This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
File: K90xURFt6dvFXPw9LNrKWOdLGeY.mft (raw, json)
Hash identifier: FyXqrqbS8x8GQ9XxcNd21iU007siaItu9+XMzXy7cQA=
Subject key identifier: BF:12:CA:20:3F:F6:85:58:56:D3:AD:E5:4E:8A:B1:DF:A5:8F:89:FC
Authority key identifier: 2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
Certificate issuer: /CN=A91CA815/serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Certificate serial: 350C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
Manifest number: 3500
Signing time: Wed 24 Dec 2025 15:11:06 +0000
Manifest this update: Wed 24 Dec 2025 15:11:06 +0000
Manifest next update: Wed 31 Dec 2025 15:11:06 +0000
Files and hashes: 1: K90xURFt6dvFXPw9LNrKWOdLGeY.crl (hash: Krbe22Z/VVfX0DaUHTQVXAAjAbDSfaeQazhAZj9g59M=)
2: E9E555FA506211EAA2BC3E2EC4F9AE02.roa (hash: 94upbThXWs7jdkckBYzhf2EHZzwnE7a+md45nVRxn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13580 (0x350c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA815, serialNumber=2BDD3151116DE9DBC55CFC3D2CDACA58E74B19E6
Validity
Not Before: Dec 24 15:11:06 2025 GMT
Not After : Dec 31 15:11:06 2025 GMT
Subject: CN=694c028a-d1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:b3:07:13:7b:fc:13:08:6b:bd:6d:97:1d:
74:a4:ea:92:06:75:12:03:db:88:24:4e:51:de:58:
42:3e:8a:71:07:57:4e:46:cb:0c:d4:79:9e:f0:25:
4b:c6:37:b2:17:b2:33:61:bd:2e:8e:2b:e2:60:51:
48:4d:ee:5b:d4:0d:3d:cf:a9:57:2c:61:65:78:a0:
a9:59:59:34:a2:4e:d2:67:29:6f:79:7c:43:cb:67:
23:e3:a8:4b:32:ff:54:53:f1:e8:7d:f8:89:a1:f8:
5a:31:62:b1:69:b5:d7:01:56:ed:b8:17:70:53:a0:
f2:3a:82:d6:e1:be:52:bb:74:a9:df:e7:d7:2c:ca:
e5:3b:c0:88:b7:af:ff:19:fb:70:bb:64:25:cb:5a:
b7:df:15:e9:ba:b0:9b:ed:1b:29:2b:70:f2:dd:f8:
7e:15:d1:d5:7d:94:f1:19:2f:55:5f:65:d0:5d:3c:
9c:8f:1a:06:23:73:94:40:04:c3:ec:a7:cc:23:b7:
39:98:72:06:09:38:84:a6:cb:0e:87:93:43:1e:f7:
b4:00:43:62:d6:a1:36:a9:a6:5b:97:e3:ac:6f:96:
68:db:8a:12:90:81:75:e7:4a:e5:94:01:7f:43:c5:
87:64:fd:55:ce:50:73:cd:fa:3b:f6:a2:16:92:ae:
91:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:CA:20:3F:F6:85:58:56:D3:AD:E5:4E:8A:B1:DF:A5:8F:89:FC
X509v3 Authority Key Identifier:
keyid:2B:DD:31:51:11:6D:E9:DB:C5:5C:FC:3D:2C:DA:CA:58:E7:4B:19:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K90xURFt6dvFXPw9LNrKWOdLGeY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA815/8DCD1EA81D9B11E291D2848908B02CD2/K90xURFt6dvFXPw9LNrKWOdLGeY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:05:4b:da:50:14:0e:64:ee:e5:69:7b:9e:15:4f:c1:46:
5e:74:0f:96:d9:70:39:91:dc:56:0b:2b:7e:e6:d4:e3:59:91:
63:21:27:de:86:e5:ad:67:83:04:6c:6c:e1:8e:91:93:e6:8a:
58:2f:2a:8c:3e:3e:80:0c:e6:26:ba:6b:c1:5a:a7:6c:92:fe:
8c:ba:df:6f:77:c2:21:48:60:15:cf:86:9b:80:ea:66:58:f3:
d8:52:7c:9e:36:1f:16:20:ae:2b:48:e0:75:78:4c:26:78:c4:
27:8b:30:02:fc:69:9c:26:69:a1:8f:17:99:f0:49:7a:a0:b9:
9f:5f:dd:bf:f9:27:19:bd:7d:5a:6d:d0:17:5a:dd:7e:80:28:
74:2c:14:41:73:ce:ec:ca:92:5c:0d:e0:9d:0a:95:5d:53:7e:
78:b9:0b:46:55:31:6c:2d:03:10:dc:56:59:b5:e9:a1:7d:29:
2d:6d:dd:c4:f2:2d:49:7e:26:40:a4:eb:3c:b7:ab:6c:ac:e2:
5a:11:89:5e:01:5b:35:4b:ce:f6:1c:ca:3b:c7:d2:42:c4:83:
fd:d9:23:12:28:46:79:dd:bc:b9:f8:01:47:e1:32:3b:df:64:
b5:76:3a:95:63:9f:f8:b1:f6:27:42:3e:ae:82:f1:f4:21:1e:
e6:4c:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:07 2025 by rpki-client