This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json)
Hash identifier: HKGSRdvvTc7nKcoaPQN2nPaP/pkyJEbT7IEgx63tYhc=
Subject key identifier: 21:DD:3C:09:A9:CF:2F:A5:BA:80:A3:03:9F:6A:36:D1:63:B2:2F:19
Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Certificate serial: 1015
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
Manifest number: 0FDF
Signing time: Tue 02 Dec 2025 17:07:50 +0000
Manifest this update: Tue 02 Dec 2025 17:07:49 +0000
Manifest next update: Tue 09 Dec 2025 17:07:49 +0000
Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: kTQoGwqBZI2LgMwNrwAMIvav43iLLMginLrqrYN4zbY=)
2: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: QtpDimKOHqXsxnqa4q87zCBuPpMrfxyNN2d7cp4WlrA=)
3: B3876B1821C911EB991D562EC4F9AE02.roa (hash: 6uU1bRzcclFeMC/RnwQZxh3s9UKuJJHVwL7cdGjMFOc=)
4: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: XWm8GaGIPPLP9AKtaT6KRszth65jZeSEF8vfSa7oAA0=)
5: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: PNhMIJG2WqhTSsHQs6Q3B5W+HPqAu/8Af4Ot4nkDDLQ=)
6: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: t18G/jUeuq8lptvTyxkqs2wnq4jb4g41EOSptQznrUs=)
7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: Jk6V50ct0NhfCUNeq2rSB6SPY6PZ86y8Zd5FDESJ7kI=)
8: B490CD0621C911EB991D562EC4F9AE02.roa (hash: WNk4We2Ht/Om3rf3IbH7SVRsK901hQ7kL7sR1ONDJ8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 17:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4117 (0x1015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661
Validity
Not Before: Dec 2 17:07:49 2025 GMT
Not After : Dec 9 17:07:49 2025 GMT
Subject: CN=692f1ce6-8754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:05:2a:83:68:52:93:f6:e3:b0:34:7c:af:
87:31:43:83:ce:cf:01:61:cc:3d:51:e9:22:4c:d4:
f9:51:e1:aa:78:71:38:90:92:eb:93:4f:44:ed:49:
6a:76:be:c3:d2:7d:f4:fd:d4:ad:2d:29:ef:07:45:
d8:33:db:e9:a2:87:e1:16:99:72:07:0b:58:7f:a1:
be:92:a6:4b:b6:10:44:b1:9f:b9:d2:69:cf:5f:8c:
b9:c4:54:60:72:98:39:67:9f:b3:79:2c:bc:85:44:
3d:c7:2b:40:91:29:ea:43:c7:99:71:2e:32:f7:91:
c2:15:0b:48:85:bf:63:23:ca:a6:1a:8e:51:60:d9:
77:f6:81:25:90:82:46:bc:5c:9b:61:16:83:6d:de:
50:dd:8d:68:61:e7:72:36:da:1c:65:90:b2:18:87:
84:75:2a:e8:51:77:cd:42:e9:e8:d5:15:90:2e:40:
f7:63:20:b1:63:38:e8:c0:77:71:50:70:21:03:af:
cf:9d:67:44:04:1d:83:53:4a:fc:2b:1d:21:16:7f:
ee:9e:1e:99:c5:fd:0a:21:7d:a9:69:51:cb:db:06:
83:48:95:6f:12:88:1f:62:41:12:a8:be:c5:8c:dc:
b6:ba:85:08:3d:2a:a0:50:15:6a:4a:a3:d8:f0:38:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:3C:09:A9:CF:2F:A5:BA:80:A3:03:9F:6A:36:D1:63:B2:2F:19
X509v3 Authority Key Identifier:
keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:68:fd:b3:31:e4:56:16:2c:da:0c:2c:62:9f:94:6c:46:b3:
95:df:94:90:78:c7:af:6b:dc:38:0e:5d:12:01:d1:af:e6:0c:
ff:70:74:1a:dd:6c:40:38:56:65:f0:ad:ea:fa:32:b8:7a:c7:
5e:1d:e6:61:49:db:82:6d:6b:8c:b3:10:f7:81:4b:01:33:60:
b2:fe:b3:80:d6:fd:7b:dc:fb:fe:7b:04:a9:01:4a:2d:22:ca:
95:41:e1:62:4b:c2:fa:d3:68:82:ab:43:c8:12:05:63:68:f2:
80:e2:29:20:fc:1b:3f:09:7d:99:94:b8:b0:1f:b9:7c:ce:c9:
b0:d4:0e:77:1f:d8:bb:3f:6b:fe:c3:d3:fe:6c:5d:a4:d3:1e:
5b:44:0a:97:7b:22:9c:b2:bf:7e:cc:83:83:32:1d:c1:6e:b3:
aa:3d:1b:d0:71:a6:4f:a0:24:14:5a:0b:b4:da:3a:20:b7:9c:
d8:ab:2e:ee:3f:88:0b:bf:a1:a9:4a:f5:67:2e:22:eb:cb:d4:
36:26:ae:7e:65:de:2c:4a:f2:f3:8e:ed:6e:54:97:24:61:f8:
08:90:ed:65:fd:5e:39:fe:ca:b5:18:d9:52:cb:b5:90:92:78:
f5:93:b8:e8:dc:3b:d8:7f:92:76:12:6f:16:0a:44:fb:24:75:
f2:a9:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 12:42:52 2025 by rpki-client