This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json)
Hash identifier: WYxgMGArHpeEPyMQLjee/nBojz3/1DI3tqzxUgQvmp8=
Subject key identifier: 14:B7:50:2B:73:E6:CD:17:4A:ED:20:9B:F3:83:49:93:26:07:87:99
Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Certificate serial: 46
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
Manifest number: 45
Signing time: Wed 03 Dec 2025 05:36:28 +0000
Manifest this update: Wed 03 Dec 2025 05:36:28 +0000
Manifest next update: Wed 10 Dec 2025 05:36:28 +0000
Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: ME/qTtUwoeTXCcxc6ydJgAm3RIZeVx5k1zQ4Sz1oPjw=)
2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2
Validity
Not Before: Dec 3 05:36:28 2025 GMT
Not After : Dec 10 05:36:28 2025 GMT
Subject: CN=692fcc5c-4425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:e8:63:48:2d:9d:d6:0f:cf:c9:ab:57:db:
3b:18:2a:ad:3e:b0:43:3c:08:17:c0:6e:eb:d8:12:
87:ac:b6:cc:f7:3f:cf:3f:d2:d0:58:75:35:f9:dc:
7d:e2:d2:06:fd:ca:bb:b5:3f:89:51:4d:98:96:48:
01:5a:68:56:d2:05:aa:99:fd:79:d8:19:39:27:e0:
c1:98:8b:61:68:03:44:9f:8b:c9:f7:9d:d7:cd:58:
b8:78:9d:a3:25:9b:54:cc:bc:a9:1d:51:c5:7e:01:
b9:d9:36:4f:9f:9d:97:8d:f0:a2:16:67:59:f0:c5:
3e:14:b3:5e:8a:36:54:17:fe:79:d4:f5:45:6f:f7:
97:d3:fc:83:58:1a:be:6d:17:f0:70:7e:27:00:01:
87:32:f0:33:75:f4:a1:b7:31:95:aa:56:a8:ad:db:
ca:58:6b:a6:67:4f:e0:00:a8:96:b9:a7:da:8a:f0:
16:20:80:2b:ba:fb:5f:21:20:b0:0b:b4:8c:79:6a:
b1:66:f2:7f:ce:ed:6b:25:ab:8f:75:5d:7c:fa:98:
b3:2b:3e:e4:0a:ec:df:c9:47:8f:a4:99:f8:42:92:
d3:8f:ec:43:f2:e0:41:c6:d8:f8:d9:5d:5b:96:5c:
d1:5f:bf:95:98:e6:44:8a:77:be:79:93:4a:17:d2:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B7:50:2B:73:E6:CD:17:4A:ED:20:9B:F3:83:49:93:26:07:87:99
X509v3 Authority Key Identifier:
keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:56:f9:3a:54:7b:dd:6a:40:24:3a:46:2e:1e:5d:58:10:b4:
55:eb:48:28:f9:b5:75:38:b9:fc:2d:2d:51:c2:4d:c0:51:c7:
64:ff:4d:cc:c4:66:0c:ae:ea:81:21:d0:e5:e6:44:5e:72:8c:
45:36:a5:67:32:74:10:87:d3:98:a7:87:43:bb:58:cf:41:c8:
79:2a:26:d2:6d:12:c3:17:6f:3b:ea:de:17:c5:10:b4:c4:64:
89:f7:14:a9:4b:58:63:c1:93:a8:ae:62:1b:a9:2c:c1:fd:65:
d6:f2:0d:9a:63:ea:23:23:f5:0b:6a:44:1b:d1:2a:82:79:14:
e9:c2:20:6d:d3:6b:00:bc:7e:6a:6a:6a:d8:e7:22:13:0e:8f:
61:2f:f6:26:75:84:86:41:03:6d:33:44:78:22:0d:5c:6b:6f:
6f:3a:99:72:f1:ee:78:2a:1f:32:6d:a6:b4:28:9b:fb:dc:a6:
44:de:1b:cc:40:2b:84:f0:31:9d:3e:45:c7:1d:07:ad:53:20:
ce:94:45:87:f5:4b:d3:1a:a1:59:80:fe:f2:45:a8:e8:a8:a8:
9e:db:e6:2b:67:0e:37:84:c4:aa:ba:6e:be:6b:6a:16:40:0f:
8e:47:4b:27:e3:00:1d:b2:4c:a9:8d:d7:f6:66:1b:f6:cc:91:
1e:c0:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:09 2025 by rpki-client