This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json)
Hash identifier: m3hyBoqQXXwxsi+TvcgWqFd9fnsH9R9M761QOeTwCPU=
Subject key identifier: 96:F9:2E:93:5E:55:D5:3F:E4:8B:42:03:73:C1:2B:47:11:D3:29:B1
Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Certificate serial: 0111
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
Manifest number: 010F
Signing time: Thu 25 Dec 2025 03:58:48 +0000
Manifest this update: Thu 25 Dec 2025 03:58:48 +0000
Manifest next update: Thu 01 Jan 2026 03:58:48 +0000
Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: wtcpAujP+cZg1b/Zni4U0a4IGe3z40/L5j3gQbhnPig=)
2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: Ph9PQO0HR4nUNS7ci1voMb24Pze4tYQXnav/XFcYles=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:58:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 273 (0x111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604
Validity
Not Before: Dec 25 03:58:48 2025 GMT
Not After : Jan 1 03:58:48 2026 GMT
Subject: CN=694cb678-007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:2f:ba:0c:0e:8f:c7:8c:ba:72:03:7c:db:
76:90:50:ca:5a:a2:14:8a:4e:5e:8a:e1:d2:b1:70:
df:47:59:91:f8:bd:7b:67:86:f7:58:e6:3a:b0:1f:
28:ea:a0:0c:1d:3d:02:96:5d:f8:6d:51:8d:ff:bb:
2e:95:9c:28:01:bd:7a:59:3d:d3:0b:61:f6:6d:24:
4d:41:f8:e2:68:f4:39:a2:74:5d:12:7c:ad:86:9d:
b8:50:84:2e:03:7a:df:a8:0e:1d:e7:87:68:a7:94:
85:15:6c:e7:c9:89:74:0c:ff:a3:77:fe:80:d4:b9:
b0:5f:f6:ba:ca:37:22:6d:79:9b:24:49:77:6b:5b:
a3:bb:31:be:3d:bc:dc:77:f2:28:31:97:7a:2a:94:
96:53:6c:78:b6:bd:ef:40:9e:48:1e:d3:91:51:ad:
e1:29:15:51:ef:9f:36:d9:ab:d1:7c:ed:c3:0f:ef:
60:a9:32:cc:33:15:a6:21:d0:ca:68:cb:a2:ef:7a:
2b:bf:e6:48:b9:20:a1:8f:18:0c:69:85:55:7f:c0:
c7:10:fe:d8:12:dd:7e:d4:aa:74:56:40:fa:27:5e:
d1:9e:b3:28:4d:3c:15:c9:06:4b:6f:42:8c:1e:1c:
07:a6:8f:a9:6a:42:a2:fc:3c:15:8f:e6:c2:34:58:
88:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F9:2E:93:5E:55:D5:3F:E4:8B:42:03:73:C1:2B:47:11:D3:29:B1
X509v3 Authority Key Identifier:
keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:7e:9d:1c:03:0d:55:99:8e:aa:c3:09:98:75:ea:ef:77:
e8:fa:30:35:85:06:1d:2d:1c:05:39:b2:2b:74:c1:d9:2f:e4:
53:f8:8d:ed:4f:54:0f:d0:22:06:9f:77:7f:e2:ba:62:93:e7:
93:5d:58:c2:48:41:bd:12:e3:71:c0:5e:56:02:a0:fd:24:31:
0a:1e:37:de:22:21:aa:ff:91:c6:bf:4c:1e:b6:48:e7:f7:4c:
7f:10:c2:98:d3:8a:32:ea:02:58:40:bc:21:a0:6c:69:c4:77:
59:12:ac:6e:dc:86:87:2e:cb:2e:5c:d9:1c:e8:a0:e3:6e:a0:
a0:36:23:98:2b:1d:37:d1:ee:af:b8:d7:2a:97:ec:fc:a0:39:
60:4c:3b:6c:74:14:b0:15:e0:b3:65:a4:12:9e:f1:fe:17:f7:
b2:26:87:06:96:67:dc:6f:96:4b:33:dd:6f:59:79:1e:54:81:
7e:19:5e:bf:10:72:0e:5d:6a:f4:52:97:8e:de:4f:8b:4c:a3:
1d:3b:db:ef:4a:c2:64:dc:1f:0f:fb:aa:80:45:5d:42:7f:4c:
38:01:8c:25:d0:6a:20:db:59:5b:90:d8:66:4e:a2:95:5a:f9:
96:07:a6:63:71:86:a6:a3:12:86:fe:3b:8e:8b:74:4f:ef:a2:
3f:6c:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:12:15 2025 by rpki-client