This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
File: B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json)
Hash identifier: f7/fXGeXs11AEOvSwEY6zEHtJF/EB3XYUSyyKc0Gpqg=
Subject key identifier: 96:C6:E1:15:24:19:7B:04:F1:F8:5B:57:38:58:B1:8E:C2:3C:93:CB
Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
Certificate issuer: /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
Manifest number: 0252
Signing time: Tue 23 Dec 2025 00:44:08 +0000
Manifest this update: Tue 23 Dec 2025 00:44:07 +0000
Manifest next update: Tue 30 Dec 2025 00:44:07 +0000
Files and hashes: 1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: LyEfNiPYMHytIB75M/bZZujHpnS/RMQBSG7MjVwYWPM=)
2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: KvaqXLWWsSi0DyIW72uaV8JvweT4UuqZ2OwGOX+bYh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Validity
Not Before: Dec 23 00:44:07 2025 GMT
Not After : Dec 30 00:44:07 2025 GMT
Subject: CN=6949e5d7-4d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d6:0e:f8:37:3b:fb:e9:6e:c6:ad:87:7b:9c:
20:9f:22:83:82:9f:60:d5:dc:9a:24:53:41:44:46:
0f:f5:05:2d:50:87:80:8b:29:6c:a0:9e:ba:1c:88:
4b:34:6a:e1:67:a5:57:2f:c3:f1:57:02:31:b1:d1:
7d:0b:cf:7b:f7:7d:e6:6f:fe:6f:c6:19:b2:e4:38:
d8:c5:51:35:5e:63:1c:8a:ba:a1:07:8a:cc:0a:72:
9e:80:38:16:a6:f9:d8:a8:5c:d5:57:d9:16:d5:2d:
89:af:da:c2:a6:e1:87:e4:88:04:e5:a1:13:9a:f3:
eb:d8:09:f1:51:71:41:c6:ac:5b:93:38:13:04:59:
64:2b:38:d9:2c:6e:eb:6d:91:b6:3e:38:3f:f6:62:
b5:10:a7:c9:fd:60:23:83:70:19:70:31:f1:e9:9c:
61:02:21:07:2a:b9:20:8e:ee:fd:a3:91:ae:8a:b0:
8c:72:0e:e7:80:67:cd:b3:24:6b:f9:be:0b:3c:ea:
25:84:b9:cd:8c:07:90:46:3b:0d:e3:db:07:96:28:
7e:6c:b6:9e:1b:69:8e:d4:fa:19:22:fb:aa:3c:f9:
cd:d1:8e:62:e1:c6:f6:45:2c:4a:99:a7:98:3e:f2:
e8:b3:83:81:18:18:11:02:e2:c3:7d:dc:1f:7c:1b:
b3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C6:E1:15:24:19:7B:04:F1:F8:5B:57:38:58:B1:8E:C2:3C:93:CB
X509v3 Authority Key Identifier:
keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:86:c8:5f:8a:c4:5c:33:b5:78:bc:71:f7:7a:fb:4d:e2:67:
2a:c3:e2:6f:7d:5f:a4:f6:55:04:d5:9a:88:0e:c9:d1:49:a8:
53:1f:96:a1:c0:9c:83:c4:51:11:5e:8f:a5:13:76:8d:35:08:
5b:68:26:c9:f8:12:ec:2c:67:f4:3a:6d:6d:de:36:90:17:44:
2d:df:e6:93:73:8f:bf:3e:80:e4:79:41:96:75:da:ac:82:c6:
dc:20:5a:9c:1c:08:4a:f4:6e:cd:dd:21:28:3d:09:07:71:85:
64:6a:8b:8d:43:49:04:57:67:2d:21:26:13:e2:71:99:03:6e:
bd:1f:3c:96:23:2e:9b:86:b8:8a:86:a9:d9:46:11:b4:be:f4:
1e:99:ba:7b:7c:d4:c0:24:9b:99:f7:4b:37:34:19:b9:7a:a9:
ac:23:e4:67:9b:47:d5:81:69:0c:91:70:c6:53:78:f1:c7:26:
6a:d2:20:19:bf:d0:51:55:5d:61:75:df:4b:e3:62:54:69:50:
e9:4a:11:6c:af:e2:80:f5:ac:bc:81:0c:7d:34:b6:61:03:a8:
ff:71:3d:30:3e:2d:88:80:0a:60:26:b3:5f:52:7f:91:7d:0a:
2d:b0:42:cb:94:9e:f1:12:ab:5e:16:5b:ef:67:61:a7:29:72:
ff:b3:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:06 2025 by rpki-client