This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier: 3AEmnx5KPxyDIF7Gqu5Qf4XIWXMGxaZ85/nAxCt3pQE=
Subject key identifier: DC:C9:2A:D8:94:3C:2D:A0:67:E4:35:0A:CA:D4:C2:49:D3:D6:91:C7
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial: 03B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number: 038A
Signing time: Mon 22 Dec 2025 23:56:41 +0000
Manifest this update: Mon 22 Dec 2025 23:56:41 +0000
Manifest next update: Mon 29 Dec 2025 23:56:41 +0000
Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: iO02kSnu5o9+tlHHoqcRi6iJCVRFTl3akYxhYn9Q3p0=)
2: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=)
3: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=)
4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Validity
Not Before: Dec 22 23:56:41 2025 GMT
Not After : Dec 29 23:56:41 2025 GMT
Subject: CN=6949dab9-9a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:4e:e9:b7:d1:c0:f6:2b:52:6d:94:26:fc:
b4:f8:fe:bb:e1:52:60:4b:fb:28:e3:1c:b6:e9:9b:
be:f0:30:76:b2:6c:23:92:cc:7c:46:f2:fe:03:cd:
89:3b:a1:55:b6:1b:fd:9f:be:b8:e9:9e:f5:c6:0d:
db:1c:34:e6:25:c7:0d:6d:c9:89:15:7b:43:e3:0a:
76:31:95:d5:e9:73:04:37:ac:1c:5b:20:39:c7:e3:
9a:77:e0:df:23:aa:64:78:fe:e0:55:36:b7:7c:aa:
3c:fc:a7:25:ae:dd:78:94:6e:13:9f:f4:37:bb:0f:
4a:c6:dd:49:6d:d4:1b:40:af:f0:b4:63:24:9b:5f:
20:7f:cd:c4:88:8b:5d:8c:84:26:ca:90:2d:ac:d6:
6b:9c:e4:1d:6f:dc:ae:f8:55:03:99:dd:43:7d:95:
53:67:2a:2f:40:62:0e:64:d6:cb:9b:1d:3d:fe:df:
b5:38:46:bf:e5:ef:07:51:24:c8:5a:eb:1a:79:83:
4e:3f:5c:a9:dd:d3:bb:c7:8a:7e:3d:3b:d1:ef:19:
f0:a3:e9:43:87:fe:22:af:3e:df:08:19:c0:39:d5:
5a:01:4a:9e:9f:f8:fd:11:5f:04:0e:f7:1a:6f:b8:
61:a0:52:29:6e:da:f0:74:5d:eb:24:bc:35:9e:ab:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:2A:D8:94:3C:2D:A0:67:E4:35:0A:CA:D4:C2:49:D3:D6:91:C7
X509v3 Authority Key Identifier:
keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:63:ed:a5:7d:d1:29:a9:ca:5f:1f:07:fe:cf:a4:65:2a:78:
53:eb:e6:09:1b:0f:b5:77:08:c6:1b:a6:2b:3f:f4:b8:db:b7:
65:c8:44:eb:5b:0f:5d:f4:fa:45:69:dd:d5:a3:dd:d5:73:1c:
26:cb:70:0a:88:3d:f7:56:d8:49:7e:64:2a:f3:ad:af:c7:5d:
d9:07:30:99:9d:49:58:36:f0:63:93:b4:73:a7:cf:30:f0:00:
73:4f:6a:71:b3:9f:41:95:3d:05:8b:fe:0f:45:bb:26:00:2e:
9d:cd:d1:e4:bc:70:c1:14:ec:0f:41:5e:98:b9:3a:33:fd:69:
10:e1:06:15:b8:28:47:77:c8:fb:6d:d3:1a:75:20:7e:2a:c8:
bc:f5:a6:7c:62:06:9e:6e:92:75:c3:53:d7:74:8b:98:af:ef:
6e:57:b7:c7:76:31:4c:5a:f1:d1:72:24:27:22:e7:7c:1f:41:
82:a7:61:10:43:9f:1f:81:f8:a8:f7:18:85:0a:70:6d:25:ee:
81:bd:02:85:35:e3:20:96:13:4b:49:55:4e:70:e5:8f:3b:70:
23:42:ad:43:33:f0:72:75:b0:cb:d2:b4:1f:a6:cf:c1:5c:64:
20:25:be:d7:82:d0:68:f6:9d:9d:9a:11:47:c1:d5:8b:b9:72:
fc:b6:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:21:33 2025 by rpki-client