This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
File: IrGnF151_9hHOR8sLpZl5O7ht0I.mft (raw, json)
Hash identifier: TwTnmrIc6kVNVz80ajwu+oGXB/H7/qW/tZ+XyYNZ4xc=
Subject key identifier: 80:2E:48:55:0F:A2:40:F5:50:D4:BB:EE:7E:F6:B1:49:DD:25:88:C0
Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Certificate serial: 11B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
Manifest number: 1174
Signing time: Wed 10 Dec 2025 16:43:21 +0000
Manifest this update: Wed 10 Dec 2025 16:43:21 +0000
Manifest next update: Wed 17 Dec 2025 16:43:21 +0000
Files and hashes: 1: IrGnF151_9hHOR8sLpZl5O7ht0I.crl (hash: xeVcarAJ5fFOKHR+QOvnWreVWdhIM2BYn5bfLvdMQD8=)
2: D9BBFBDA4D3111F099A48033C4F9AE02.roa (hash: A1A/LnUqdsNFUNCbA9pj78Zy7mXZZnhX+0nyseCL3vE=)
3: 98A0F61840AD11F0BB332714C4F9AE02.roa (hash: tKQU1f9hJtuAYfiy2kdRz9mYUmd+c/z8iKCPuJpB5Jo=)
4: A9204F96917F11EDA5B26357C4F9AE02.roa (hash: GKHRKfwk3bqrqOFGPvJ+kjY0NTnB33jXoiW8bXeNOjw=)
5: 4F2654ACACDB11F0A3F2FF3CC4F9AE02.roa (hash: ezSFE6z1AfPI1kfaZKGN0eX+4u/ZznyBrlMf93wLFII=)
6: D276D68CACDC11F093B6B95AC4F9AE02.roa (hash: HogXJmL/NwNRLzeVXgVFZcWMkVgOGwGFOMaQzjDPXUk=)
7: 981DEAC6B1C711F08CEB3C61C4F9AE02.roa (hash: Xd/ha+8Rf40EUcmF2S28Em4xm72VBdQzvds2dDfnPNU=)
8: 16C96BAE18E311EFB8960668C4F9AE02.roa (hash: PDXFymAQeHbTCItIfy8LqqoHr3PVKA+eJZNU6voGL5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 16:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4536 (0x11b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742
Validity
Not Before: Dec 10 16:43:21 2025 GMT
Not After : Dec 17 16:43:21 2025 GMT
Subject: CN=6939a329-18df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:cc:36:e0:88:b8:64:47:d9:ab:5e:76:00:
8e:da:80:34:b1:16:f8:67:bb:37:36:b0:fc:77:91:
46:10:0b:d3:29:60:8b:50:dc:9b:cf:68:38:ce:89:
94:f1:0c:1f:02:2e:e9:0e:b4:f1:b9:81:93:8e:3d:
a6:36:f4:cd:44:79:89:b4:f8:d6:18:07:5c:49:58:
88:7d:f1:20:47:38:c8:f5:9e:6f:16:f1:2e:d3:23:
e0:fe:82:28:3d:82:68:47:ab:35:01:2b:36:6e:76:
33:5f:67:ed:64:dd:96:b5:4f:ce:e8:d1:7d:fa:68:
61:0c:ef:1f:b9:7c:c8:15:53:12:ef:05:db:74:b5:
d9:46:57:a7:43:31:e4:2a:46:1f:f1:95:88:4a:4e:
16:ad:fb:49:c5:c0:db:ef:5c:3d:d8:27:c1:b2:5c:
cd:9a:a5:61:d6:06:c6:89:f4:f5:e1:5d:f4:93:59:
cb:bd:ab:2a:6e:c0:64:7a:26:fd:59:f8:b7:14:a2:
76:fe:c8:d1:63:b8:f8:54:70:4f:dc:5f:72:58:02:
d4:86:6e:7a:dc:cc:21:1c:9f:ac:9e:af:3e:34:08:
a9:2c:5e:ac:bb:95:4b:e4:d9:10:83:da:1a:bd:75:
8f:c7:76:14:5d:b8:21:fe:7f:82:b2:1e:ae:e1:0b:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2E:48:55:0F:A2:40:F5:50:D4:BB:EE:7E:F6:B1:49:DD:25:88:C0
X509v3 Authority Key Identifier:
keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:4c:de:0a:27:d6:21:3d:21:1b:46:c3:54:f5:47:49:7b:
a2:09:da:ec:41:0c:48:7e:9e:d7:82:91:24:8b:dd:78:da:ac:
44:2e:b1:dc:9b:8b:a2:51:46:50:1e:3b:8d:e8:20:7a:de:36:
47:af:ad:3f:4b:ad:4f:4d:44:b4:8f:4c:09:46:e0:7c:77:d9:
1f:20:44:ad:3c:68:e7:0f:b8:4f:1e:80:6b:e4:3d:23:57:86:
5e:00:66:ac:f7:f2:f4:79:ef:ef:75:95:6d:f3:f8:8e:b5:83:
30:04:7d:16:6e:39:8a:55:4a:a2:d9:47:06:a8:dd:6b:1f:27:
48:ed:cc:11:1f:79:c3:dc:ab:2f:82:ca:f5:7e:a5:fd:3f:25:
57:65:30:e4:c7:1e:37:9e:47:67:71:70:c3:d2:b6:f4:e8:df:
19:11:61:17:f2:de:52:77:7e:cf:18:16:a1:1b:92:8c:76:41:
1e:13:b3:5c:3f:34:23:1a:01:e9:19:ed:c4:b5:e6:68:c1:4e:
8e:c0:ea:04:5d:24:25:cb:cb:cc:b5:cc:a8:18:5f:37:14:0b:
09:6a:4a:38:a0:99:92:a6:82:8f:c4:8c:12:fe:16:62:77:eb:
3b:d2:f8:1c:5c:8a:93:97:10:b6:c8:85:6c:d0:92:7c:99:38:
6d:ec:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:01:08 2025 by rpki-client