This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json)
Hash identifier: 7AMv7ozujilVbQ7WCiqo4ySQjbJM1DNkx5eZElcWOc0=
Subject key identifier: 72:B9:FE:B0:F5:DB:93:31:C8:D1:87:AA:CF:86:EA:18:A6:47:A6:7C
Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
Manifest number: 016D
Signing time: Tue 23 Dec 2025 02:52:47 +0000
Manifest this update: Tue 23 Dec 2025 02:52:47 +0000
Manifest next update: Tue 30 Dec 2025 02:52:47 +0000
Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: Bb98AyxxRP+j96xc3avwt1xEfmXsDPSg25nhFPPNWX0=)
2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F
Validity
Not Before: Dec 23 02:52:47 2025 GMT
Not After : Dec 30 02:52:47 2025 GMT
Subject: CN=694a03ff-9a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:ce:3f:a8:6d:84:4e:8e:e9:7a:9a:04:4b:
89:de:8f:97:b7:90:7a:3b:72:df:d9:b6:f5:e6:11:
ae:1a:ee:e0:df:c0:66:5b:7c:7d:bf:ad:ba:28:11:
73:e1:44:45:b3:ad:93:52:fb:18:c9:d0:bb:54:7b:
dd:f1:5e:93:35:2e:22:82:24:88:96:18:ff:a1:6e:
da:c2:b7:53:98:c0:c4:d1:78:f6:92:80:d3:cb:90:
e7:69:22:89:41:56:22:6c:48:be:dc:70:dd:f5:7a:
e2:db:51:5c:a9:bd:4a:d5:d4:66:f3:7a:ae:9e:04:
49:5e:5f:7f:96:e4:f9:18:6a:3e:fa:4a:9c:97:dc:
93:f3:7c:54:87:25:6d:d1:62:46:17:88:cb:e8:18:
da:48:5f:d3:74:36:65:50:7a:57:d5:29:96:ed:19:
26:c0:54:25:32:6f:c1:cf:5e:29:22:a0:b0:07:7a:
1c:b0:4c:dd:5d:cd:cf:1a:2c:35:90:84:f3:55:5e:
da:c1:a8:34:f5:0f:27:16:4c:73:93:f6:a3:21:82:
0b:f5:37:f7:10:2d:63:35:1f:70:6d:d3:b7:9c:81:
13:0d:e2:b4:1b:04:24:cc:5f:f3:79:aa:68:77:a2:
cf:f9:b1:7a:94:5c:36:98:4b:b4:c2:63:41:16:ea:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:FE:B0:F5:DB:93:31:C8:D1:87:AA:CF:86:EA:18:A6:47:A6:7C
X509v3 Authority Key Identifier:
keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b7:46:2a:04:7d:68:df:8d:cf:fe:48:0e:1d:ee:8c:cd:22:
aa:fc:a5:2d:cf:4e:c7:32:55:2f:0e:7d:33:35:23:26:d4:81:
9b:42:57:43:47:4f:c7:f2:91:1a:76:d2:df:f9:15:98:4d:19:
0e:6a:47:06:cf:38:bc:a0:bb:50:c2:b7:3f:1a:5c:80:f0:53:
57:58:f9:ce:7d:08:45:eb:8e:94:62:82:23:bb:4b:a9:93:7c:
12:cb:a3:09:49:5d:a6:23:08:c8:48:b2:96:2b:c2:4e:33:76:
0f:c6:e1:17:37:eb:0a:75:91:78:32:17:1a:ec:a8:42:36:48:
73:6f:86:ba:81:89:70:31:5e:f3:f5:76:47:8e:97:81:a3:2f:
3b:ea:a4:d0:6a:b7:f7:e3:77:6e:99:67:35:08:6b:d0:9e:6a:
78:da:4e:5c:49:de:d5:6e:30:c6:ff:b4:78:d0:76:35:fd:ff:
14:e7:78:26:65:70:11:53:fd:a8:53:2a:11:18:71:8c:aa:a3:
a2:44:73:05:39:b2:c2:3c:af:99:7f:d9:85:dc:00:22:c8:a5:
2c:fc:37:a7:64:b8:98:8d:67:f8:68:bf:79:5e:46:ea:d7:da:
92:7c:78:a3:72:09:36:34:79:8c:32:37:85:47:a4:28:7a:1c:
bc:98:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:42 2025 by rpki-client