This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json)
Hash identifier: mZnAJQQDgaWQpXLRloaFssWZfB5bnf3tJAto9+IbQJk=
Subject key identifier: 1A:4C:8F:7B:61:37:5B:FC:CC:AF:5D:57:CD:9A:E1:55:10:BB:E7:A7
Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Certificate serial: 06B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
Manifest number: 06A4
Signing time: Sat 20 Dec 2025 21:46:50 +0000
Manifest this update: Sat 20 Dec 2025 21:46:49 +0000
Manifest next update: Sat 27 Dec 2025 21:46:49 +0000
Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: 4+aXbZK79kd0LGPKGKUC+dpFmWULQSPKBgNc526ZKNw=)
2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: 71fJuckCoKbzUc34v7gFsGAjPnIuO7itiiyZ85r0nVs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1720 (0x6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47
Validity
Not Before: Dec 20 21:46:49 2025 GMT
Not After : Dec 27 21:46:49 2025 GMT
Subject: CN=6947194a-ae93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:f7:4a:cc:b1:b3:d5:20:03:f0:c0:65:9c:
ad:23:38:06:e2:79:57:7d:5b:83:6f:9a:fc:42:c5:
80:15:d3:64:df:67:fe:9e:a1:62:9b:8f:ca:2b:39:
3d:6c:ae:47:c9:c4:32:a4:4a:9d:fa:5c:2a:c8:1e:
fb:ba:3e:f4:bd:34:ba:9a:c7:66:13:14:20:14:d2:
62:d2:07:44:80:68:76:d9:db:58:13:54:11:18:1a:
bd:6f:7e:57:70:3e:3e:20:0b:04:98:2d:d5:55:e7:
4c:ba:37:b0:54:7c:f3:ee:11:81:2b:35:d8:e7:11:
c2:7a:ce:45:bc:06:fd:a2:aa:9b:f7:1c:db:65:3a:
cc:b2:15:b6:3b:2a:5a:e4:e5:a4:f3:53:c0:dc:a1:
57:0a:63:25:d4:28:73:79:d8:45:af:51:0e:fb:b5:
1b:ce:8c:70:12:b8:3c:23:ed:0b:5a:4e:43:94:46:
67:fb:58:58:09:8f:58:aa:45:b5:32:73:7f:f7:2b:
f6:b5:e8:1a:91:56:60:57:70:2d:53:6b:05:ca:89:
66:bf:11:72:db:28:9c:c9:9c:36:33:b7:de:b9:6d:
3e:32:ff:5c:b8:be:5c:c1:46:f2:f9:45:36:75:8c:
7b:8d:eb:72:6c:bc:5d:cc:9d:36:58:a6:86:7e:22:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:8F:7B:61:37:5B:FC:CC:AF:5D:57:CD:9A:E1:55:10:BB:E7:A7
X509v3 Authority Key Identifier:
keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:c7:b0:3c:4f:c8:0d:14:f3:cf:25:d6:8d:4e:2a:60:d6:
a8:6e:80:93:53:91:91:61:4e:0e:b6:ee:8c:24:33:43:5d:5f:
c9:e1:a6:64:60:43:0a:4f:99:6b:62:b3:fc:e3:29:56:a4:dc:
ce:8d:a8:b4:f7:df:1d:fa:f8:d6:50:18:77:52:2e:37:de:c8:
28:f1:a2:bd:da:c0:50:a8:c9:e1:d3:ed:ab:39:6a:1b:9d:da:
c7:b4:7a:3c:4b:ce:fc:f6:b7:58:d6:66:cd:e4:ad:12:9c:03:
82:d2:90:3b:03:eb:80:6d:8c:7e:06:d2:e0:72:8f:a6:5e:1d:
a3:30:5e:26:21:bb:20:fb:35:e4:c5:c5:6c:e5:be:a3:be:4f:
c5:f0:a3:8c:86:f5:08:4a:fa:6d:aa:96:d3:51:9d:84:ae:5b:
cf:2a:30:01:ff:f9:57:69:2b:29:2f:06:08:25:c6:45:a3:91:
78:fb:a9:28:68:67:11:78:3d:b8:54:94:ee:e7:6f:2c:61:cf:
e3:8c:51:13:d1:0f:2a:f1:c4:52:99:d0:2e:b0:55:8a:21:27:
0c:55:3d:82:5f:20:db:ff:66:4d:c9:c5:51:4e:10:25:93:10:
a8:79:10:2a:32:2b:82:8b:f8:62:88:8d:40:ed:fd:9b:46:6a:
1f:6c:4a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:27:52 2025 by rpki-client