This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
File: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft (raw, json)
Hash identifier: bkSdpI/ar6Qfx+dOwZl7QrT8WoQu7MbEnIbSrvDadGs=
Subject key identifier: C2:BD:57:02:59:12:0C:FE:40:C8:57:2C:E7:9A:67:76:92:4C:FF:84
Authority key identifier: D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
Certificate issuer: /CN=A91D26C6/serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Certificate serial: 0721
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
Manifest number: 0704
Signing time: Tue 16 Dec 2025 21:25:46 +0000
Manifest this update: Tue 16 Dec 2025 21:25:45 +0000
Manifest next update: Tue 23 Dec 2025 21:25:45 +0000
Files and hashes: 1: 0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl (hash: CoQ5BeAAxv0NIrQoGPxjIfPdnq3Dm3d4+C6y2Zq/sF4=)
2: 178E201EA51911EDB711B90AC4F9AE02.roa (hash: Fk3FD4AcHMukexgYcFy6H4xmHyHDGU1VOrgDQ2JaHQ0=)
3: DD3C61621DCD11EF88E9EE3DC4F9AE02.roa (hash: qv769QTOuxRY2vZMEitP1PhQNGQQJL1+VWV0CsKcicw=)
4: 6A8A22841DCE11EF85CAC83EC4F9AE02.roa (hash: BifS2RiKJAeyaao2xahiTEJyhWsX4uSdQw3ik4lZCoM=)
5: 3B03239684CE11EF9D90A966C4F9AE02.roa (hash: 0+CvQqBA1GWK9uAje6YI9ltQjscAcIJ8/LtX4JAvJgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 21:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1825 (0x721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D26C6, serialNumber=D29B64E634465AB4132054BB7E83C9D5F18349F7
Validity
Not Before: Dec 16 21:25:45 2025 GMT
Not After : Dec 23 21:25:45 2025 GMT
Subject: CN=6941ce59-6f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fc:99:88:a1:fa:df:41:33:77:17:6e:81:72:
a2:08:d6:d6:5c:fa:89:98:85:52:34:09:b2:a2:a3:
8b:0c:59:04:bf:0c:ab:c1:4a:35:d7:18:8e:92:c8:
d0:46:a4:8c:5a:ee:6b:35:bd:ed:1d:0b:5e:01:8d:
93:9c:8c:81:40:18:e9:8e:4e:50:5f:30:1e:b0:79:
98:93:5b:91:28:80:4b:3c:58:d1:a8:78:96:7b:eb:
a7:dd:c4:eb:5e:7a:2a:ea:7a:6e:ba:85:c3:67:20:
e9:7f:44:f7:71:76:e7:4d:2c:35:d3:97:22:16:03:
96:99:42:06:3e:dd:b6:be:d1:ab:21:6d:62:20:02:
c4:90:74:f1:38:64:35:8e:22:bc:9b:60:a2:03:61:
c8:2b:12:77:4f:70:29:a6:f5:0a:bf:47:e3:f2:ec:
53:b1:65:6b:88:51:50:6b:73:4d:c1:56:7d:d7:c6:
34:74:c7:2b:70:dc:84:5b:1b:f0:2f:44:f3:f6:0b:
ba:37:5e:99:6d:e0:d9:3e:1a:fc:e5:aa:dc:64:20:
6d:7a:70:b5:41:aa:f0:01:36:00:28:e2:9b:c6:ca:
d6:06:7c:ce:56:6b:b6:3c:36:ca:33:82:eb:f3:d0:
13:c9:d5:8b:79:14:30:93:5c:9b:32:8b:2a:4c:dd:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BD:57:02:59:12:0C:FE:40:C8:57:2C:E7:9A:67:76:92:4C:FF:84
X509v3 Authority Key Identifier:
keyid:D2:9B:64:E6:34:46:5A:B4:13:20:54:BB:7E:83:C9:D5:F1:83:49:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ptk5jRGWrQTIFS7foPJ1fGDSfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D26C6/58E99E946F7911EBA4D22287C4F9AE02/0ptk5jRGWrQTIFS7foPJ1fGDSfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f6:1d:21:5d:c9:74:e6:57:5a:b7:d5:e6:ed:82:16:03:5c:
35:1b:ae:f9:73:df:1e:83:23:1a:75:d4:14:0b:d9:79:ba:b1:
45:c5:80:1a:84:05:f0:20:ad:ac:1c:ab:e0:0d:96:6e:dc:2c:
51:5a:b6:97:52:23:e2:0e:cf:b0:b5:15:34:29:6d:92:c8:e1:
06:da:9b:14:32:75:6c:49:b3:4d:97:44:0d:4a:43:7a:ab:09:
28:ab:7f:98:bc:c5:cf:ec:d4:fa:53:4c:74:cb:51:7b:15:50:
ce:eb:23:93:e1:ed:b6:86:94:bd:9e:95:96:19:95:89:71:64:
65:65:7a:46:aa:c6:aa:07:88:23:58:50:bb:f7:74:b3:d0:2f:
91:14:a8:40:aa:ab:58:6a:53:16:4e:17:8b:50:84:ed:11:52:
24:dd:92:b5:05:ed:2d:9d:e5:f4:5f:a8:ff:b4:b8:bf:5b:a2:
da:d8:d7:ce:01:8d:18:1f:16:1b:1b:82:15:ef:3b:c1:31:6e:
18:1e:e1:d1:1a:b9:9f:9e:40:36:e9:69:8d:20:ea:4c:81:a2:
47:2b:0e:e7:c1:a0:7f:9f:fd:b8:30:12:ef:51:f0:73:f0:33:
74:bf:0a:d8:6d:76:1a:40:4e:b0:48:e8:ae:1f:2e:94:84:a7:
a1:19:ea:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:53:47 2025 by rpki-client