This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json)
Hash identifier: so6NKjM5y8/5iV7vdhkvguWA3lN/raJ5omHC2s6v2/o=
Subject key identifier: 73:34:FA:14:E5:35:4B:31:4A:33:41:FC:CB:7A:05:7B:72:A9:23:88
Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Certificate serial: 1E20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
Manifest number: 1DFB
Signing time: Sat 06 Dec 2025 15:47:33 +0000
Manifest this update: Sat 06 Dec 2025 15:47:32 +0000
Manifest next update: Sat 13 Dec 2025 15:47:32 +0000
Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: 3nXL5xoDOJ140vWktUzG5SRYu2oOGDCV6fRhxLvkywo=)
2: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: b0wxpwf8/vaYEOZtGJIbQgPEprx6ejeXyxzSbeJ8WVc=)
3: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: akkWYjfaWEhqYJZrRKjxCpGXnYxAkiIziyHvD0Tsd7w=)
4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 7TEbSw3PqWXAumkD/6WCBubmNiQ54mZObTiNmT20Qfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7712 (0x1e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848
Validity
Not Before: Dec 6 15:47:32 2025 GMT
Not After : Dec 13 15:47:32 2025 GMT
Subject: CN=69345015-96ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:15:ba:2b:d5:d8:84:6a:63:88:38:16:27:
64:07:1c:4f:62:53:d9:15:19:c3:d6:b6:8f:ed:4b:
ad:55:ff:4c:a3:02:a8:5f:f6:42:3b:28:7d:e5:2c:
fc:cd:cb:56:9f:7c:55:5c:79:a0:e6:d7:75:92:70:
69:78:a0:42:f6:88:1e:15:b4:0c:86:f0:b0:58:e1:
43:4f:65:ae:d2:60:61:67:34:1a:95:c7:79:f6:27:
1b:e2:b1:c0:fa:6e:61:f4:9f:16:2b:22:3b:e9:80:
83:57:9d:f8:f0:8c:59:0a:d1:c2:ca:0d:f9:26:54:
d9:75:f3:f6:8b:cd:55:80:7b:ab:05:1e:29:54:5c:
8f:8c:de:5d:73:50:c4:80:27:23:72:bd:4f:f1:e3:
9d:81:7f:7d:66:7c:c8:88:f2:e9:7e:89:be:43:5e:
c1:39:62:04:17:70:f7:5e:9f:89:e7:a8:41:55:c3:
3b:de:37:9b:5d:f1:5c:cd:88:e8:4d:cc:66:e4:e4:
97:fd:ef:8e:4e:e5:c3:d7:5c:47:44:b4:63:e0:e2:
f7:3e:e5:02:b2:d3:d4:e6:fe:eb:59:12:28:a2:a7:
23:52:c4:ec:d8:08:d7:5e:38:a6:83:43:f5:31:d8:
0c:87:65:7d:d6:ef:54:62:25:ee:9d:a3:c0:7a:67:
e8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:34:FA:14:E5:35:4B:31:4A:33:41:FC:CB:7A:05:7B:72:A9:23:88
X509v3 Authority Key Identifier:
keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e1:49:b9:9b:46:d8:2e:0f:f6:5b:70:89:d6:2e:3e:c1:e1:
94:96:db:60:74:95:a5:a3:9f:2c:20:66:27:37:f7:e1:a2:96:
71:bd:99:a2:db:70:42:d3:2d:0a:ff:f5:60:e1:2a:2b:b0:39:
ca:b2:ed:86:d5:d5:cf:a2:df:f6:af:57:10:78:d4:ce:1b:05:
27:17:00:d2:34:82:0f:b3:85:90:62:53:fc:0d:99:72:fd:0d:
64:87:91:6d:ba:ef:08:4b:5f:0d:e3:98:91:95:30:29:19:53:
be:e9:88:36:dc:35:d7:e6:93:df:5c:74:f3:86:61:b1:04:02:
50:8f:c0:0e:82:32:99:6c:a8:1f:80:29:cc:50:e3:51:5a:e0:
0a:2b:ec:5d:d4:f5:e9:c8:ae:cf:d2:13:73:21:00:d8:89:c0:
61:b1:4e:56:0d:e4:83:09:39:92:61:1a:b8:04:1d:96:d3:36:
9f:e5:06:1a:b1:43:0f:37:de:bb:39:ae:d5:cc:9d:af:41:33:
79:ab:52:e7:93:e9:2a:d4:01:cb:13:98:44:95:82:01:52:f1:
79:17:fd:08:51:ca:65:92:2b:3b:07:80:1d:5d:16:8d:c2:80:
f9:fe:bf:21:7f:63:92:1a:0a:90:bb:e0:04:d2:7c:dc:e6:07:
8e:4a:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:24:27 2025 by rpki-client