This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json)
Hash identifier: bq9s81BPqjLqzpkouoZH2fF8dhOz6TAyQSF8T2xpWew=
Subject key identifier: 0D:C1:31:3D:EB:C8:85:C7:EC:63:7F:53:5D:68:6E:F5:E5:E2:37:AC
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial: 1F82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
Manifest number: 1F7D
Signing time: Sat 20 Dec 2025 15:49:46 +0000
Manifest this update: Sat 20 Dec 2025 15:49:46 +0000
Manifest next update: Sat 27 Dec 2025 15:49:46 +0000
Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: 9usYq75p5vtrrA8WWbXHG+vvzv+PH3qrqLiFZhhFCM0=)
2: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: Q+uFycE7+V0oo3Wg+zV0C0ahPstb+VAATgmaTbfe6Ok=)
3: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: BJs0/jRPcsGJBvrYHUb3ul04BseX67DNX5XwfN1Yugw=)
4: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: ibBODN1+4t8yWfSYY+KvUP9ZEG2mJoJSb+sBmfr0WGQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 15:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8066 (0x1f82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Validity
Not Before: Dec 20 15:49:46 2025 GMT
Not After : Dec 27 15:49:46 2025 GMT
Subject: CN=6946c59a-f854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:48:b5:d5:36:c4:13:f8:b7:3f:8c:3a:72:
b3:3e:38:36:2c:68:6a:1c:bf:30:0a:c9:2b:e1:15:
7d:8d:c8:0a:51:c1:79:0d:29:36:11:35:c7:04:ed:
46:f6:b5:9f:69:66:8a:4a:03:07:e7:8e:d8:09:2c:
d8:0a:37:d7:6c:0d:b8:37:be:57:30:ab:dc:d2:93:
19:d7:23:c8:3b:38:57:27:65:59:28:e4:e1:ec:1d:
6d:b9:4c:38:69:ed:09:a8:bc:fc:c1:b2:94:51:47:
4a:1b:5e:69:32:43:ea:84:67:de:14:1a:9b:0d:28:
69:53:df:a4:32:88:27:be:ab:45:5a:82:0a:98:1d:
a4:85:ed:f9:a9:4a:3f:85:6c:4a:18:83:7e:77:e7:
e5:35:53:64:3c:21:5e:3a:1a:3a:55:1d:50:d6:6e:
03:71:00:b4:16:5f:6b:d0:c3:e2:be:f1:62:33:c3:
03:0f:0c:79:37:c0:fc:cc:b7:e1:99:2b:6c:6b:4d:
62:7a:6a:5e:5c:29:aa:59:07:e4:13:8f:dd:71:eb:
5b:2b:93:a1:c7:8f:36:e9:14:44:b5:76:79:24:bc:
69:3f:9c:d2:20:4e:bb:13:70:c0:cd:51:bc:0a:24:
5e:f3:8b:a1:e1:57:7b:1b:61:71:79:35:18:72:82:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C1:31:3D:EB:C8:85:C7:EC:63:7F:53:5D:68:6E:F5:E5:E2:37:AC
X509v3 Authority Key Identifier:
keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9d:a4:94:2c:13:d6:79:ce:7c:92:11:59:29:17:e2:40:a1:
78:70:a5:d4:8a:4d:a6:1e:32:f0:00:71:38:9b:37:0c:84:27:
1f:80:a6:79:2d:33:94:7b:00:94:05:5f:00:58:2e:0e:aa:e1:
1c:8f:d2:6b:8f:59:e5:1e:99:8a:e5:74:fe:6a:2e:f3:27:32:
3f:7b:2f:27:f6:cd:12:44:7f:65:78:9e:f4:4f:77:38:b8:c4:
d0:4f:fa:a2:7b:ef:61:5f:c3:05:ac:85:ac:87:95:9f:bc:7a:
3a:da:6d:f4:7b:fc:5f:50:fa:01:18:53:d3:3a:ec:a5:eb:bb:
77:f1:2b:6b:c8:a3:58:91:27:cf:b0:83:69:c9:00:4d:54:98:
8e:f7:c3:16:0d:2f:98:a9:bb:a1:ca:77:2c:e1:19:f1:d7:37:
fc:9a:5a:c0:96:4c:82:fc:da:d8:82:cb:27:58:92:25:bc:85:
45:7d:aa:46:31:8e:1d:60:a4:ad:1c:f2:41:0a:8e:99:52:5d:
69:ac:ee:e9:94:17:41:b3:9b:19:2b:7b:fd:77:62:fd:f5:06:
9b:83:4b:07:5c:4b:a0:93:c4:6c:13:1a:83:f8:b4:0d:b4:77:
12:93:9c:cb:45:8f:de:b4:0c:65:d1:b2:bd:c1:79:08:67:ec:
77:33:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:02:34 2025 by rpki-client