This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
File: ed1SqjF1MIEm0XSGpygF-w4bqlg.mft (raw, json)
Hash identifier: dckFfuBHMbg6FDtXiTvilT4qT4PmoQi/+yOM5ggo2m4=
Subject key identifier: BA:16:28:5C:04:30:B0:AF:90:B9:7D:76:FC:79:6F:55:12:33:FE:40
Authority key identifier: 79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
Certificate issuer: /CN=A91CB0E2/serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Certificate serial: 07AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
Manifest number: 07A5
Signing time: Mon 22 Dec 2025 20:44:06 +0000
Manifest this update: Mon 22 Dec 2025 20:44:05 +0000
Manifest next update: Mon 29 Dec 2025 20:44:05 +0000
Files and hashes: 1: ed1SqjF1MIEm0XSGpygF-w4bqlg.crl (hash: CoMoiN8NtuhiYpbR5S/2yzWHmWtIL/X/XjhZSE/6cIM=)
2: 6B5C86022D6811EB86D96027C4F9AE02.roa (hash: t3hqNdqM2MD3ZAVu8FNoGwxlm5G0gcPJniuKJXcYFWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964 (0x7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB0E2, serialNumber=79DD52AA3175308126D17486A72805FB0E1BAA58
Validity
Not Before: Dec 22 20:44:05 2025 GMT
Not After : Dec 29 20:44:05 2025 GMT
Subject: CN=6949ad95-5a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:23:84:ec:29:46:33:44:15:8c:2b:1c:09:
d1:05:41:1d:d8:07:26:eb:a9:14:1d:ed:d8:61:eb:
6b:5b:07:9d:43:9b:ac:78:4e:71:b7:cc:3c:e7:bc:
aa:d8:9a:e6:30:3e:47:b2:07:55:bb:98:8b:dd:55:
5c:85:f7:3b:14:32:14:61:62:7a:4b:58:47:50:9a:
bb:e0:d6:e4:68:3e:68:c6:b2:34:8b:e8:c4:33:27:
cf:c0:a7:9d:27:77:94:68:c3:7f:96:f6:9b:1e:97:
48:72:53:ac:6d:ed:0f:ca:22:ba:cc:9f:a1:f4:2e:
7a:6d:f7:bc:26:e2:e4:57:b8:4d:8f:4b:f0:8c:2f:
94:df:65:be:56:23:2b:31:a0:de:38:bb:ec:7b:0e:
40:63:d7:ec:9e:e7:bf:24:fa:3a:bc:ff:d7:64:9b:
08:54:cd:17:49:d9:bf:f7:c2:5e:25:26:55:09:43:
1a:c2:25:fe:af:21:9c:7c:03:9d:38:a1:1c:f2:4e:
65:38:0b:1f:df:85:16:b4:7f:d5:30:02:94:8b:8c:
f2:2f:5b:c9:57:a6:0f:0b:f8:17:a5:ca:a9:82:e5:
ee:4c:41:97:99:2e:8e:1c:44:26:89:40:ed:84:6c:
dc:c9:8f:f6:cc:df:9f:55:f2:2b:72:37:1d:ac:89:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:28:5C:04:30:B0:AF:90:B9:7D:76:FC:79:6F:55:12:33:FE:40
X509v3 Authority Key Identifier:
keyid:79:DD:52:AA:31:75:30:81:26:D1:74:86:A7:28:05:FB:0E:1B:AA:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ed1SqjF1MIEm0XSGpygF-w4bqlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB0E2/B623852A2D6611EBB44F5725C4F9AE02/ed1SqjF1MIEm0XSGpygF-w4bqlg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:52:21:ba:cd:e3:1d:69:cb:89:83:53:32:86:e2:95:ca:24:
5c:3b:e3:92:0d:86:7d:7c:89:e7:70:e2:86:11:88:ae:68:eb:
da:01:94:dd:a9:d0:4e:37:85:24:64:3d:38:27:c3:39:82:f0:
8b:ea:6a:df:89:dc:73:c4:94:d5:7c:9b:f6:a8:b8:a5:2e:b9:
8a:0f:a8:fe:9a:95:fe:f2:21:a8:c9:de:a4:89:bb:bf:1c:ba:
0c:ad:87:e4:72:18:44:03:93:cd:68:58:bb:50:ba:5c:5b:81:
8b:3e:ac:16:2d:54:f9:96:84:f7:84:64:6f:e8:27:6f:e4:22:
4c:e5:e9:bf:9d:bd:97:ff:6e:9b:59:7b:3f:58:7c:d4:57:1a:
3b:2f:6a:86:68:2b:24:78:33:1c:b7:bb:0e:92:1b:7d:d4:2e:
d9:1f:d1:f1:38:30:4a:f2:6d:15:6c:2e:c9:fb:70:d1:38:34:
14:4a:9d:4e:15:74:41:fb:9d:1b:8e:11:19:11:dd:71:63:0e:
22:79:52:e6:8f:2f:92:b5:5a:5f:73:cf:f7:ab:aa:5b:30:e1:
a4:2b:ae:89:25:a3:3a:b9:3a:8f:d4:a0:7f:d3:47:c7:54:1c:
84:5c:4a:b5:81:c1:c5:41:8b:b8:8a:0b:eb:d1:6c:74:41:00:
84:68:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:19 2025 by rpki-client