This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
File: Abso_b4VWoZixe5oDP3wyY1OvR0.mft (raw, json)
Hash identifier: zqJHJKwyQKfW5u+ug3+Djbzs2Gmm29lR4dwvepw6yLo=
Subject key identifier: 60:7A:33:1C:D6:AA:AC:2D:F3:4A:9F:3A:B2:26:F5:FA:F1:13:8C:DA
Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
Manifest number: 010B
Signing time: Tue 23 Dec 2025 03:58:12 +0000
Manifest this update: Tue 23 Dec 2025 03:58:11 +0000
Manifest next update: Tue 30 Dec 2025 03:58:11 +0000
Files and hashes: 1: Abso_b4VWoZixe5oDP3wyY1OvR0.crl (hash: xGDiCUP69YvM+zOkD6gq0Qp5/BVGmLTi6cp1R5OiHW0=)
2: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (hash: EGPY/0B+FhNPcxx4yI5SHvTWW9NTcAbNHzvZ84arIm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D
Validity
Not Before: Dec 23 03:58:11 2025 GMT
Not After : Dec 30 03:58:11 2025 GMT
Subject: CN=694a1354-52de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:e8:85:05:60:9e:28:49:c0:ae:ba:1e:be:
ee:fa:dc:4a:e6:69:7c:a0:73:f7:48:c7:4d:49:a3:
b4:6e:d6:33:8f:4b:2c:8b:10:fb:b0:f2:d1:c7:ba:
74:e9:0b:75:cf:77:b5:5b:35:df:02:a8:ef:75:45:
dc:7c:4e:26:69:76:cc:b6:98:89:f6:76:38:08:b1:
fe:06:7c:18:b6:f7:0e:0a:d7:b1:00:5b:7d:ce:91:
5a:51:fa:a0:ed:cd:54:78:0d:fa:4b:c6:8d:61:cc:
7a:7d:0e:35:38:59:86:00:ac:20:10:95:a7:3f:81:
4c:31:a2:d5:82:58:d0:4c:93:0a:f7:da:50:e1:30:
8e:df:bd:7b:76:27:71:1a:08:af:96:69:25:b6:5a:
84:a5:17:38:3b:6e:93:d4:63:b2:3a:17:6c:28:98:
59:6e:5f:af:ab:40:6b:60:7f:f5:68:cd:83:99:e6:
95:ad:f5:09:dc:e0:aa:c8:2c:b5:50:78:6a:35:10:
0f:89:61:9b:81:76:bc:06:23:51:f0:68:7b:5d:e3:
0b:7d:c8:73:dd:97:8c:f5:cc:67:4a:b3:7d:0a:36:
96:b3:b8:d0:47:bb:55:65:1a:e9:a9:fe:a7:96:35:
c0:74:07:88:41:ca:0a:b4:a0:bc:9a:3f:66:a6:3e:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:33:1C:D6:AA:AC:2D:F3:4A:9F:3A:B2:26:F5:FA:F1:13:8C:DA
X509v3 Authority Key Identifier:
keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:4e:36:cd:cf:e7:41:c0:4b:1b:ca:2b:a4:ff:55:cf:18:f4:
f7:3a:8a:ba:71:f5:c0:6f:08:cf:40:e3:89:b3:fc:43:5b:3d:
59:3a:29:1e:2b:63:4e:96:3e:ae:32:d5:67:f4:f0:19:68:97:
be:43:36:d1:f2:0b:ac:59:02:3c:bc:75:81:ba:e8:9c:2a:b9:
dd:00:b2:5e:6e:25:8b:c7:38:cf:00:e4:29:c8:83:59:46:72:
68:56:75:cd:1f:89:7e:8d:5c:24:e5:3d:f6:b1:0c:6f:8a:63:
b2:f3:d9:18:2f:7f:d3:86:ce:80:e5:72:79:f7:56:74:90:5f:
7c:36:a2:99:e7:da:43:a8:bf:8b:3c:a6:0a:18:50:84:43:61:
cf:dd:0d:2c:e6:86:4e:4a:01:d4:c9:bc:84:8d:27:39:2a:42:
8f:49:58:2e:e3:98:0c:b2:43:21:aa:39:f2:67:00:cd:da:5a:
c2:f6:98:52:7e:61:2f:ac:39:10:49:04:b3:fd:f6:63:d8:93:
17:7a:39:d8:e9:7c:16:92:02:1e:3e:fc:09:e0:1c:b0:c9:ee:
49:1f:2e:07:3e:8a:4b:86:80:01:4d:0f:d6:23:3b:8a:2d:35:
16:f3:f0:1f:7e:e5:89:ab:6f:b7:be:6f:af:db:f4:19:fb:ef:
0e:ef:4b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 07:07:41 2025 by rpki-client