This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
File: fiRDENekVusSe5JsQvJteems24g.mft (raw, json)
Hash identifier: nNrdMyos/v4MsKxHcLrWPVWJITz9gPLh7v1V4Gr3dNA=
Subject key identifier: C4:6E:10:B9:0B:FC:8A:55:8D:11:D7:A6:60:AE:A4:EE:95:CD:E2:6F
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Certificate issuer: /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial: 0923
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
Manifest number: 08BE
Signing time: Sun 14 Dec 2025 20:06:58 +0000
Manifest this update: Sun 14 Dec 2025 20:06:58 +0000
Manifest next update: Sun 21 Dec 2025 20:06:58 +0000
Files and hashes: 1: fiRDENekVusSe5JsQvJteems24g.crl (hash: mdg+eUq90/OVb2TOd68xZqDZgGUH3CDKOUSDnzKsPCc=)
2: BE33817A69AE11EEBBC89D75C4F9AE02.roa (hash: ygq1dkv+uF4QDS+bggz98LoWciehSBzYRj/fw8Od03I=)
3: A64C29AA3D9811EE88B2694CC4F9AE02.roa (hash: /yoDz91aVKDMVKQFN5vWqL0kcfwjMSXqa0ohs5b1IqQ=)
4: B59B34B2A59511EFB1B8AF36C4F9AE02.roa (hash: vWyefttpePLkPBEoycC5X0lmEGRfAIuwi2Ngs4ojIYc=)
5: 48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (hash: mA/WE2Bh4RmqFgp1Gp11Wu83VKDJFyoxbw2SeY/E7bk=)
6: 536CEA945D5D11F0A20A8B47C4F9AE02.roa (hash: NudhcCG6U8c/iVjiv9Q5GA7zP2bSr5Lt2Lyl6qOq+zo=)
7: 885A3B4C198C11EEA06C1429C4F9AE02.roa (hash: UwbxqlIoeWN/uj0INOlxAStWat7EJVu9aWA6OuSDC9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 20:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2339 (0x923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Validity
Not Before: Dec 14 20:06:58 2025 GMT
Not After : Dec 21 20:06:58 2025 GMT
Subject: CN=693f18e2-e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:69:ef:a6:4d:4f:c2:89:a0:14:13:fb:4e:
02:38:83:7e:98:21:2a:80:0a:0b:55:f0:74:91:ea:
0a:ac:b5:3b:9d:70:0f:0a:1f:35:86:dd:b6:5d:d4:
d8:18:76:a7:e0:39:f3:00:96:99:db:62:c7:b6:48:
b5:d4:5d:46:a6:f1:f9:43:b6:7e:32:66:9c:85:86:
b3:ae:76:ee:71:61:7a:6f:7d:55:22:5e:e6:76:37:
ec:73:fe:76:a5:21:88:56:c1:fa:9b:47:03:7d:35:
8b:23:a4:78:01:c2:1c:90:de:7b:83:85:58:09:79:
ca:62:5a:85:90:f1:75:d5:bb:87:bf:a4:60:47:81:
c5:2d:eb:e2:05:f2:d7:f5:e9:1f:ae:d8:f6:0d:b1:
e2:6a:ad:88:43:7c:e8:52:bd:be:43:89:2a:f3:75:
9c:92:36:ec:58:01:33:bb:58:e3:02:f4:2f:97:56:
0b:0f:16:bd:00:dc:c0:3d:20:aa:40:33:e8:97:9b:
42:1a:4b:50:72:2a:e0:d4:d2:13:04:5c:c4:f9:9a:
1a:d6:4f:e0:94:71:f9:63:0d:a6:4e:a7:36:ee:d4:
84:fe:a1:a7:88:aa:d5:c7:38:13:b4:ca:28:f8:67:
5d:3f:a3:5a:54:9f:0c:45:2d:29:9d:6a:27:e1:6c:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:10:B9:0B:FC:8A:55:8D:11:D7:A6:60:AE:A4:EE:95:CD:E2:6F
X509v3 Authority Key Identifier:
keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:ac:b7:f6:1d:39:56:a5:7c:9d:c6:5b:0f:fb:89:f4:08:bb:
f4:d9:d5:29:6e:7d:b6:40:30:6c:ba:77:9c:6d:bd:61:c4:59:
96:54:fa:7b:81:b6:d3:d9:aa:a4:78:32:b9:2b:48:39:5f:d2:
4e:41:7c:84:64:6d:01:36:81:a6:b5:48:b0:78:e3:fd:2f:89:
7e:07:6f:71:7a:60:61:4b:b6:28:21:ee:0e:be:56:2e:b5:ee:
53:69:e6:a1:5f:5f:5c:ee:ea:01:e9:fb:e4:34:68:1b:26:21:
aa:d5:b8:c8:ee:c2:7b:e8:dd:46:35:e6:5a:66:be:0d:31:a4:
d7:ee:75:6a:9e:5d:a2:29:da:b6:89:aa:a2:2b:aa:33:96:69:
64:2c:1d:31:50:a3:d2:b8:e7:b8:0d:84:18:af:78:35:4b:a6:
05:c5:47:db:85:cf:a4:96:68:2f:9c:53:7a:02:2d:59:82:14:
20:1d:b2:b7:b3:9b:cb:9f:d8:4b:de:02:35:47:fb:9a:6e:98:
28:a4:e8:43:27:1d:76:60:6e:96:7b:2a:89:37:75:82:59:23:
7b:a0:07:66:29:54:b5:55:c9:8e:00:9f:06:ee:50:89:96:91:
76:cd:e8:8b:eb:a5:f9:8a:9c:f6:e2:bd:9c:86:09:7c:51:0e:
63:85:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 18:59:52 2025 by rpki-client