This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
File: kBUoySF5F9lWch0caFZlNFvrVv0.mft (raw, json)
Hash identifier: gno47cdkw3vtvfCzPiFKcy05M/V84dbO09O6JMfMrmE=
Subject key identifier: 5D:BF:73:BE:57:41:18:8A:9B:3F:5A:14:46:9B:37:1A:00:96:2B:EA
Authority key identifier: 90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
Certificate issuer: /CN=A91CFAB9/serialNumber=901528C9217917D956721D1C685665345BEB56FD
Certificate serial: 0396
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
Manifest number: 0392
Signing time: Thu 18 Dec 2025 23:46:49 +0000
Manifest this update: Thu 18 Dec 2025 23:46:48 +0000
Manifest next update: Thu 25 Dec 2025 23:46:48 +0000
Files and hashes: 1: kBUoySF5F9lWch0caFZlNFvrVv0.crl (hash: drOga68m3MUP26j/4IeAkgUoB5h35h+3iXWjpJd/inY=)
2: 39A335D6CB3F11ECBEBC9A1DC4F9AE02.roa (hash: NmvW/sg0pEXjTHBegEg6TihBwGGc4JodMMQnzVosHvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl
rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFAB9, serialNumber=901528C9217917D956721D1C685665345BEB56FD
Validity
Not Before: Dec 18 23:46:48 2025 GMT
Not After : Dec 25 23:46:48 2025 GMT
Subject: CN=69449268-d4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:41:ad:62:5d:44:45:3f:52:f7:c5:f9:69:
8b:bf:e5:c9:d2:c2:65:f7:a6:45:ef:61:cd:52:36:
e6:42:f9:46:9e:dd:f2:7a:47:87:de:0d:a9:0b:b9:
72:f2:fb:0a:99:29:c7:07:c5:f2:6a:46:10:5b:3e:
05:cd:df:a7:4e:82:d7:b6:7b:8e:61:5a:1f:36:fe:
9b:ec:74:a0:e1:15:55:29:a4:0d:b3:42:cb:f7:65:
4c:fc:dc:5d:15:1f:79:83:b8:c8:57:e1:50:5c:a0:
97:44:22:48:cb:20:76:da:21:02:7c:2b:34:bf:f9:
41:56:03:18:32:60:6b:fd:60:8e:9b:af:b6:b5:09:
61:4c:ea:96:c1:d0:dc:fd:ee:b0:3f:d5:df:b4:40:
cb:4a:da:d7:87:07:96:3d:a0:98:8f:63:86:e2:3a:
a0:54:80:8b:d1:a9:22:cb:8d:af:eb:89:d4:39:4e:
d6:ba:0f:51:2a:c2:88:28:b2:d3:d7:40:0e:94:50:
81:3e:7b:b9:6d:64:e4:1d:ec:d6:df:02:8d:21:c6:
83:40:c9:e9:98:ce:6b:80:a7:4c:e3:a8:90:b2:3e:
5c:1c:4a:d1:5e:c0:7f:e5:2f:86:85:2e:b6:bc:45:
52:ba:8c:a0:06:d8:cd:cf:0c:5e:45:ba:3c:bf:90:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BF:73:BE:57:41:18:8A:9B:3F:5A:14:46:9B:37:1A:00:96:2B:EA
X509v3 Authority Key Identifier:
keyid:90:15:28:C9:21:79:17:D9:56:72:1D:1C:68:56:65:34:5B:EB:56:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kBUoySF5F9lWch0caFZlNFvrVv0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFAB9/1CD44F9EC77A11ECB9434C2CC4F9AE02/kBUoySF5F9lWch0caFZlNFvrVv0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:4f:03:c5:3e:dc:80:e0:f1:8c:31:66:14:e3:f2:40:c2:14:
51:09:72:59:36:7d:dd:9b:01:4a:39:05:c2:bd:70:74:ae:4a:
a7:6a:7a:d7:1d:73:1f:70:bb:5d:41:fe:f7:6c:0e:83:ad:fb:
48:84:f5:dd:db:c4:63:93:ed:01:7a:13:0d:5e:37:df:b4:56:
a5:2e:3d:5f:d2:55:a0:a1:06:7b:7b:8c:d0:0e:b2:b5:83:c8:
53:29:cf:50:05:82:96:34:92:06:3c:55:da:68:44:e7:12:d7:
cd:d4:ef:b4:df:b0:a4:74:ba:da:9d:f5:2e:b7:14:63:19:26:
a3:f5:2c:ef:41:6a:2c:64:8a:a1:4e:b3:28:3f:99:03:d0:a7:
3d:27:12:3a:ce:af:c0:3c:67:20:fb:4b:38:20:43:18:ca:08:
73:28:00:0f:50:ef:ce:70:78:a9:a3:41:7c:8e:b9:90:08:2a:
2f:6e:29:22:e2:87:3d:e3:9e:0b:b0:39:b8:15:79:10:df:b3:
e8:38:79:2d:de:13:a1:ab:ae:25:65:2c:9b:d2:fb:22:c0:08:
78:c2:4f:9c:e5:73:d8:ca:be:29:d5:2f:b1:b5:65:5a:78:d3:
65:bf:f4:98:39:c0:db:56:06:05:09:8b:4d:ac:3e:64:64:a1:
59:d8:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 21:28:44 2025 by rpki-client