This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json)
Hash identifier: wadksMu0dHnC2Ya8iS+Rjf0K/r52nNq1XmhMnkkCux0=
Subject key identifier: EB:12:D5:EC:64:60:9B:2C:C4:78:48:74:D8:D0:52:11:29:48:D8:16
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial: 1F83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
Manifest number: 1F7E
Signing time: Mon 22 Dec 2025 15:48:22 +0000
Manifest this update: Mon 22 Dec 2025 15:48:22 +0000
Manifest next update: Mon 29 Dec 2025 15:48:22 +0000
Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: iSXYekxwOThb33WZNcI3/Chp6E4yKLlgxe6t+Ukho4M=)
2: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: ibBODN1+4t8yWfSYY+KvUP9ZEG2mJoJSb+sBmfr0WGQ=)
3: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: Q+uFycE7+V0oo3Wg+zV0C0ahPstb+VAATgmaTbfe6Ok=)
4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: BJs0/jRPcsGJBvrYHUb3ul04BseX67DNX5XwfN1Yugw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8067 (0x1f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Validity
Not Before: Dec 22 15:48:22 2025 GMT
Not After : Dec 29 15:48:22 2025 GMT
Subject: CN=69496846-c23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:6f:ec:24:92:cb:54:26:77:65:c0:8a:d2:
46:31:0a:15:d7:09:9f:05:df:7d:3e:fd:ba:62:5d:
12:7b:a6:96:a1:d5:fe:6f:41:ea:6e:0b:ef:68:92:
79:b2:aa:e9:69:11:98:4f:07:ed:90:76:ad:f0:b2:
25:98:fa:2a:9a:63:15:12:8b:5e:fe:56:71:1c:f6:
c1:a1:e2:55:9a:c4:40:58:2e:90:54:cf:4e:54:a5:
1e:b9:46:d5:d5:62:5a:9e:c0:24:9c:46:a9:1d:81:
86:17:9b:95:74:50:cc:d5:7e:86:8d:b2:7c:dd:1f:
2e:85:ad:d7:eb:40:f4:85:35:6b:d0:30:ec:02:46:
36:ab:8b:ed:af:4b:d6:98:53:9b:18:38:36:e6:7e:
0a:c1:0e:f5:d7:14:31:eb:08:2e:66:3a:81:00:d8:
85:4f:a5:c2:5a:7a:d0:f3:09:ba:00:3e:1e:49:58:
4e:32:aa:a3:4b:08:11:72:b7:c3:91:04:c5:2d:b1:
60:d1:69:4d:5f:ad:28:79:2d:52:36:85:c3:d4:c1:
3e:eb:e9:c1:0c:f3:e0:27:5e:49:8c:ab:7c:fd:71:
4d:d8:77:59:e6:c7:79:5b:c9:16:9a:72:99:2c:21:
69:56:eb:fb:d9:b2:b3:ea:43:a0:c0:ef:39:f7:f3:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:12:D5:EC:64:60:9B:2C:C4:78:48:74:D8:D0:52:11:29:48:D8:16
X509v3 Authority Key Identifier:
keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:c6:d9:16:ff:8c:39:8d:70:f0:4d:48:2e:11:45:15:75:ec:
1c:a7:b8:6a:b2:9b:22:06:e2:9f:40:10:5d:79:7b:c4:0b:50:
ac:7f:f4:00:3c:4f:de:92:82:c7:c7:96:54:b8:34:9f:b1:8b:
de:a4:51:5e:2e:1d:cf:20:c5:c8:1b:8b:2e:dd:5d:bc:8b:fa:
cf:73:34:e8:63:9b:76:c8:97:9b:48:4d:4c:d9:c1:e0:53:75:
73:64:c3:76:85:ac:d5:96:a0:c4:72:6c:cf:51:c1:06:b8:f6:
01:25:c9:d7:0f:9a:a9:29:12:42:a0:74:d3:2d:a2:a0:82:e0:
e3:eb:1a:77:77:f7:0a:95:35:3d:ae:63:89:09:68:9f:8f:24:
4c:b3:5c:dd:1c:d7:34:c8:b7:0a:48:a3:dd:76:40:17:b5:b0:
d9:24:03:28:6c:21:92:da:f3:14:c6:9c:33:bd:0f:f0:ae:ab:
cd:ac:20:49:22:57:40:de:8c:8d:06:66:2e:8b:78:fb:09:0e:
c3:9f:04:43:1e:c6:77:35:05:c3:d3:a1:ba:f6:0a:c5:9f:3c:
60:da:60:0f:b1:2b:66:c4:da:6c:ea:10:cf:a0:0a:ac:1d:1f:
14:63:9d:2b:f4:60:75:b9:d4:dc:10:8b:6c:fd:6a:32:49:9f:
ad:9a:a7:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICH4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4
RTY4Rjg5NDIwHhcNMjUxMjIyMTU0ODIyWhcNMjUxMjI5MTU0ODIyWjAYMRYwFAYD
VQQDDA02OTQ5Njg0Ni1jMjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApBlv7CSSy1Qmd2XAitJGMQoV1wmfBd99Pv26Yl0Se6aWodX+b0HqbgvvaJJ5
sqrpaRGYTwftkHat8LIlmPoqmmMVEote/lZxHPbBoeJVmsRAWC6QVM9OVKUeuUbV
1WJansAknEapHYGGF5uVdFDM1X6GjbJ83R8uha3X60D0hTVr0DDsAkY2q4vtr0vW
mFObGDg25n4KwQ711xQx6wguZjqBANiFT6XCWnrQ8wm6AD4eSVhOMqqjSwgRcrfD
kQTFLbFg0WlNX60oeS1SNoXD1ME+6+nBDPPgJ15JjKt8/XFN2HdZ5sd5W8kWmnKZ
LCFpVuv72bKz6kOgwO859/NSkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsS1exk
YJssxHhIdNjQUhEpSNgWMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz
NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk
SjY5SUNybmpicEtPYVBpVUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWxtkW/4w5jXDwTUguEUUVdewcp7hqspsiBuKfQBBdeXvEC1Csf/QA
PE/ekoLHx5ZUuDSfsYvepFFeLh3PIMXIG4su3V28i/rPczToY5t2yJebSE1M2cHg
U3VzZMN2hazVlqDEcmzPUcEGuPYBJcnXD5qpKRJCoHTTLaKgguDj6xp3d/cKlTU9
rmOJCWifjyRMs1zdHNc0yLcKSKPddkAXtbDZJAMobCGS2vMUxpwzvQ/wrqvNrCBJ
IldA3oyNBmYui3j7CQ7DnwRDHsZ3NQXD06G69grFnzxg2mAPsStmxNps6hDPoAqs
HR8UY50r9GB1udTcEIts/WoySZ+tmqcD
-----END CERTIFICATE-----
Generated at Mon Dec 22 22:19:24 2025 by rpki-client