This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
File: Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft (raw, json)
Hash identifier: e7kc7If2DmQKYGjIDAkGLqbht3cz6x5sxhriBdQYYGo=
Subject key identifier: C9:4A:23:12:F7:92:AF:A5:11:00:F7:3D:F0:B3:B9:DD:FB:7E:C5:DF
Authority key identifier: 3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
Certificate issuer: /CN=A91D06FC/serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Certificate serial: 0400
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
Manifest number: 03FB
Signing time: Tue 23 Dec 2025 00:20:33 +0000
Manifest this update: Tue 23 Dec 2025 00:20:33 +0000
Manifest next update: Tue 30 Dec 2025 00:20:33 +0000
Files and hashes: 1: Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl (hash: xwoTSuGdKrGoWRc0Rcln7yTCS3Hharg1rjTPHZmNOJw=)
2: AF8386E29EEF11EC8450760EC4F9AE02.roa (hash: DozQJ1dHmAg3g97IuJSuIhOMEdC6MQhv4ugGVIX2pIk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D06FC, serialNumber=3E5B3CAB9F141A06EB832E63F586CB0E66760402
Validity
Not Before: Dec 23 00:20:33 2025 GMT
Not After : Dec 30 00:20:33 2025 GMT
Subject: CN=6949e051-85a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:9b:35:2a:6e:3d:7c:aa:3c:1a:e0:6a:f4:
a5:e4:b5:87:df:5e:23:cf:84:9a:71:7c:84:82:6a:
83:6e:46:10:57:95:56:fd:8e:3b:3e:25:e1:04:c5:
45:49:22:82:ba:34:4e:7c:ec:50:e7:2e:c5:e1:27:
ab:19:b7:b4:19:0a:c3:bd:8d:6e:6f:8f:a0:a2:69:
65:04:cb:05:78:dc:4a:ae:8c:4b:0b:9a:d1:90:9f:
d3:01:3a:d1:8f:9a:74:50:89:b6:15:06:5d:16:bc:
41:61:47:fb:b0:15:ba:9f:ee:1a:11:86:ac:b7:15:
12:d5:58:e0:11:26:7f:be:53:c4:8f:da:da:e4:4f:
27:b0:57:60:cf:ff:61:ac:15:b4:90:8e:12:7a:1b:
fa:8a:d7:14:97:2f:a1:dd:48:63:f9:43:b7:b3:c4:
61:ee:ab:77:5e:c6:f9:16:30:85:a8:8f:5d:1a:df:
d0:a5:05:1f:22:3f:3a:1d:aa:3b:8c:14:a1:52:aa:
43:80:82:8d:98:14:65:74:66:fa:4f:e6:ce:55:0c:
ab:dd:25:cb:ba:67:d4:dd:0e:c7:b7:f3:aa:7b:f3:
26:61:72:97:48:2e:c1:46:95:fe:fd:81:71:f9:39:
61:a1:b7:70:22:88:9e:1d:ec:f9:88:ab:b8:3a:3a:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4A:23:12:F7:92:AF:A5:11:00:F7:3D:F0:B3:B9:DD:FB:7E:C5:DF
X509v3 Authority Key Identifier:
keyid:3E:5B:3C:AB:9F:14:1A:06:EB:83:2E:63:F5:86:CB:0E:66:76:04:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pls8q58UGgbrgy5j9YbLDmZ2BAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D06FC/AEF230E29EEB11EC8049A27FC4F9AE02/Pls8q58UGgbrgy5j9YbLDmZ2BAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:22:8a:fd:12:6b:7d:a4:a1:07:04:a3:b2:7f:6d:68:b4:8e:
0f:53:ec:05:51:19:9c:1f:26:5c:c6:2a:42:7a:9f:83:bf:6c:
df:a7:d8:7d:5f:d4:69:ee:3f:2e:df:e8:8a:21:d8:80:3b:2c:
4d:86:9b:df:e2:f5:2a:27:aa:62:d1:61:d2:2b:3a:32:6a:0a:
c3:b6:12:0f:a8:4e:2e:8f:ac:ee:88:30:3c:02:b5:4a:3d:70:
f2:63:d7:1d:45:79:3b:0e:db:db:33:77:96:37:5a:a4:73:f6:
85:f9:10:08:85:0d:4c:e6:f7:9d:71:aa:11:e1:a2:c1:da:e5:
b4:b2:a9:41:78:09:8b:37:f5:4d:45:11:ff:74:02:7e:00:2d:
64:6f:29:ec:fe:b0:58:1e:31:6a:d0:3b:eb:da:b3:d2:fa:e4:
99:7f:47:a9:4b:5a:84:96:e3:7b:70:c7:70:c5:c6:4d:ce:25:
a8:96:ca:f5:fb:ad:d6:0d:1d:62:cc:74:2e:a1:3a:35:1e:6f:
83:52:86:47:3f:39:a6:a3:ef:31:5c:57:95:e3:9d:a6:65:8f:
53:a4:05:0e:f0:8f:e1:88:62:38:03:dd:61:51:40:e5:dd:05:
9d:b2:fb:68:f8:63:db:38:42:a8:67:5b:cc:aa:6a:89:4c:96:
79:0d:12:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:19 2025 by rpki-client