This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
File: CptpgbEtWk0t827p0oCmWVwyUTY.mft (raw, json)
Hash identifier: EkVfrwQ61w83c8VEHroGqWRUDtqZikCf2hHNE3z2fug=
Subject key identifier: 7E:D0:F4:97:BC:62:09:A9:FD:0F:9E:B2:41:C9:28:72:CE:72:F0:5E
Authority key identifier: 0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
Certificate issuer: /CN=A91EAC82/serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Certificate serial: 0B48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
Manifest number: 0B3A
Signing time: Sat 20 Dec 2025 18:48:00 +0000
Manifest this update: Sat 20 Dec 2025 18:47:59 +0000
Manifest next update: Sat 27 Dec 2025 18:47:59 +0000
Files and hashes: 1: CptpgbEtWk0t827p0oCmWVwyUTY.crl (hash: JwvaYus18w5BFaUa/eZmvX3BinOTHVmyWFbDV5gYDJA=)
2: 2FC13F564ED511EA945E3314C4F9AE02.roa (hash: A/a0M5805rjTnXrE1n/14FN5oLiy6+lmzg+Var9FAeo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2888 (0xb48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAC82, serialNumber=0A9B6981B12D5A4D2DF36EE9D280A6595C325136
Validity
Not Before: Dec 20 18:47:59 2025 GMT
Not After : Dec 27 18:47:59 2025 GMT
Subject: CN=6946ef5f-ce31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:6a:3f:ab:db:e7:d7:d5:ca:9f:3c:c3:a5:
24:2c:32:df:56:49:ee:11:91:f0:00:54:29:d7:86:
c6:51:b4:8e:76:84:91:f4:6e:48:20:69:b5:4d:04:
da:ce:8a:79:f6:7b:6e:3b:09:27:12:c7:fa:50:e1:
f2:40:71:7c:a5:9d:f2:45:6b:2c:6e:a7:7c:81:70:
73:e6:f2:54:6e:8e:ce:a7:df:9a:ac:79:a4:69:49:
b5:66:88:9a:c6:4a:11:dd:10:52:d1:c4:50:4d:53:
b3:1e:e9:12:1f:d0:1f:d4:ea:7f:5f:b3:2b:48:88:
28:85:fb:26:d2:82:a6:ed:8d:3d:29:76:e7:61:7e:
a7:d9:23:91:55:53:b1:25:52:09:04:00:23:87:f8:
e5:0b:08:ce:60:c4:05:e2:ea:b9:1f:49:63:11:1b:
5f:d5:ab:8e:f6:86:bc:20:8a:20:86:38:ee:35:37:
df:a1:e7:4a:ce:fc:b2:a2:d9:37:21:fe:e4:65:09:
21:4e:c1:94:79:ee:73:8e:09:4f:36:83:ee:c4:cc:
05:d0:60:45:23:16:08:7d:9b:12:a8:7c:64:ad:1f:
ad:38:37:b4:66:45:8b:b7:29:7c:3a:4a:44:52:96:
31:8b:ec:7f:e3:1a:21:1e:49:66:de:05:4c:3e:e5:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D0:F4:97:BC:62:09:A9:FD:0F:9E:B2:41:C9:28:72:CE:72:F0:5E
X509v3 Authority Key Identifier:
keyid:0A:9B:69:81:B1:2D:5A:4D:2D:F3:6E:E9:D2:80:A6:59:5C:32:51:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CptpgbEtWk0t827p0oCmWVwyUTY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAC82/CBD893A04ED311EAAD7BA211C4F9AE02/CptpgbEtWk0t827p0oCmWVwyUTY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:bd:4a:93:bf:c6:29:a7:d9:4a:66:87:e4:f2:66:af:9d:
e2:10:86:a7:9d:e1:d9:ae:fc:89:d6:a4:6a:6e:bd:57:6a:d0:
25:23:c4:ff:43:d3:ba:c3:97:fd:90:10:ee:b9:57:06:88:08:
21:30:a2:8e:1c:c1:59:2a:3e:ac:aa:b6:66:8e:54:dc:82:d8:
25:20:70:91:36:ff:13:b0:86:11:8a:f5:ab:88:b4:94:84:ae:
a6:6c:d0:86:3e:98:77:7e:2c:11:87:7d:ff:e7:9e:e0:34:44:
bc:fa:99:f0:a2:b5:64:0c:9f:b3:46:e4:ef:20:fd:a7:bd:d2:
59:6e:49:db:06:a3:20:06:ae:6e:da:1b:7f:c5:52:5c:0a:ff:
9e:92:09:74:97:95:83:d3:e4:33:5a:16:de:93:a3:8b:70:b0:
35:f3:e2:c9:04:26:de:29:bf:19:7b:2f:01:c2:78:6b:b7:50:
b1:1e:f2:d3:1a:59:90:a9:80:e4:69:e3:ae:ab:e4:29:d2:19:
65:10:92:0d:ea:49:6d:9f:b0:ee:55:60:8d:10:5b:20:a8:f9:
6f:fe:66:1d:6a:e2:a1:a4:f1:7a:05:c9:85:52:3b:4d:87:c9:
9c:1d:4a:a6:ef:e3:06:18:d7:d0:9b:7b:4b:84:eb:ad:78:1b:
7e:e9:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 08:54:21 2025 by rpki-client