This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
File: _IC0m1BzMv1MnJLdXiei38qAZNo.mft (raw, json)
Hash identifier: eSXwDQNCOwtcC9D8JhH9n/166U7JYMmM3oyN4UnBSRI=
Subject key identifier: 70:5E:8F:D1:AB:59:D9:19:58:29:AC:D8:DE:A3:7E:4B:33:40:66:98
Authority key identifier: FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
Certificate issuer: /CN=A91E13D0/serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Certificate serial: 058A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
Manifest number: 0583
Signing time: Thu 18 Dec 2025 22:38:35 +0000
Manifest this update: Thu 18 Dec 2025 22:38:35 +0000
Manifest next update: Thu 25 Dec 2025 22:38:35 +0000
Files and hashes: 1: _IC0m1BzMv1MnJLdXiei38qAZNo.crl (hash: 6qGTu/ng6c4Jlf91lOaSUT7S4CO84LwWiZqbDQIxM8I=)
2: E86C4B1E04AE11EC92C8D079C4F9AE02.roa (hash: lavhkAfv8hYziRuA8AuHoJeOdZGCo7Jbpk55GeOTHz0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418 (0x58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E13D0, serialNumber=FC80B49B507332FD4C9C92DD5E27A2DFCA8064DA
Validity
Not Before: Dec 18 22:38:35 2025 GMT
Not After : Dec 25 22:38:35 2025 GMT
Subject: CN=6944826b-9a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:70:e0:6d:e9:84:3b:9b:19:81:0f:96:9e:
29:a0:c1:90:70:4a:ba:ed:18:01:b2:74:12:c4:6e:
14:d6:c7:b5:6c:3b:69:e6:82:ee:d1:ea:d5:89:49:
27:fe:a2:ac:94:90:6a:0d:70:aa:ca:3b:a1:a8:ad:
2d:54:56:25:92:00:bf:29:59:06:20:cf:23:b2:68:
72:81:e9:4f:0e:93:d7:9a:a9:cf:55:1a:c4:64:b7:
4f:3d:d5:d5:44:8e:d0:3c:7e:23:25:28:f8:bd:c3:
2c:10:c2:cb:d3:9b:5c:39:f9:44:c2:88:34:0d:1c:
d4:c9:14:0c:3b:2f:6e:b5:10:a0:a9:20:85:44:6c:
c9:3d:a7:4f:a6:57:9a:3a:28:d1:c3:01:42:5f:7f:
d6:02:3e:ab:81:40:b4:bb:fd:f5:0b:69:28:aa:34:
db:8d:88:b6:99:25:02:11:76:d8:39:68:f3:6f:72:
3d:b3:9f:01:cf:b2:2b:14:58:4c:66:ea:ae:31:8d:
22:b4:00:4d:34:c6:37:7b:91:31:26:5f:42:6b:a0:
c0:84:e0:fa:7a:d0:26:b1:ac:79:9b:6a:f1:c5:df:
ed:67:2b:78:7a:83:95:53:76:63:03:b3:80:ca:26:
68:a0:8e:bc:1f:d1:b9:e5:61:85:f2:f8:ac:10:bc:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5E:8F:D1:AB:59:D9:19:58:29:AC:D8:DE:A3:7E:4B:33:40:66:98
X509v3 Authority Key Identifier:
keyid:FC:80:B4:9B:50:73:32:FD:4C:9C:92:DD:5E:27:A2:DF:CA:80:64:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_IC0m1BzMv1MnJLdXiei38qAZNo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E13D0/D7A4BB5604AC11ECBEB50C79C4F9AE02/_IC0m1BzMv1MnJLdXiei38qAZNo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:59:60:41:af:20:8b:0b:46:89:8c:56:35:71:0b:19:e7:a3:
e7:fe:b7:7c:10:f2:8c:a3:26:e0:56:9a:31:5d:6e:23:65:a6:
aa:57:02:17:90:db:f9:78:0c:ea:2e:91:45:41:89:04:23:fe:
c8:9d:cf:77:a0:72:33:26:90:f1:5a:31:84:cb:65:29:f3:ce:
eb:85:63:e9:2c:d7:5a:27:49:15:39:e5:e8:cc:a7:c8:4a:62:
97:73:bd:8c:30:3b:a4:e1:a5:11:91:d9:a2:82:81:76:34:f6:
f3:83:99:ca:eb:63:99:25:6c:c8:0c:2b:6f:5d:d5:b1:b0:72:
17:0c:f2:08:9a:46:6e:22:75:a3:f4:8b:00:18:3b:05:2b:2f:
50:df:bb:f5:81:54:38:f1:29:23:ec:c0:e1:3b:35:75:af:9f:
e0:af:40:36:93:fc:16:aa:45:fe:12:52:3e:a7:8e:8f:1f:ea:
98:f4:bc:6f:63:77:f3:bc:7c:c6:50:bb:0c:f6:86:84:15:4c:
53:8c:75:0d:38:c8:fb:aa:c6:b0:e2:de:93:b3:bc:2f:a8:c8:
f3:96:9a:23:de:b5:b7:80:9b:d3:e9:7c:26:67:e3:27:69:ea:
1d:1a:29:82:4e:db:75:7d:3b:1e:a2:3e:50:70:11:a4:95:08:
9d:0a:df:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:50:00 2025 by rpki-client