This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json)
Hash identifier: LLokfAgveLtYrLil0+ayJj3hzi1ByvgiXZR4dAjeCss=
Subject key identifier: 38:1B:0C:7E:52:31:F7:22:F4:32:E2:C2:85:AB:11:4F:00:B4:94:BB
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 152E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
Manifest number: 151D
Signing time: Tue 02 Dec 2025 15:25:47 +0000
Manifest this update: Tue 02 Dec 2025 15:25:47 +0000
Manifest next update: Tue 09 Dec 2025 15:25:47 +0000
Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: z0t87ezZZZkQ31OcAqQ5V2H4SoTPIK/ypgH7P94G0FA=)
2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5422 (0x152e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: Dec 2 15:25:47 2025 GMT
Not After : Dec 9 15:25:47 2025 GMT
Subject: CN=692f04fb-912b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:64:6e:2e:d0:6f:12:1a:51:12:9c:ad:37:
b6:40:58:c8:92:74:dc:be:6d:46:2a:35:54:63:27:
55:05:0c:59:e4:28:db:55:5b:28:f0:90:05:67:a8:
f1:f0:8d:15:39:10:d3:df:b3:01:65:2b:77:1a:6d:
df:d8:eb:e1:ea:e1:32:49:31:51:90:f8:44:9d:fe:
a0:49:08:ad:1e:79:54:9e:3e:61:b9:e0:c2:b0:62:
87:60:cf:44:46:7c:a1:9d:fb:27:bd:ef:35:62:31:
c7:f7:bf:49:51:3b:fa:84:47:c8:cf:bc:fd:39:7b:
24:e7:c4:30:da:df:f1:62:27:34:4f:19:82:55:07:
b8:48:1d:2d:a3:e9:3c:f9:b8:c4:a3:c1:71:ac:eb:
cb:23:66:82:78:21:1b:ee:c6:7e:29:83:4f:4b:4f:
b0:e8:70:0c:a8:51:a6:c8:f9:8e:24:34:8a:87:f6:
6d:ed:04:54:9a:7a:fc:ff:35:88:e4:ad:fe:23:3e:
b8:0c:63:71:03:68:9d:e4:e0:3c:a6:35:a1:2b:f6:
02:c0:94:d9:0f:49:3e:46:94:98:cb:b2:8d:8b:f4:
85:cb:e1:5b:22:62:7b:b0:3c:01:9b:01:2a:34:48:
4c:47:a7:28:d6:84:13:dc:54:26:5f:e4:28:6b:7c:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:0C:7E:52:31:F7:22:F4:32:E2:C2:85:AB:11:4F:00:B4:94:BB
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:91:c1:51:f1:b2:19:02:5d:0b:90:e6:db:7c:60:7a:fe:d0:
4e:bb:69:d1:26:3e:d3:1b:3f:04:4a:fb:30:21:46:c0:f4:57:
7a:53:7b:94:e1:c9:54:d6:38:69:e8:38:25:e3:50:ce:6a:6e:
1e:ac:83:de:a0:e2:7d:11:c6:9b:e0:d2:50:7f:ca:fe:d1:cb:
55:fd:94:3e:51:9e:09:36:d3:36:39:81:ed:91:72:3a:fa:46:
1e:1d:75:64:10:cc:07:64:2c:43:91:13:83:74:e2:61:61:52:
06:df:cc:8c:6a:f3:2a:2d:e7:52:03:b6:60:8e:76:7e:17:f9:
c3:55:17:34:54:0f:6d:ba:d3:81:e9:4a:81:f1:cf:83:a8:d1:
d6:29:82:76:c8:6f:b2:04:73:0e:a3:79:25:19:a8:ad:d0:b8:
bd:76:77:48:2e:a9:cc:ec:44:19:18:5d:fd:8d:4f:90:9b:61:
3e:05:aa:9c:b7:00:3a:0b:1e:70:58:3d:e1:3e:be:87:c6:91:
45:85:04:71:a2:bf:d7:66:a7:8c:0f:71:7c:37:85:b4:28:2a:
de:02:d0:50:16:b9:ae:ae:ad:f2:be:e3:3b:cc:98:ce:3a:e8:
f6:11:cd:9f:15:eb:34:96:d5:48:4a:53:29:c1:bf:7d:de:b6:
5a:36:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:20 2025 by rpki-client