This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
File: x-37dX9ZS98jrdcSH12-PSWuAPw.mft (raw, json)
Hash identifier: 5JC9t7XBa19t44rGy3bIRfZjTNOlbf9MxklXhJLaSZs=
Subject key identifier: EB:38:2F:02:A8:7A:28:A7:8C:FF:6E:59:42:BA:A7:6B:0D:8E:6F:68
Authority key identifier: C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
Certificate issuer: /CN=A91F8579/serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Certificate serial: 03A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
Manifest number: 0389
Signing time: Tue 02 Dec 2025 23:33:27 +0000
Manifest this update: Tue 02 Dec 2025 23:33:26 +0000
Manifest next update: Tue 09 Dec 2025 23:33:26 +0000
Files and hashes: 1: x-37dX9ZS98jrdcSH12-PSWuAPw.crl (hash: kdHTOo6XcXJ7mBdDCQB4GefqmZ5sh355IH2tc1pP78g=)
2: C38C54A2650411EE89EC7112C4F9AE02.roa (hash: vXzSIXZBaXcIq7HGAv3/KzQ/zFxGEtVsxyV8BgD55Xg=)
3: EA2C5116450411F09738105FC4F9AE02.roa (hash: mDgnt/g1+zuzz/Dldep3lhpu+guK6efPn+25tb2sN6w=)
4: 2872E3EEB78511EFACBD807DC4F9AE02.roa (hash: kZzMXdkHsbeWhqQo08LJANq63hJpAGNo4uFVGoBwQ/0=)
5: EB1C709C450411F09738105FC4F9AE02.roa (hash: O/x91LtvdsHnu6UD+9TxpNdI3pzLLK+i+0wDI9cj5DI=)
6: 27DC7846B78511EFACBD807DC4F9AE02.roa (hash: b5B3lzxVsrZlixjiSWlcyQY2EuLiKocCaABGFArbDwM=)
7: EAAF7884450411F09738105FC4F9AE02.roa (hash: tBvhikagp7Nt4A+RvXoPttqaLGkwIsP8h24We8nhn+w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 23:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8579, serialNumber=C7EDFB757F594BDF23ADD7121F5DBE3D25AE00FC
Validity
Not Before: Dec 2 23:33:26 2025 GMT
Not After : Dec 9 23:33:26 2025 GMT
Subject: CN=692f7746-dcba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:b0:13:7b:72:be:bb:77:91:13:2a:70:fa:
b3:46:a7:5d:a4:a4:c5:5c:e4:29:81:6c:94:0c:5f:
70:f8:a3:51:dc:77:b0:4d:ec:5f:8c:da:65:21:be:
4f:7d:a4:60:30:8e:83:82:f9:8e:9d:99:ec:6b:c2:
53:5f:f5:49:f3:35:ee:d9:0d:b5:c1:8c:3a:07:7f:
ca:9b:4a:7f:ad:27:7e:3a:3d:6b:48:ee:62:50:eb:
80:4d:5b:a3:0c:4b:90:f3:84:32:46:f8:6d:f3:c0:
38:56:5e:e1:89:1e:08:44:94:cc:42:62:4e:83:7c:
38:95:e7:d6:db:8e:8c:7b:e9:ef:0a:8a:5c:9e:58:
73:9f:35:52:50:ba:02:91:f7:18:bb:a7:2e:3b:b9:
57:fe:c1:29:11:8d:c9:d1:3e:af:82:f9:62:51:b0:
82:53:48:6f:a8:38:0d:46:96:e0:68:d6:21:1d:94:
54:97:47:3f:8e:f9:49:b1:0a:7e:43:13:c8:2c:05:
84:be:6c:31:52:0c:17:23:83:9c:1c:3c:44:e8:73:
f8:cd:c7:90:1d:fa:43:f8:65:47:77:3f:95:2b:23:
97:0e:2e:f6:4a:90:90:a5:af:38:ab:48:29:c2:e7:
bc:a0:95:d3:38:50:62:e5:3a:03:fa:28:9b:60:57:
5b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:38:2F:02:A8:7A:28:A7:8C:FF:6E:59:42:BA:A7:6B:0D:8E:6F:68
X509v3 Authority Key Identifier:
keyid:C7:ED:FB:75:7F:59:4B:DF:23:AD:D7:12:1F:5D:BE:3D:25:AE:00:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x-37dX9ZS98jrdcSH12-PSWuAPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8579/017603FCCEB211ECAE001823C4F9AE02/x-37dX9ZS98jrdcSH12-PSWuAPw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0b:55:eb:56:79:7c:a0:5e:d2:dd:db:3e:ca:40:89:4f:bd:
59:58:1a:2c:17:7f:b3:c6:30:21:e6:90:8e:98:95:a1:6d:80:
e1:d7:b0:2a:48:8d:09:28:5b:8e:a4:69:7f:78:6a:f7:93:71:
68:64:90:a5:88:fd:b2:14:cb:de:8f:74:88:8b:c6:2c:19:9e:
5e:46:a8:ea:43:52:9f:f5:2d:e5:c4:55:e4:93:fc:da:57:e0:
21:4f:e3:ad:d0:6e:f6:2b:a7:c1:16:5e:61:63:23:e8:ba:d7:
8c:62:49:e8:22:68:a2:39:9d:ed:8c:81:12:53:87:bf:c4:af:
6b:56:17:48:d8:0b:66:b7:d7:4c:1f:a6:07:4f:7b:c3:25:19:
fd:40:c4:d5:2a:10:0e:2d:ef:07:d4:c8:7d:2a:d6:63:c7:10:
99:e7:6f:a7:86:fa:a0:b4:23:96:75:d9:88:7c:a9:a6:d4:d8:
29:05:33:e5:8b:6c:2e:84:b0:5b:a6:25:9d:15:09:8d:b3:19:
eb:d3:d5:d8:84:26:d0:aa:ac:d9:bc:79:c9:cd:29:fe:b4:16:
e7:11:3d:9e:e9:db:58:68:9a:31:07:0a:f1:30:e2:1f:d9:7e:
32:c9:85:95:1b:6a:95:c0:e9:c1:3c:95:02:e3:27:74:db:a0:
d7:b9:99:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 03:36:26 2025 by rpki-client