This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
File: tdM6ejKlCC0za2sFt5ZfMHRwonY.mft (raw, json)
Hash identifier: k0fyTdcIGZpsrPbkD6Qpb1tduNtcEDK7EFtVgfDTC84=
Subject key identifier: 29:9A:26:CF:AE:E3:36:EA:89:E4:E1:42:E7:0D:7A:09:7C:73:5A:AF
Authority key identifier: B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
Certificate issuer: /CN=A91F1446/serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Certificate serial: 03B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
Manifest number: 039E
Signing time: Fri 19 Dec 2025 00:00:16 +0000
Manifest this update: Fri 19 Dec 2025 00:00:15 +0000
Manifest next update: Fri 26 Dec 2025 00:00:15 +0000
Files and hashes: 1: tdM6ejKlCC0za2sFt5ZfMHRwonY.crl (hash: m2zBxhqviGSkw4af2pjvwtyxcjfKGCFiv6H4d4yeXu8=)
2: D56B4ABED54E11EFAD8C4E52C4F9AE02.roa (hash: A43/xgJTGYeraFwPZtUL84bZHCq+gEn3dFwYExX8W/g=)
3: 69B0C410EC2411EFBE58C381C4F9AE02.roa (hash: +kwqGbWpipbMrj0CLjpjVwB+WbolyL/GD/coYdvqy5o=)
4: 31521640C6CB11ECB185E43EC4F9AE02.roa (hash: NWdLC1okjSMZC1re8r0GPv+coLAtzqUNZd/WJqoFC0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1446, serialNumber=B5D33A7A32A5082D336B6B05B7965F307470A276
Validity
Not Before: Dec 19 00:00:15 2025 GMT
Not After : Dec 26 00:00:15 2025 GMT
Subject: CN=69449590-7613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:1d:16:70:e0:c6:b0:2e:53:37:1e:2f:3f:
92:84:93:65:e8:4e:43:58:48:0e:d7:53:04:74:27:
a0:c8:6a:36:eb:43:a8:1c:06:cb:7c:92:a3:f6:cb:
d9:9b:c8:fd:2e:b1:3a:84:04:58:d3:84:38:c7:e9:
e1:0e:90:b4:12:f2:35:72:c1:bc:1d:35:cb:d2:45:
96:a8:f7:60:a0:50:b8:34:03:f4:67:c9:0f:33:5c:
e1:b3:4c:8f:52:d0:83:6c:2d:45:11:db:93:64:aa:
44:07:37:e5:09:df:6f:95:65:77:bc:e6:bf:51:1a:
70:50:64:64:1a:aa:0e:eb:76:7e:4f:a1:7a:80:d8:
77:9e:98:94:6c:2e:a4:87:a9:18:52:7a:d9:29:be:
68:2d:5a:9a:14:78:39:09:31:d2:fc:0f:ac:2d:4a:
83:0c:88:30:57:9e:95:8e:54:16:29:a4:dc:09:1c:
a2:42:53:7d:a8:62:37:fc:b4:86:68:d1:60:d7:35:
77:18:23:03:61:82:ea:e9:e8:d8:89:ec:50:df:ef:
79:05:4c:ea:a7:e6:a3:54:df:9f:fb:47:80:32:dc:
f3:b8:84:a7:2b:68:26:c8:50:91:7e:e1:a7:ed:f8:
42:82:ca:fc:0a:90:ad:df:94:02:6b:3d:26:33:6e:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:26:CF:AE:E3:36:EA:89:E4:E1:42:E7:0D:7A:09:7C:73:5A:AF
X509v3 Authority Key Identifier:
keyid:B5:D3:3A:7A:32:A5:08:2D:33:6B:6B:05:B7:96:5F:30:74:70:A2:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tdM6ejKlCC0za2sFt5ZfMHRwonY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1446/2A1FF56EC53511EC8E5A0313C4F9AE02/tdM6ejKlCC0za2sFt5ZfMHRwonY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:41:df:18:49:2d:59:94:a9:e8:4e:98:d2:75:ed:68:85:a2:
1a:65:8d:77:0d:f9:83:1c:a7:3a:37:b3:c9:7f:9e:56:7e:7b:
8a:98:e4:20:25:ea:1e:6e:6b:60:48:76:47:0b:7d:ef:32:79:
a0:8e:be:85:b9:c4:c6:99:a3:76:db:9a:fb:d7:7b:28:65:24:
4c:6f:84:de:f5:25:9f:62:41:a2:69:18:00:59:9a:e3:58:1d:
32:c9:9f:79:ab:e4:c0:0a:29:db:ed:9a:b0:da:f8:c2:cb:5b:
11:2a:80:ec:73:7b:2c:6e:84:36:dd:f6:5f:a9:c9:db:b9:c9:
5e:75:1a:cf:8a:c1:1f:05:64:25:e7:58:86:c3:44:fa:14:1f:
bb:00:64:90:fd:bc:43:7b:00:ce:c3:ff:38:84:4d:7d:34:36:
40:3d:03:e5:97:a6:12:2e:21:90:c5:b5:a9:d9:57:00:d2:d7:
aa:82:42:25:2a:09:1c:89:f2:1e:2b:4d:d2:7f:7b:3f:b1:8e:
05:c5:42:87:c8:21:b6:a9:61:96:92:2d:f3:6f:b7:d7:de:6e:
f0:f8:0d:58:b3:7f:84:b1:a8:93:1e:f2:a2:42:4a:27:3d:b2:
97:e1:93:c9:7f:4c:52:6b:7b:7a:88:3a:32:74:8e:d6:3f:72:
86:1a:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:38:32 2025 by rpki-client