This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
File: 0wuATUKrfQIMXx9287PdHykthmo.mft (raw, json)
Hash identifier: ZKnm81vOqL1tkg3iqfs02Y6wWDIyJjmNxzmHk45WssE=
Subject key identifier: F1:49:C1:E2:AF:32:AF:46:1A:19:6B:FC:26:D0:CA:8C:BD:87:9E:0D
Authority key identifier: D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
Certificate issuer: /CN=A91EDEC8/serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Certificate serial: 073F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
Manifest number: 0739
Signing time: Mon 22 Dec 2025 21:02:18 +0000
Manifest this update: Mon 22 Dec 2025 21:02:18 +0000
Manifest next update: Mon 29 Dec 2025 21:02:18 +0000
Files and hashes: 1: 0wuATUKrfQIMXx9287PdHykthmo.crl (hash: YHsqkeHhEAFUhPcAC+ey42ntxIQ5uSdxCvLEDfcAk3k=)
2: D693E0B656E211EB83D9EA74C4F9AE02.roa (hash: ShBRwbTuBxj9yKQsDtx+jaY1y+xIJPIpBM97g/zTojo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1855 (0x73f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EDEC8, serialNumber=D30B804D42AB7D020C5F1F76F3B3DD1F292D866A
Validity
Not Before: Dec 22 21:02:18 2025 GMT
Not After : Dec 29 21:02:18 2025 GMT
Subject: CN=6949b1da-4918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:55:ab:18:37:1c:4e:49:cd:07:77:89:fc:d6:
3c:92:46:5d:88:18:ae:15:5f:9f:cd:54:6a:9f:ee:
43:a0:a8:4b:d6:f9:97:d7:0a:af:cc:2a:10:ae:37:
ce:65:09:5c:10:a9:09:32:c1:e5:de:f4:97:ad:ee:
5a:79:e2:ba:27:a2:00:04:00:0c:2f:cf:05:ac:b0:
6a:03:7f:65:af:5c:3f:9b:b6:40:d3:a4:7b:8c:c8:
ca:3d:03:94:d3:c6:bc:90:53:64:a2:6a:4a:39:d1:
57:40:8a:25:7e:0b:17:37:6a:18:2b:7a:8e:ab:85:
8a:b1:1e:e3:30:3f:7e:3f:4e:ee:a1:8c:f8:ae:c5:
a2:08:44:01:ee:1b:30:d6:3a:8d:23:13:02:58:03:
1f:1b:68:38:1b:4d:72:f6:48:e3:f0:1f:88:a6:95:
26:76:91:ff:ab:97:5c:8c:f6:8d:6d:25:70:75:1e:
1b:4c:df:24:84:45:12:db:52:de:4d:57:d3:63:1b:
ea:83:e5:cf:56:bc:51:3e:c7:17:3a:a4:d0:0f:64:
19:ea:ed:ed:a8:42:96:d5:00:3a:1a:3a:11:c8:3d:
03:fb:0c:05:bc:a6:a4:5c:9d:66:83:22:c5:d0:ca:
94:20:32:18:02:64:84:32:14:39:b9:d0:e1:ca:1f:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:C1:E2:AF:32:AF:46:1A:19:6B:FC:26:D0:CA:8C:BD:87:9E:0D
X509v3 Authority Key Identifier:
keyid:D3:0B:80:4D:42:AB:7D:02:0C:5F:1F:76:F3:B3:DD:1F:29:2D:86:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wuATUKrfQIMXx9287PdHykthmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDEC8/8A05098856E111EBAACBEE73C4F9AE02/0wuATUKrfQIMXx9287PdHykthmo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e1:fa:58:dc:3e:25:ec:5e:55:54:f2:6c:2d:d9:f5:b0:6d:
67:83:8a:5e:9a:8e:02:d7:06:02:7e:1c:45:50:10:31:6a:87:
69:77:05:7f:44:d4:51:8c:f5:f4:a2:47:16:10:29:81:6e:15:
c4:e7:fb:45:bc:1b:9d:18:ff:f0:0c:fa:22:b3:9c:df:0f:3c:
b7:d3:de:15:a7:3d:37:de:5d:69:d4:3b:69:78:01:6b:0c:00:
d8:70:dd:bd:5e:6d:c9:3a:0d:18:7f:f1:3b:95:18:e0:8d:01:
de:b5:1f:f2:11:28:96:9d:3b:ea:22:0d:0c:34:63:6b:95:7f:
2d:e4:39:e9:e6:7d:4d:8d:c5:37:ad:ab:48:f8:cf:59:0b:22:
6d:11:b5:4a:a9:8c:52:0a:c2:78:3a:69:07:dd:4f:65:4e:51:
5f:d8:39:6e:e1:bd:ae:b4:02:dd:b2:97:86:70:fe:2a:c9:f6:
83:ec:e2:fa:e6:7b:6f:46:84:6e:05:54:a5:24:dc:0e:7a:64:
59:82:0b:88:4a:c6:3d:27:aa:9d:e4:c6:1f:aa:95:3d:c8:f1:
7b:de:a8:94:52:ee:18:db:f1:0d:8e:34:cc:d7:2a:b2:51:19:
21:6f:7d:e8:2c:ea:a8:99:48:c5:9d:a1:d1:67:d7:de:5b:9b:
2c:be:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:08:48 2025 by rpki-client