This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
File: PV2GR6upu0BiXDxkPNg2fxUHgBo.mft (raw, json)
Hash identifier: TycnOW7QxyWdJLuOXFWhyOtJ5bUTWo90482WXLLmv94=
Subject key identifier: A0:B1:BB:9C:E6:B8:1E:88:1A:6D:A2:7F:F2:41:B3:A9:4F:EF:62:B4
Authority key identifier: 3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
Certificate issuer: /CN=A91E0EF2/serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
Manifest number: 0497
Signing time: Tue 02 Dec 2025 22:51:56 +0000
Manifest this update: Tue 02 Dec 2025 22:51:55 +0000
Manifest next update: Tue 09 Dec 2025 22:51:55 +0000
Files and hashes: 1: PV2GR6upu0BiXDxkPNg2fxUHgBo.crl (hash: B4cH8RlKJUKRu+Oc21k6G1pwctSKraZdFA5nQfY0OnY=)
2: CA7DCCFE5EE511ECA6B8CA48C4F9AE02.roa (hash: mDuBvAb87vc0xqlLuEIwzuSg0BaaCa9nDXGB49E/55o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 22:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF2, serialNumber=3D5D8647ABA9BB40625C3C643CD8367F1507801A
Validity
Not Before: Dec 2 22:51:55 2025 GMT
Not After : Dec 9 22:51:55 2025 GMT
Subject: CN=692f6d8c-15a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:6d:1c:33:f0:0a:2c:e8:40:26:bc:d6:5e:
90:cc:26:da:bc:26:0d:69:d8:d5:6b:f7:04:7a:0d:
88:2f:2e:d0:1c:23:d8:94:3c:64:8c:ee:d9:ff:ed:
90:50:ba:30:2a:bc:49:50:00:39:33:74:2e:fe:0a:
28:b7:b3:60:25:9a:a2:8e:eb:ee:f6:18:a9:a7:7b:
52:7a:13:57:12:29:d3:1a:e7:41:3b:06:e2:9d:f8:
7e:44:e6:e8:5f:70:84:5b:28:ed:44:60:20:c7:d5:
5b:4f:1a:a3:72:c1:79:29:da:a0:4d:da:2c:fb:05:
b8:f3:ae:1f:7e:73:3f:d6:ff:41:34:d4:d7:16:71:
2a:f6:6c:a4:a2:1b:61:af:7c:c7:9d:6b:f6:22:11:
49:50:77:2e:e8:02:0b:4c:bc:b8:bf:09:8f:9a:0b:
64:c3:7a:3d:f5:ae:db:e5:98:db:88:c8:5c:97:31:
be:b9:06:79:e8:07:fd:cf:1d:f2:7a:d8:eb:07:98:
43:af:68:a6:b4:53:81:85:61:48:de:0f:3d:f8:fd:
9b:e6:07:62:06:13:92:93:7e:23:47:b2:96:c3:85:
d2:d1:6b:8a:38:6c:6b:3f:f6:32:3c:f9:68:c3:44:
c6:64:94:03:d1:4c:47:0a:09:f7:e0:5a:43:ab:70:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B1:BB:9C:E6:B8:1E:88:1A:6D:A2:7F:F2:41:B3:A9:4F:EF:62:B4
X509v3 Authority Key Identifier:
keyid:3D:5D:86:47:AB:A9:BB:40:62:5C:3C:64:3C:D8:36:7F:15:07:80:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PV2GR6upu0BiXDxkPNg2fxUHgBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF2/AB6B27F65EE211ECAFA64B44C4F9AE02/PV2GR6upu0BiXDxkPNg2fxUHgBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:06:c3:c4:15:d6:6b:c7:45:20:15:0d:a0:53:e9:68:9c:9f:
37:c3:2c:30:5b:81:4d:e4:f2:28:08:fb:23:bd:cc:89:75:de:
ac:55:cf:6f:a0:12:57:c5:87:25:fb:60:04:76:ad:34:e3:cb:
b5:8b:25:fc:4c:00:7c:13:66:a7:de:3c:e9:1c:70:8b:a6:1e:
1b:eb:8e:14:1c:09:7f:03:50:f4:fb:95:b1:31:9d:46:d2:89:
d9:84:ab:15:42:8d:7a:4d:8f:87:00:33:9b:15:b8:03:c4:30:
df:82:16:6c:c5:28:df:e8:56:0f:7b:bf:19:ca:be:66:2c:b1:
d9:ec:eb:99:82:cf:d5:aa:b9:05:6c:83:2a:60:5b:bb:cf:08:
a5:06:0d:0a:16:76:7a:01:16:ad:de:09:bb:4f:36:01:bd:04:
c4:e4:d2:37:3a:17:74:c3:4f:f3:50:4b:2b:45:6f:3a:cc:3e:
51:8f:51:7a:f9:3f:f9:ae:1c:4b:32:31:59:4e:cf:9e:e1:52:
a4:55:f0:f4:bf:0e:77:f2:31:7c:5b:97:62:a8:d5:73:95:d3:
03:e9:ee:68:69:e9:45:f7:3e:5c:4b:b8:c4:20:a6:7f:b9:ee:
2b:de:6a:b3:51:16:ed:0a:28:67:4c:98:7b:43:bc:9a:de:01:
3b:ec:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:36 2025 by rpki-client