This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
File: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json)
Hash identifier: vp8c1m2Y1/+mQWxTQn8r7hg+Ey5ngwzwy4Ei1ebH91c=
Subject key identifier: 3C:D2:11:B9:C1:17:87:69:B8:AE:AE:02:BF:10:65:CB:03:4B:71:D9
Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
Certificate issuer: /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Certificate serial: 022E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
Manifest number: 022A
Signing time: Tue 23 Dec 2025 01:04:53 +0000
Manifest this update: Tue 23 Dec 2025 01:04:52 +0000
Manifest next update: Tue 30 Dec 2025 01:04:52 +0000
Files and hashes: 1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: sGnSYy1n6v6iGtcXZImCn12zdBrkvhzeaWa2Lqfn9A8=)
2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: ysct5SJFLL7r4JAj2CVHZLqepb6TuRQ99etQZMCmjWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD468, serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687
Validity
Not Before: Dec 23 01:04:52 2025 GMT
Not After : Dec 30 01:04:52 2025 GMT
Subject: CN=6949eab4-ab8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:48:45:6b:56:63:71:87:17:02:00:20:7c:
6b:73:2b:98:6d:92:f3:c2:d4:7e:14:56:f4:28:b5:
41:1c:e9:e4:dd:2d:95:c6:50:82:33:1d:79:1c:90:
88:a4:e5:97:f7:e2:8a:22:f5:38:0b:16:b0:b2:1c:
a3:f2:a3:67:9b:94:6f:34:49:b9:87:f2:34:f6:72:
ec:ef:44:81:08:a5:75:9c:ca:15:6a:ec:7f:84:bd:
ea:e9:28:a1:d1:59:7e:bc:bd:94:59:5b:e2:21:2f:
2e:6e:67:02:5a:70:fe:75:1e:b0:f7:9a:3c:41:de:
36:94:63:5f:19:5d:bf:d2:55:93:d8:56:29:49:5e:
0a:bf:c4:3c:a7:28:7a:9d:4f:37:6b:41:3b:75:8a:
6b:29:f5:36:04:20:d3:8b:fc:a9:0a:43:e6:53:1e:
ba:50:ec:3e:e3:c1:49:18:b7:f1:b7:55:e5:10:02:
ce:bf:6c:e8:74:bb:06:a9:8c:cc:44:b4:cd:27:d4:
6d:a9:f9:ec:83:b3:24:ea:3a:89:42:f6:f1:e1:63:
8d:6a:ca:e3:54:d1:30:a5:45:4c:44:cb:7f:94:83:
aa:96:33:ff:3d:e5:2b:84:9e:fc:e6:68:70:9f:d7:
24:77:bd:32:cb:41:cc:62:c2:eb:ac:59:5a:57:6f:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D2:11:B9:C1:17:87:69:B8:AE:AE:02:BF:10:65:CB:03:4B:71:D9
X509v3 Authority Key Identifier:
keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8b:17:3a:b2:96:af:54:1b:be:54:27:ef:15:6d:ca:be:26:
b3:24:87:f7:ae:06:97:21:03:90:e7:9d:be:a8:5c:1b:f0:03:
bc:2f:41:32:a8:47:22:31:e2:f8:bb:97:9f:49:2a:8b:0a:4e:
05:3a:66:b4:c3:49:5d:f2:08:49:df:fa:1d:8f:91:fe:e8:65:
66:0e:e4:28:f7:e2:02:54:b9:38:32:18:57:35:59:89:4f:8d:
da:35:a0:13:ae:64:73:5a:9f:27:54:bc:df:7d:42:39:30:18:
b3:1c:40:07:e7:7c:3c:03:3d:00:5e:a0:58:73:56:c8:62:02:
99:7d:c5:08:17:8e:f6:29:67:60:2e:53:5d:1d:6c:55:73:60:
1c:b1:11:8c:a9:81:4b:9a:c7:1a:37:91:69:ef:9b:5e:5e:3a:
03:73:d0:e0:95:8d:7b:51:7c:ec:ec:41:34:c0:81:f7:3e:88:
24:4b:a9:45:78:b6:27:7f:0e:6a:83:68:68:56:1e:26:d1:c5:
4c:3c:47:de:65:89:3c:e3:2f:86:5e:95:a7:83:e2:f4:88:30:
fd:b8:31:a9:8b:a2:96:08:cc:8f:93:20:24:b5:ac:bf:a4:ad:
bf:d4:de:db:59:9e:3a:7b:e5:fe:84:b4:50:31:8a:a9:31:7d:
b6:23:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:46 2025 by rpki-client