This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
File: ijkUYMpvZEpYkR23ODRhhON40AU.mft (raw, json)
Hash identifier: W85wiG3fI2U0ymJw2zd/PtWtOCuZef9cyc8IB6uqpfQ=
Subject key identifier: 5D:79:ED:7F:0E:4C:7A:31:FC:C0:5D:9C:29:59:AF:DB:E4:8D:5B:96
Authority key identifier: 8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
Certificate issuer: /CN=A91CF7F6/serialNumber=8A391460CA6F644A58911DB738346184E378D005
Certificate serial: 03B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
Manifest number: 03A4
Signing time: Wed 10 Dec 2025 23:09:38 +0000
Manifest this update: Wed 10 Dec 2025 23:09:37 +0000
Manifest next update: Wed 17 Dec 2025 23:09:37 +0000
Files and hashes: 1: ijkUYMpvZEpYkR23ODRhhON40AU.crl (hash: xLWAtlPoiqwpa6Wrjpti/UElqDZhQzlo/ejcnisfGbY=)
2: 244CF0D8329D11EF9B0F1058C4F9AE02.roa (hash: jPTVwsGJwTtYxGq4/k3kM5VWiV1n8hGmQtDrb+dxPSo=)
3: C09ED7E6804A11EDABB05C09C4F9AE02.roa (hash: R9SBhXEhOf+gMa/m0vryBFjGp9sBxlfHO7G/5GujZAU=)
4: 12A549F8BFC111ECBF03EF63C4F9AE02.roa (hash: PlCOgT/H+ZebbdqL9OriSJeX2NeXIzVYubJJm3a+JOU=)
5: 16B9139A238311EEA2B7992CC4F9AE02.roa (hash: xG6dNUlA+c724kNwKX8NUp4Jh1K9Q2v6tE8mpl0ElKc=)
6: 446E8606745311EDBF95BB2CC4F9AE02.roa (hash: Mxx0NjOtuBLL5qPMv7dyQqyOzCktL0daliI6SvMVL7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 23:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CF7F6, serialNumber=8A391460CA6F644A58911DB738346184E378D005
Validity
Not Before: Dec 10 23:09:37 2025 GMT
Not After : Dec 17 23:09:37 2025 GMT
Subject: CN=6939fdb2-4319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:68:cd:b0:52:ca:d1:fc:d0:94:b6:3e:5b:
1c:40:13:b9:63:e5:00:19:f9:35:24:04:db:60:7b:
cf:46:13:61:f4:cf:6a:89:01:5c:f4:c3:26:b2:35:
da:72:1e:d4:78:06:d9:c0:4d:c6:2e:21:92:8e:a2:
6c:27:0a:c3:c3:9f:e2:e3:31:a1:d4:25:97:06:63:
f4:3a:67:50:ef:f5:30:1b:ae:78:7d:d4:77:4f:1a:
77:28:75:90:3a:a9:25:5c:30:ca:22:47:84:bf:b8:
29:c9:92:a8:1d:55:3a:f0:ad:49:0d:2e:df:b7:64:
35:53:77:fb:fc:7a:df:54:94:38:d7:6a:81:4c:46:
f6:b9:73:77:e9:f3:b2:2c:87:8e:b5:29:c0:ed:73:
84:9f:a4:3b:2c:5e:95:ac:d1:75:e8:c0:42:39:d8:
57:fd:85:67:73:dd:a7:18:d0:4e:f8:e4:bb:3a:7d:
43:44:f3:08:68:20:6c:d7:52:ba:64:66:00:75:7d:
13:bd:58:82:2f:e6:ef:02:a6:c8:a0:87:cc:46:23:
93:83:fc:48:f9:f2:03:7e:cd:40:fc:81:db:b1:f8:
60:21:9f:b3:97:22:44:ff:ed:c6:d9:23:2a:7a:0b:
06:59:e4:d2:eb:2e:11:3d:8e:1f:ff:f1:e6:21:4a:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:79:ED:7F:0E:4C:7A:31:FC:C0:5D:9C:29:59:AF:DB:E4:8D:5B:96
X509v3 Authority Key Identifier:
keyid:8A:39:14:60:CA:6F:64:4A:58:91:1D:B7:38:34:61:84:E3:78:D0:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijkUYMpvZEpYkR23ODRhhON40AU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF7F6/7824EBD4BFBD11ECB788125DC4F9AE02/ijkUYMpvZEpYkR23ODRhhON40AU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:0b:bf:e8:e8:4c:6d:17:cd:d6:44:12:5b:e4:2e:2e:c0:37:
cd:90:10:2d:8d:29:64:86:cb:4d:a4:38:8c:31:85:a2:cd:c5:
57:ef:71:b9:11:ea:96:7a:18:92:be:00:e2:d6:1b:7b:d8:5a:
2d:56:9f:52:9c:ad:6a:51:d2:09:ac:0a:1c:ed:21:fa:55:29:
1a:c7:cf:da:58:e1:13:b0:c7:4e:20:dc:69:42:1b:79:06:cb:
5e:d6:03:42:2e:99:8b:c6:10:b1:72:e5:58:55:c1:7f:5b:9a:
90:d2:91:a4:d1:8d:87:36:1b:7e:e2:ba:80:70:b4:78:0c:ce:
d3:47:f0:60:4b:c1:85:c0:26:82:11:71:9c:da:f0:75:dc:21:
59:56:c4:d0:e4:15:a9:e9:8e:90:55:cb:ac:60:22:4b:0e:ec:
20:12:2c:3b:16:7b:39:14:5b:26:80:5e:61:0b:ca:b2:c5:d1:
9f:b2:a9:02:9a:e4:60:10:66:fa:d1:8c:b7:aa:45:75:e2:94:
a9:39:46:d3:a1:7d:11:c9:20:49:72:40:61:49:2e:5f:79:74:
a3:2f:e4:a6:50:bf:5c:36:e5:71:d3:fb:95:3a:e8:34:c6:d4:
66:13:de:e1:89:f8:56:ab:67:1a:4e:32:b9:4f:c3:93:3f:4c:
59:38:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 19:08:21 2025 by rpki-client