:41:ef:59:20:39:d9:32:
2b:91:f6:5b:30:03:a7:09:80:c8:e1:69:43:30:01:0b:83:39:
84:4b:fa:fe:78:59:7d:e9:fd:f9:e2:5e:bf:4e:9a:17:d3:a9:
c2:50:af:b1:6b:ef:90:b6:82:3b:f1:80:b5:48:b2:41:d3:72:
1f:2f:06:c5:22:46:9f:6c:f7:7c:da:22:20:c0:59:e7:64:7d:
9a:82:13:ba:75:73:0e:f5:65:66:b2:f1:56:95:b0:69:b4:c2:
d4:d3:16:9f:d1:a2:f4:de:64:a1:7e:22:75:1b:34:dd:43:c4:
cd:e9:86:3d:f5:a3:4c:05:76:14:4a:62:f2:89:cd:96:6f:d6:
e3:cd:6d:49:7d:be:c4:bd:b9:01:8a:54:d3:be:c5:8b:22:d9:
1d:73:f0:1f:eb:0e:f6:16:e9:66:c8:fc:37:60:19:18:cb:75:
ff:d5:60:9b:28:f6:a1:d2:4d:b3:70:4e:1c:f7:2b:0d:94:97:
16:5c:10:18:80:e7:f9:f5:fa:53:72:05:73:93:61:43:80:8e:
1e:c0:0d:2f:57:e9:d5:40:9a:c2:9c:cb:60:5f:e3:d3:84:8a:
ca:17:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:09:32 2025 by rpki-client