This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
File: xhVwDXyIi-a6dQrezZTYhkaC42E.mft (raw, json)
Hash identifier: AsmPNtMJqES+VKoUexX122PE0gJKTfM++fnGdSlw8SQ=
Subject key identifier: 34:7B:65:C2:4A:7D:F0:8E:8D:1B:07:EB:F7:C9:4E:B9:A3:4C:8E:C5
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Certificate issuer: /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
Manifest number: ED
Signing time: Wed 03 Dec 2025 00:23:55 +0000
Manifest this update: Wed 03 Dec 2025 00:23:55 +0000
Manifest next update: Wed 10 Dec 2025 00:23:55 +0000
Files and hashes: 1: xhVwDXyIi-a6dQrezZTYhkaC42E.crl (hash: D7af4YmkbjSJWBIJTWnDOvlF60sKe5m3w7f4KotG1+k=)
2: 6C3911AC316A11F090B23283C4F9AE02.roa (hash: DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 00:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Validity
Not Before: Dec 3 00:23:55 2025 GMT
Not After : Dec 10 00:23:55 2025 GMT
Subject: CN=692f831b-f695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1a:14:ee:a8:84:30:a4:f3:ae:70:c2:2d:18:
ea:12:27:1e:08:38:47:60:f2:c3:23:42:1b:20:88:
ec:32:b5:b6:49:b8:34:95:07:f8:31:6e:4b:5b:ed:
14:09:1b:f2:4a:28:5d:a0:d8:cb:db:f3:8e:be:ce:
df:c1:59:d8:28:21:a5:4d:cf:9f:cf:4b:53:ae:38:
db:81:eb:b4:e8:d4:0e:59:a0:ea:38:49:ca:c7:72:
12:7d:ed:3c:fb:76:d0:b6:28:60:1b:41:dd:2e:f4:
c6:ea:76:7d:c0:1e:67:04:87:b0:e2:70:15:d5:a8:
1e:6f:cf:ac:ce:b8:42:e0:09:c9:a4:86:76:0f:f3:
0e:34:06:42:67:17:72:b1:0c:f8:ce:05:34:75:80:
c6:cc:3e:d2:11:6d:8f:34:bc:14:5e:da:13:1b:8c:
c2:c8:59:b2:e3:0b:0f:9a:28:8c:09:f8:c2:2e:f8:
c0:66:24:d4:2d:f1:21:5b:43:48:02:d6:dd:8f:f1:
d1:f5:da:45:81:4d:a3:e5:75:b4:bc:75:d2:4b:b0:
50:91:22:77:2f:89:46:fd:17:d9:08:81:7c:bd:59:
22:8f:6a:94:cf:2c:db:3b:6f:15:12:11:e0:0f:28:
33:d9:0d:64:d6:d9:97:d6:cc:ef:d1:27:f5:e0:34:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7B:65:C2:4A:7D:F0:8E:8D:1B:07:EB:F7:C9:4E:B9:A3:4C:8E:C5
X509v3 Authority Key Identifier:
keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:20:27:6d:39:2f:8b:40:21:d5:6e:69:73:20:cd:2c:ab:55:
05:ab:ba:78:94:a5:06:c5:dc:d6:53:d5:a8:9b:6a:a2:fc:6d:
f6:74:5f:06:ff:20:ad:23:a3:e5:c1:3c:1f:64:0d:83:bc:c5:
18:35:5a:61:83:ac:9d:1a:44:a1:32:d6:88:a8:46:7a:d0:d3:
08:02:ea:93:ae:2b:e5:af:c4:97:e2:f4:32:0c:e1:f7:db:66:
e4:2b:c3:4f:bd:a1:54:e4:90:12:31:cc:4a:1e:44:33:0e:d7:
66:f2:13:05:03:4b:94:79:43:0b:1c:ba:a5:03:91:b8:45:6a:
45:3f:10:c6:a6:6c:d0:3c:69:06:6c:b9:8a:50:ed:e9:53:a8:
12:11:fc:9b:4a:0d:70:de:9c:a5:f8:39:16:f1:70:fd:dd:d2:
17:c5:51:89:ae:85:75:96:45:b2:f2:dd:9e:cc:7c:b1:db:66:
8f:f4:f3:0e:88:5d:d7:d9:7c:af:39:3c:dc:cd:97:59:2a:8d:
0e:06:45:41:55:82:e4:bb:3e:3f:a5:70:7c:95:3b:d5:6f:0c:
71:45:87:6b:f3:2a:64:99:06:1a:32:e1:29:e9:80:73:74:b6:
2f:7a:02:67:ca:3d:00:b0:29:b2:15:58:e5:37:f3:c7:3f:75:
0a:94:30:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:19 2025 by rpki-client