This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
File: 7drOQHH9qFhc8SNEuCUSze8H860.mft (raw, json)
Hash identifier: c3cY7KJfTYJeC1miWGnMrY5BI+6Z6waT/KDdQtH3UmU=
Subject key identifier: B6:47:95:A2:3C:7A:69:34:C4:5E:E6:D8:91:F5:02:4C:83:0B:1F:AC
Authority key identifier: ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
Certificate issuer: /CN=A91D9335/serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Certificate serial: 34EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
Manifest number: 34EC
Signing time: Mon 22 Dec 2025 14:33:46 +0000
Manifest this update: Mon 22 Dec 2025 14:33:45 +0000
Manifest next update: Mon 29 Dec 2025 14:33:45 +0000
Files and hashes: 1: 7drOQHH9qFhc8SNEuCUSze8H860.crl (hash: N7OCXXXqWV9vhmxwtOj8iQ80k1JXJs3YCVxXCcRtAE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13548 (0x34ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9335, serialNumber=EDDACE4071FDA8585CF12344B82512CDEF07F3AD
Validity
Not Before: Dec 22 14:33:45 2025 GMT
Not After : Dec 29 14:33:45 2025 GMT
Subject: CN=694956ca-dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:88:f6:1a:48:69:e1:da:f5:02:00:17:fd:
9a:5e:46:72:f8:40:86:7c:02:de:5d:d9:58:db:89:
d1:ec:41:8b:05:05:93:2f:2a:d4:85:0f:00:2d:cb:
62:db:f9:46:5c:7b:5a:d3:40:9f:0b:18:0a:83:ce:
36:03:74:9d:ed:c1:39:42:16:20:3d:90:13:43:2b:
99:19:e1:87:48:ce:06:73:42:02:d0:99:56:b3:87:
a1:cf:aa:34:86:ba:94:06:4c:5a:fc:45:56:1c:1b:
be:9b:34:55:0f:8e:85:c5:b4:ea:8d:a7:a8:6b:29:
17:78:2c:55:ba:a0:4f:64:7c:ef:d2:1b:11:e3:4b:
e6:1b:4d:bf:75:79:67:de:3d:b9:f2:45:4a:8d:5d:
05:49:5f:6d:57:6e:39:ec:fe:cc:d1:cf:8e:16:e3:
cf:56:12:9b:52:ae:84:aa:bf:86:bf:39:d6:a8:62:
d8:02:86:1b:43:9a:47:25:7d:e3:d5:0c:c3:b7:dd:
5b:84:9d:7c:ca:de:ca:86:1b:89:73:63:29:c6:11:
89:23:7e:e5:e0:97:e4:01:b3:ca:5d:34:65:c1:36:
60:a7:25:6c:21:40:2b:71:19:12:a3:81:f3:6b:ba:
34:ee:95:43:2d:dd:44:06:f9:b5:01:3e:7d:e4:cb:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:47:95:A2:3C:7A:69:34:C4:5E:E6:D8:91:F5:02:4C:83:0B:1F:AC
X509v3 Authority Key Identifier:
keyid:ED:DA:CE:40:71:FD:A8:58:5C:F1:23:44:B8:25:12:CD:EF:07:F3:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7drOQHH9qFhc8SNEuCUSze8H860.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9335/E626E5D01D8B11E2AEFDDAE608B02CD2/7drOQHH9qFhc8SNEuCUSze8H860.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:65:7a:8f:81:c2:43:85:cc:85:94:cf:d2:e7:2f:06:56:d3:
32:e7:1c:c3:53:57:a5:bb:93:62:ea:eb:f1:17:70:84:2a:da:
8c:55:f0:c6:b8:3f:fb:4c:8e:9e:b6:21:62:20:1d:be:fe:9d:
0a:36:af:3d:c3:02:a7:0d:c7:35:fd:08:e3:ec:7f:77:e9:e3:
6b:87:c6:f9:51:da:a8:b8:82:7c:b2:93:d4:fb:c6:77:99:84:
b1:6f:f3:45:42:60:40:94:dd:9d:01:96:de:e5:01:50:c3:a4:
b6:55:a5:07:12:57:05:ea:3d:a5:92:59:61:cb:b1:18:8e:fd:
4a:9b:c3:4c:4c:1b:43:59:32:ce:94:f1:51:43:eb:62:ed:e8:
00:82:be:17:d8:5c:b3:af:f7:0b:6c:cd:d2:ef:8e:2c:64:89:
70:48:9d:94:05:fa:0d:43:63:d1:a1:93:e2:30:c9:9e:ce:ee:
eb:06:43:de:c5:1d:69:53:cd:a3:34:32:c8:26:f5:7d:95:8c:
87:b2:40:4a:d5:5d:eb:7a:4a:4b:a2:04:c8:bb:e2:de:8b:98:
8c:c7:56:5a:38:15:fc:7c:fc:90:4d:97:96:91:b6:b0:f7:b3:
7f:28:24:93:b5:a7:e4:2f:00:49:da:1b:0e:e0:52:6b:dc:61:
09:32:9f:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkzMzUxMTAvBgNVBAUTKEVEREFDRTQwNzFGREE4NTg1Q0YxMjM0NEI4MjUxMkNE
RUYwN0YzQUQwHhcNMjUxMjIyMTQzMzQ1WhcNMjUxMjI5MTQzMzQ1WjAYMRYwFAYD
VQQDDA02OTQ5NTZjYS1kZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzaI9hpIaeHa9QIAF/2aXkZy+ECGfALeXdlY24nR7EGLBQWTLyrUhQ8ALcti
2/lGXHta00CfCxgKg842A3Sd7cE5QhYgPZATQyuZGeGHSM4Gc0IC0JlWs4ehz6o0
hrqUBkxa/EVWHBu+mzRVD46FxbTqjaeoaykXeCxVuqBPZHzv0hsR40vmG02/dXln
3j258kVKjV0FSV9tV2457P7M0c+OFuPPVhKbUq6Eqr+GvznWqGLYAoYbQ5pHJX3j
1QzDt91bhJ18yt7KhhuJc2MpxhGJI37l4JfkAbPKXTRlwTZgpyVsIUArcRkSo4Hz
a7o07pVDLd1EBvm1AT595Mvj7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZHlaI8
emk0xF7m2JH1AkyDCx+sMB8GA1UdIwQYMBaAFO3azkBx/ahYXPEjRLglEs3vB/Ot
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTMzNS9FNjI2RTVEMDFE
OEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFGaGM4U05FdUNVU3plOEg4
NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdkck9RSEg5cUZoYzhTTkV1Q1VTemU4SDg2MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OTMzNS9FNjI2RTVEMDFEOEIxMUUyQUVGRERBRTYwOEIwMkNEMi83ZHJPUUhIOXFG
aGM4U05FdUNVU3plOEg4NjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCuZXqPgcJDhcyFlM/S5y8GVtMy5xzDU1elu5Ni6uvxF3CEKtqMVfDG
uD/7TI6etiFiIB2+/p0KNq89wwKnDcc1/Qjj7H936eNrh8b5UdqouIJ8spPU+8Z3
mYSxb/NFQmBAlN2dAZbe5QFQw6S2VaUHElcF6j2lkllhy7EYjv1Km8NMTBtDWTLO
lPFRQ+ti7egAgr4X2Fyzr/cLbM3S744sZIlwSJ2UBfoNQ2PRoZPiMMmezu7rBkPe
xR1pU82jNDLIJvV9lYyHskBK1V3rekpLogTIu+Lei5iMx1ZaOBX8fPyQTZeWkbaw
97N/KCSTtafkLwBJ2hsO4FJr3GEJMp8/
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:49 2025 by rpki-client