This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
File: PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft (raw, json)
Hash identifier: BtbF53SBXHs0pCIw1PBOgSWlCmlVmD1PCVJcJQZrWeY=
Subject key identifier: 9E:EB:3A:83:D6:4A:F7:63:21:47:04:08:E2:7C:54:56:4F:43:82:D6
Authority key identifier: 3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
Certificate issuer: /CN=A91EE09C/serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Certificate serial: 01C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
Manifest number: 01A4
Signing time: Tue 09 Dec 2025 01:54:01 +0000
Manifest this update: Tue 09 Dec 2025 01:54:00 +0000
Manifest next update: Tue 16 Dec 2025 01:54:00 +0000
Files and hashes: 1: PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl (hash: kUYLXrd/VNn7fYXBIXopO5zSCbdEH6613st2b4PugOI=)
2: A3E08ED6825711EFB7585B6FC4F9AE02.roa (hash: c6Y5sHXtnUIlloWQfNj0Oltc+Rkovm/FExQvQHllfw0=)
3: 23D4183024D711EF932FC941C4F9AE02.roa (hash: PEdc3Ajz5VckvHX4I+KQ2ScP909N/JzMHxUtf14BV6s=)
4: 1D98617687B311EFB4972044C4F9AE02.roa (hash: h8bAcU4fUoKskIhMDXeBIXC9uHuKpiNxD6RQQxWm6fQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE09C, serialNumber=3C69B9B601D2C9F2A3915A6FFBCA3DAD62E99245
Validity
Not Before: Dec 9 01:54:00 2025 GMT
Not After : Dec 16 01:54:00 2025 GMT
Subject: CN=69378138-fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:8e:1d:67:cd:3c:e6:34:d5:39:7b:42:46:
c9:66:6d:06:e0:e2:74:39:3e:aa:d1:ea:f5:3e:bd:
96:db:de:8a:d4:d4:13:a2:cc:93:37:33:ca:6b:f2:
fd:4a:1c:40:86:08:cb:2c:ce:f0:1a:4c:12:92:4a:
5d:f0:16:ed:ee:10:03:f3:9b:56:17:7e:e9:82:7c:
7d:88:aa:5e:24:93:a7:2e:1b:f8:52:ae:8c:36:46:
b3:78:f6:15:c4:e9:d6:2c:8a:77:e6:70:03:ac:36:
eb:d3:43:18:be:a6:1d:48:4b:85:31:85:b6:40:5a:
6f:f7:ab:4f:74:0e:fc:8a:80:ce:f7:f3:96:44:99:
4c:d3:fe:8c:47:95:ed:38:68:e1:4f:b6:25:de:71:
d2:60:52:3c:b0:9c:73:fb:a5:26:26:d0:ce:7e:9d:
44:aa:b4:f2:15:fb:28:40:52:e3:8e:f9:25:a9:c8:
6b:79:2f:27:8e:61:bb:99:54:59:76:52:c9:c3:f2:
ed:36:b6:5e:fe:79:a2:42:8b:d5:7c:64:dc:57:96:
36:f7:e3:bc:a0:ba:75:11:ef:38:ef:ee:c6:7b:ce:
f9:f5:60:af:b1:7f:ab:04:eb:15:24:19:71:45:7b:
75:5c:5c:f1:e2:96:d6:86:e3:17:58:40:0b:b7:bc:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:3A:83:D6:4A:F7:63:21:47:04:08:E2:7C:54:56:4F:43:82:D6
X509v3 Authority Key Identifier:
keyid:3C:69:B9:B6:01:D2:C9:F2:A3:91:5A:6F:FB:CA:3D:AD:62:E9:92:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PGm5tgHSyfKjkVpv-8o9rWLpkkU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE09C/EEF762C0907511EE87D26680C4F9AE02/PGm5tgHSyfKjkVpv-8o9rWLpkkU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1c:18:11:62:c7:de:6e:04:34:ea:79:c7:37:9d:f5:96:a6:
4f:68:b9:9a:49:0d:4a:8a:ec:d6:78:77:45:d7:e4:6b:b3:c6:
d2:11:13:52:3e:53:2d:6c:fa:b1:e8:91:15:e2:15:35:3b:d7:
d9:8c:6d:e2:ab:c2:af:41:f9:42:10:e5:25:5f:35:f6:d4:e1:
5a:20:5f:e4:e2:7e:06:c6:0a:c1:4e:ea:68:fb:15:e6:24:9f:
2c:f7:11:e3:df:14:16:b9:9d:a6:9f:2d:63:c1:12:a9:2d:a1:
ac:7e:19:16:c1:62:3c:fd:84:cc:44:39:2a:05:b5:34:4e:a6:
2d:be:cf:21:60:40:e5:38:77:39:99:51:fc:fc:60:98:99:3b:
ef:8a:c6:21:a8:d2:18:ca:9c:bb:89:c0:b1:5d:47:df:41:cd:
3f:58:1b:5a:bd:ca:39:2d:f2:3b:84:f6:e0:e5:8d:42:2c:2b:
d2:58:73:50:0d:9c:6c:b6:4f:ba:99:12:0c:5b:7a:ef:8b:ca:
39:5f:c8:c3:09:19:d6:ef:a2:78:c3:41:c8:f8:44:8c:c5:43:
31:5b:a2:8f:3b:fd:bc:6e:b9:10:38:05:41:13:35:02:81:4b:
4e:92:d1:82:f9:c7:53:4f:ff:72:38:2e:5a:22:3c:b1:80:5d:
e0:97:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:16:59 2025 by rpki-client