This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
File: we5pqmqhrLoy4Wdk2oG_ekFopg0.mft (raw, json)
Hash identifier: F4MB1Y6asMDrsud+TqGLAGANTgbloN7YohOpEqJmfG8=
Subject key identifier: FC:95:9F:E3:CD:4B:FE:08:85:12:F7:25:A3:82:F5:40:97:B7:65:31
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
Manifest number: 8A
Signing time: Wed 03 Dec 2025 04:53:18 +0000
Manifest this update: Wed 03 Dec 2025 04:53:17 +0000
Manifest next update: Wed 10 Dec 2025 04:53:17 +0000
Files and hashes: 1: we5pqmqhrLoy4Wdk2oG_ekFopg0.crl (hash: 4v6VQPd0UVD1r3VhYkS3ndheGa9crUIGem99+SZ6InQ=)
2: CBB83D902F1E11F09BFFB056C4F9AE02.roa (hash: pyDccoxQQCInnCAtVt40DDMgxlsFoS9iakn/+FoSyug=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:53:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Dec 3 04:53:17 2025 GMT
Not After : Dec 10 04:53:17 2025 GMT
Subject: CN=692fc23d-6a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:80:72:60:80:a2:73:ce:89:d7:5c:90:a5:
56:b7:3a:2f:77:d4:fe:2c:8d:6d:f0:b2:64:d4:7d:
1c:34:b4:96:ff:4b:84:d6:75:95:ca:43:6d:d7:0a:
c6:e7:7b:9d:f7:27:53:61:00:71:cf:e1:31:9d:50:
d3:53:55:21:be:b6:69:c6:84:ce:99:fb:91:70:ac:
bf:9c:0d:ff:61:0f:f7:b5:7e:39:90:15:ef:70:30:
5e:6b:65:93:09:90:70:2a:e0:a8:79:63:06:fd:51:
bd:c3:93:82:3c:c3:10:e8:d7:88:5c:d3:b6:aa:10:
b0:c3:3b:d0:21:55:ae:8f:2e:ef:15:1c:16:99:09:
50:0a:f5:ce:d5:0a:d7:58:6d:52:f0:bd:65:d9:5c:
10:33:75:a9:9a:ed:66:8a:37:91:21:f4:3b:88:95:
b1:35:b6:7a:93:61:c1:d8:eb:10:cf:8a:ea:02:65:
3d:7b:83:4e:86:8a:1a:da:d0:aa:9e:09:71:3e:6c:
38:1d:44:5f:37:2d:c8:1b:a9:3c:c7:bd:dd:0f:b0:
05:98:82:4c:a4:2d:c9:62:e8:44:ea:13:f8:ca:0c:
c0:3e:e3:68:03:a1:cd:6a:0d:f2:73:ff:a8:c4:da:
ab:0d:97:e1:c7:80:fb:45:d9:52:f9:69:37:c2:7d:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:9F:E3:CD:4B:FE:08:85:12:F7:25:A3:82:F5:40:97:B7:65:31
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:0b:f4:f9:a2:37:a4:44:b2:2e:4b:16:a7:e5:9f:52:f7:de:
6c:08:d9:d9:33:0d:18:5e:4e:e1:b7:24:8e:e4:81:66:a8:da:
8c:d7:e8:7f:b6:69:ae:b4:5b:32:c0:89:98:d8:8d:b5:50:d3:
4c:7e:96:48:05:f2:13:d1:39:eb:c5:f8:b2:86:2c:e7:8c:0a:
33:c9:3c:a1:f9:ef:12:b8:bc:88:a9:93:40:7b:56:59:23:85:
c3:b3:48:70:8c:e1:a2:ed:e8:1a:91:19:60:12:7e:d8:5e:4a:
a7:34:83:e9:21:21:6a:e1:8b:a8:c1:ac:b0:e6:bd:d8:a7:dd:
61:74:19:c9:d3:47:9b:bc:10:3e:de:b6:00:5f:fd:d8:03:5d:
09:2b:0f:e6:9e:b3:5e:4e:ac:0f:b2:ec:74:a9:f3:7f:18:70:
64:de:da:9e:9f:cd:77:38:b5:5f:79:a3:f0:6d:fc:83:f9:78:
3c:d8:07:9f:3c:61:8f:15:d9:e5:7b:69:4a:9e:df:d1:08:5b:
4b:87:9f:2f:fd:cc:55:ce:ec:16:d9:b7:c8:6d:c0:f2:d4:2c:
ed:05:92:39:81:0b:a1:2c:35:4b:97:db:ac:ca:f6:7d:b8:7d:
ac:96:16:32:b1:2e:23:4a:f8:e9:c3:be:84:81:2d:17:5f:1d:
a8:e5:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:45 2025 by rpki-client