This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
File: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft (raw, json)
Hash identifier: OGUWgZ/Wmjnmdv+BEwTPAzKD8BsRyjlhTPRCH5CaXuU=
Subject key identifier: 90:D2:CE:5F:D2:73:73:68:B1:21:22:89:FE:D3:83:B6:59:E6:1E:50
Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
Manifest number: 0918
Signing time: Sat 06 Dec 2025 19:28:32 +0000
Manifest this update: Sat 06 Dec 2025 19:28:32 +0000
Manifest next update: Sat 13 Dec 2025 19:28:32 +0000
Files and hashes: 1: RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl (hash: +0WwHfE0XEfGp4+4qg6VUj3h/ktgFt727xlBJndTt4o=)
2: 465DBB30BA8811EAAF996D39C4F9AE02.roa (hash: 23ndFVCcLg+/bCNKhL706A7YBuPjvG2i31lg9YjdTYE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB8BA, serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A
Validity
Not Before: Dec 6 19:28:32 2025 GMT
Not After : Dec 13 19:28:32 2025 GMT
Subject: CN=693483e0-7ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:61:e8:19:4c:19:1b:b9:69:ca:37:ff:c7:
c7:16:61:c9:1c:f6:93:5e:af:e8:f5:98:af:7a:48:
ad:82:70:96:f9:fd:c2:06:fd:b4:e7:b9:28:4f:9a:
a0:2a:2d:e6:a6:b7:3f:aa:ef:90:9c:10:cf:a5:46:
b7:6e:60:a9:b5:40:5a:37:62:b3:c1:dc:ef:21:4a:
bf:36:3e:93:25:4d:9d:68:8a:92:8d:69:64:77:bd:
a4:6e:d3:c2:7b:60:66:76:ea:52:ad:3f:1c:ab:3a:
4b:a1:31:08:31:27:f9:4d:9e:09:37:2e:0d:6e:0a:
b5:4b:b5:81:8f:8e:d1:3c:d9:46:80:62:40:d2:21:
6e:f0:02:9a:62:de:18:bd:00:97:31:39:3d:db:3b:
c8:3a:a8:55:a4:87:cf:27:ab:b8:28:f6:c9:49:13:
91:9d:61:76:ed:46:1a:23:20:63:67:bf:71:6c:68:
66:81:27:b5:20:9d:28:f6:ef:c6:ab:93:94:2e:69:
fe:f5:63:c7:55:c2:96:81:a7:ff:4b:be:e3:01:03:
f9:f9:03:c2:70:50:e2:75:fa:78:4d:52:aa:c7:86:
93:ae:52:0d:97:47:1a:37:2f:ce:b5:7c:86:98:2c:
cb:24:67:5a:a7:76:2d:a1:11:16:84:1f:cd:c1:8b:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D2:CE:5F:D2:73:73:68:B1:21:22:89:FE:D3:83:B6:59:E6:1E:50
X509v3 Authority Key Identifier:
keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c7:49:aa:1e:4f:0f:99:81:cf:8c:03:9a:78:59:82:fa:91:
2c:7d:90:e5:62:c7:c8:34:d4:4f:ee:bf:52:24:bf:73:55:a0:
ba:7d:b8:50:8b:25:0e:77:41:51:d5:24:66:c9:12:88:c0:de:
0d:17:43:8c:e0:f5:1d:25:0d:8f:78:40:c2:7c:0f:6a:2a:3c:
e1:a5:3d:37:e7:62:c6:08:6a:b4:d9:84:c3:7b:bd:37:0e:21:
0f:37:f9:43:4d:d9:25:cf:4b:60:a3:2c:4f:69:23:f4:3e:6d:
64:b2:26:58:31:c8:bd:2e:a6:a1:ce:51:bd:4b:a9:b9:f9:c3:
19:8c:c5:46:91:35:75:7b:1c:9d:7b:da:b3:78:94:31:c3:4e:
11:c0:74:6e:f4:bc:32:ef:d5:98:a8:f5:17:0f:51:cb:0f:99:
1e:8c:8c:7b:57:33:62:e2:69:bd:cf:c8:de:b3:43:5a:73:db:
94:3f:ab:30:a5:1d:f2:71:9c:2b:ba:13:92:fd:c6:7b:8a:45:
cd:e2:33:ab:af:3c:b1:92:c5:89:a9:35:b8:e5:39:ab:22:21:
df:76:bb:81:aa:ec:15:fe:eb:08:e3:8a:89:c2:90:85:4f:2d:
d2:f9:2e:7b:d7:ef:1d:7f:c8:e4:1c:f9:a5:7e:8b:35:f7:fb:
5a:f8:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:31:01 2025 by rpki-client