This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json)
Hash identifier: mUcGILMHN4VuE9TwmTo8jg2yfMZFmxEvwEKWE/QuGWk=
Subject key identifier: 06:D4:E9:AD:CA:BA:40:1D:12:C2:47:2D:F2:E1:12:BE:3D:0A:C2:A4
Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Certificate serial: 1C78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
Manifest number: 1C58
Signing time: Sat 20 Dec 2025 16:01:49 +0000
Manifest this update: Sat 20 Dec 2025 16:01:48 +0000
Manifest next update: Sat 27 Dec 2025 16:01:48 +0000
Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: L4omm3ScIkiuV9Ttf3bCpDYQMgJ2p/QeBG9s/BbP1oc=)
2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: o6WkVnegao9eXl1ICqje7+2NH5TzcF/tZEw0eYLoPdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7288 (0x1c78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45
Validity
Not Before: Dec 20 16:01:48 2025 GMT
Not After : Dec 27 16:01:48 2025 GMT
Subject: CN=6946c86d-68f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:de:91:3a:cb:d1:3f:6f:da:91:8e:1b:b6:4b:
4c:16:17:45:14:6b:5b:4d:f7:70:46:48:56:29:e7:
95:d8:32:79:ea:9b:72:de:88:f8:13:76:d9:f8:a1:
6e:5e:d6:fa:c0:f7:c5:d8:73:b2:6b:15:5e:01:3b:
d1:6b:5c:94:6e:d6:41:2c:9f:e1:7f:a7:cb:30:d2:
81:0f:b3:f8:70:f3:4a:91:ef:61:7e:0e:ac:b5:e6:
59:ac:fc:55:ec:b8:55:70:67:f9:1d:46:37:60:5c:
7b:4d:52:fd:3c:16:c1:d2:63:4a:49:bb:d2:7e:58:
d7:08:31:31:c2:f4:28:e7:74:a9:4a:42:6e:a6:e1:
d4:6c:65:d0:59:a4:e9:24:8b:1d:5d:40:61:56:ad:
6e:7d:b2:dc:c2:62:2f:df:30:9c:f9:fd:a2:dd:7c:
fa:1f:7d:0c:73:86:03:86:04:ff:5e:7f:c1:d9:21:
2f:ff:83:34:2a:dd:14:7f:67:aa:ab:67:04:7d:d3:
b9:a0:44:8f:31:4a:67:92:ce:55:0f:ca:5c:6b:f1:
56:01:52:8a:ad:65:70:ee:52:14:e7:5f:83:c1:38:
0e:58:f6:4a:04:44:27:b0:39:2b:a2:12:4e:5a:f9:
e6:b8:5d:67:0a:d3:30:b9:ab:27:e7:3e:f3:9b:60:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:E9:AD:CA:BA:40:1D:12:C2:47:2D:F2:E1:12:BE:3D:0A:C2:A4
X509v3 Authority Key Identifier:
keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:e0:7a:9f:35:62:9d:73:05:d0:d1:c4:36:5b:62:5f:ec:
2c:ae:a1:72:28:0d:dc:6e:7a:1f:85:74:06:f6:db:a9:07:3f:
92:e1:0e:ae:b3:e6:2f:3a:79:e7:23:d7:31:50:50:02:b9:54:
2f:4f:07:f8:4b:fe:49:7e:ca:87:e3:e8:ee:ec:93:c7:aa:d9:
33:2f:1b:02:2a:36:f2:eb:66:df:bf:be:0b:97:66:84:3a:fc:
4b:ae:dc:8d:86:70:af:c2:3d:0f:2a:40:03:ff:dd:e0:e1:2e:
46:a0:8c:61:5e:50:69:a1:04:9f:3a:38:12:bc:a8:ce:90:ab:
83:59:cd:8c:1c:10:83:9e:4d:07:91:22:13:3e:a1:78:39:1e:
12:af:b4:12:ae:7b:18:d7:b4:be:ba:10:c0:ab:0c:6d:1a:2b:
f3:14:7a:25:2c:45:98:46:c1:56:85:83:ec:f1:b5:35:3b:09:
a4:51:16:85:46:f7:ed:c4:eb:03:fa:1c:4e:3e:f9:cd:0d:06:
09:a8:93:81:d8:69:20:2f:24:14:68:ed:97:a5:d1:76:00:cd:
90:b3:9a:c8:ed:28:57:e3:ae:03:88:b5:fe:14:1f:d6:a9:53:
a8:3a:d4:b2:97:26:0f:b8:77:e0:f0:99:0b:6c:aa:da:3e:c7:
16:77:4e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:37:49 2025 by rpki-client