This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
File: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft (raw, json)
Hash identifier: 6JJ9CC8tECMIzgJuHLulvXtYw2OPTifCEL1CCMf2mEw=
Subject key identifier: EF:73:5F:F1:6A:7D:60:00:F9:BF:7F:26:CA:EF:A0:B0:84:EC:81:32
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Certificate issuer: /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
Manifest number: 01D1
Signing time: Tue 23 Dec 2025 01:53:36 +0000
Manifest this update: Tue 23 Dec 2025 01:53:36 +0000
Manifest next update: Tue 30 Dec 2025 01:53:36 +0000
Files and hashes: 1: Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl (hash: PWQ4iOWwl40lgPR1h1nZBPkkf4ns3phT9H6snn7FcMc=)
2: 1D52E8E860D711EEA524AE64C4F9AE02.roa (hash: GbdpkuqmY37s9wPgW3tN3BtEev3tZBJWQSfg/vR2zzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:53:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D61DF, serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Validity
Not Before: Dec 23 01:53:36 2025 GMT
Not After : Dec 30 01:53:36 2025 GMT
Subject: CN=6949f620-27b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:1e:4a:f0:ef:94:46:92:93:6d:e6:70:1c:
a2:bb:e5:b1:69:80:f4:b3:5b:94:50:fd:de:8c:89:
e4:b3:5f:d3:58:f8:40:f4:45:a4:b7:59:2e:20:1f:
11:cc:0d:14:81:b6:c9:de:a3:22:51:c9:5a:c1:0f:
58:1c:a6:6f:b7:43:be:69:88:92:75:b4:06:fc:5e:
2a:81:91:1d:ca:d8:da:48:ff:92:05:44:b7:3a:38:
57:ac:ea:a9:4c:34:41:7d:65:e4:23:f3:a3:33:4c:
83:d6:34:f6:9c:54:f8:98:42:ba:c5:8d:a0:2f:eb:
d8:15:98:04:85:c8:12:4e:d4:1d:39:92:49:74:4f:
eb:fb:ec:fe:14:51:4f:ac:e4:24:37:06:46:d7:3e:
ca:44:21:06:5e:04:9b:6c:bb:67:48:83:ee:9b:d0:
7b:04:25:41:2d:4f:cc:48:bc:3e:54:93:69:ad:d0:
c4:e5:19:a9:c4:57:5b:c0:2e:e4:7c:23:bf:4a:34:
b3:0d:a5:7d:bc:38:6c:40:5e:5d:39:f5:e5:18:e4:
85:be:81:27:de:c0:e8:05:a7:dc:40:3d:16:00:3b:
75:d4:71:2a:d9:39:04:37:6b:9a:1b:9c:10:f7:59:
de:bf:7e:01:5e:87:fe:aa:7d:8c:e7:02:79:1b:a0:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:5F:F1:6A:7D:60:00:F9:BF:7F:26:CA:EF:A0:B0:84:EC:81:32
X509v3 Authority Key Identifier:
keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:0e:10:b1:bb:3d:9d:dd:22:d1:ed:b3:7a:1c:72:03:80:
78:1d:fc:4e:e2:33:7b:e5:4f:d5:94:f3:d7:89:61:a2:de:e4:
74:c5:e7:b9:8a:68:ae:6e:83:7d:05:ef:c3:9c:21:bd:b4:88:
2b:7b:7b:7e:61:5b:4c:96:c9:08:2c:41:be:97:6e:23:9f:48:
3a:3f:4e:e1:68:3e:6b:9e:07:9f:b9:a2:91:4d:57:85:cf:0d:
bc:d9:b0:80:ab:48:7f:7e:b4:32:44:f4:0d:08:27:ad:03:30:
f6:af:ab:63:77:da:cb:3c:a2:59:02:e0:d7:fb:43:59:d9:2a:
f9:81:b7:c1:a2:4d:fa:09:b7:54:64:c0:df:a8:dc:99:5d:e8:
86:20:70:46:59:f5:97:a9:dc:a9:bd:47:ed:4f:df:f0:06:67:
78:93:8b:34:e9:0a:6c:8e:df:44:40:df:a7:1e:d8:4a:20:a9:
e1:2c:04:66:13:6f:bd:2a:9d:45:56:e7:d4:4e:ed:0b:94:17:
8e:74:78:0e:ad:25:2b:86:1f:36:05:39:04:99:10:f7:9e:57:
be:3e:58:8f:9c:2a:98:54:9a:12:97:9a:37:38:64:19:a1:e7:
fa:6a:28:d6:f1:87:3a:ba:1b:3e:6a:12:25:8c:c0:f3:61:99:
df:e4:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:58 2025 by rpki-client