This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
File: cBtV7SDYPjSNgjfON1l5WevAGCQ.mft (raw, json)
Hash identifier: 26nnbY7vh5tEsnUvp+DTs0vruVmLeTjYTIXrS6rGa2Q=
Subject key identifier: A3:6F:BA:4E:B0:1C:5A:76:4E:B1:93:9D:55:2B:9B:19:A4:40:37:64
Authority key identifier: 70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
Certificate issuer: /CN=A91E5D61/serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Certificate serial: 1307
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
Manifest number: 4821
Signing time: Sat 20 Dec 2025 14:20:51 +0000
Manifest this update: Sat 20 Dec 2025 14:20:51 +0000
Manifest next update: Sat 27 Dec 2025 14:20:51 +0000
Files and hashes: 1: cBtV7SDYPjSNgjfON1l5WevAGCQ.crl (hash: Q3F1szJ8NIPoyn3GMtygHYz4oNsKvEvoYNbwY5WJap4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4871 (0x1307)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=701B55ED20D83E348D8237CE37597959EBC01824
Validity
Not Before: Dec 20 14:20:51 2025 GMT
Not After : Dec 27 14:20:51 2025 GMT
Subject: CN=6946b0c3-5526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:90:8e:f1:d6:e8:05:6c:10:71:18:2e:b2:
fe:7f:65:73:c9:e5:65:b6:12:f6:d7:d8:43:5d:f3:
c1:03:5a:a9:1d:5e:d5:17:1c:f9:26:96:66:da:0a:
7d:53:1c:74:e4:d1:72:20:a3:02:c5:eb:06:0b:a6:
5e:50:fb:b6:86:66:ca:7f:cb:73:43:c1:44:be:3a:
f7:e9:49:b9:b6:08:29:08:9c:b3:c3:8a:43:93:0d:
94:55:92:b5:9a:16:ae:82:bd:61:78:30:64:1e:49:
d6:59:b8:e2:0f:27:86:e2:0c:ae:23:08:c5:1c:d2:
80:21:1a:e7:e8:7d:81:b8:0d:63:55:3e:62:9a:a5:
95:63:39:c8:67:ee:05:f7:72:df:cd:a1:5e:07:82:
c5:1c:32:1b:50:cc:c4:cc:dd:27:79:b1:c5:cb:a3:
03:5f:74:2a:e5:90:88:c9:aa:83:2a:ac:e2:b7:9e:
6a:f3:a2:bf:87:f2:17:7a:d6:3a:99:dc:1c:68:49:
25:98:42:70:5e:3c:fc:6f:4f:cf:ec:ad:f5:2f:0b:
d7:eb:78:d5:e2:a2:46:11:88:da:fe:b6:17:c4:ff:
3e:9d:53:f8:36:ce:fe:a9:f1:22:a9:f5:6b:51:3e:
45:ec:94:e8:39:a4:2e:40:fb:5e:bb:2b:b8:5c:f1:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6F:BA:4E:B0:1C:5A:76:4E:B1:93:9D:55:2B:9B:19:A4:40:37:64
X509v3 Authority Key Identifier:
keyid:70:1B:55:ED:20:D8:3E:34:8D:82:37:CE:37:59:79:59:EB:C0:18:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBtV7SDYPjSNgjfON1l5WevAGCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/EE67D8C01D7811E2879E38C508B02CD2/cBtV7SDYPjSNgjfON1l5WevAGCQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a0:b4:8b:18:fd:cd:a4:d7:43:1e:ea:7f:e1:28:14:21:7b:
5c:84:41:eb:53:4e:ca:00:49:cb:a9:79:04:c3:f8:7b:de:bd:
17:7a:cf:45:1c:58:fb:ce:ea:6b:07:b6:3a:01:62:69:49:64:
dd:1d:88:6f:08:7c:fa:8c:3c:55:74:67:3d:f7:5f:63:b4:4b:
9b:7a:db:6f:dc:ef:f3:cd:75:79:3f:30:a5:ea:5d:90:a7:11:
fa:c0:29:0b:c0:eb:01:4c:04:f3:17:f2:d3:cf:f8:0e:18:7e:
ce:7e:44:e1:71:a3:c2:33:04:88:52:67:ec:7b:51:f1:3b:a0:
bd:64:68:1f:bd:0a:05:01:f0:d6:8d:fd:5e:ea:ef:81:7a:6a:
f5:60:43:ee:16:bf:d4:63:1a:7e:42:b7:3a:b8:5e:5b:57:8d:
3e:c1:56:65:b5:19:c4:a6:0e:1f:a5:7c:5d:d0:5c:f0:93:9d:
c7:57:77:f1:1d:ee:2b:fe:8b:6f:de:d5:1e:c9:28:7a:27:35:
ab:16:8e:8e:d0:c0:9c:61:8f:42:62:57:09:4f:c3:ac:d2:47:
fd:07:c0:83:4a:df:10:fc:a0:ac:ce:db:eb:f0:8f:3c:3d:7e:
99:05:ad:d2:55:4c:86:46:39:af:e4:28:88:4a:2b:91:f5:46:
01:56:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:26:41 2025 by rpki-client