This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
File: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json)
Hash identifier: 3O65wThqIgde7ZJYuV6h9GnEPhU9DLC8ZxKRFlhl1jc=
Subject key identifier: 0A:56:74:99:C7:90:1C:6C:7F:6C:4D:7F:42:8F:CA:1C:3A:B6:F0:40
Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
Manifest number: 0159
Signing time: Tue 23 Dec 2025 03:12:00 +0000
Manifest this update: Tue 23 Dec 2025 03:12:00 +0000
Manifest next update: Tue 30 Dec 2025 03:12:00 +0000
Files and hashes: 1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: xryVvmYWGqrzJXfW3vkFKkcnZz0b1gvL/5LJKZ2Mcik=)
2: 905F46DEE05A11EFA20EC133C4F9AE02.roa (hash: NVqWotupuz8BWtoYreL5BX+y3xeJG+CMVF0kE4qkEmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD
Validity
Not Before: Dec 23 03:12:00 2025 GMT
Not After : Dec 30 03:12:00 2025 GMT
Subject: CN=694a0880-1462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:d4:d9:81:8a:71:a6:8d:b0:76:c1:20:e7:
74:3d:1c:3b:bc:f5:10:c8:1a:0b:56:5d:a3:cd:8e:
8b:37:d8:eb:59:95:18:32:48:dd:96:42:30:b7:f1:
40:ec:2d:ad:a7:fe:dc:7b:c9:7e:08:99:26:71:bb:
04:64:61:dd:8e:fc:0b:f3:1b:ee:c3:d7:54:63:2b:
ee:00:25:fb:db:a4:10:e5:f0:0d:59:d3:20:ae:13:
dc:2a:23:07:ec:9d:c3:b6:e8:f2:7b:79:6e:34:97:
a8:8c:f2:dc:fe:cd:60:8f:11:0a:14:34:a3:f7:70:
5c:af:a8:7b:02:af:49:62:c4:19:d4:00:4f:57:92:
e6:39:dd:4e:e6:f8:fa:62:8b:c2:b6:4b:14:aa:b9:
11:ca:4c:a2:ac:b1:56:5a:bc:e8:12:62:75:a7:de:
7b:8b:dc:21:fc:72:c1:d0:5c:a8:82:95:07:97:5c:
bc:09:c5:d7:5b:a9:ae:36:e8:af:c0:bc:3e:ca:ed:
1b:e9:8f:c1:df:54:43:40:95:d5:7e:b4:19:2c:6e:
02:fd:f7:6a:3c:09:3d:08:a2:37:52:0a:4b:49:5d:
0e:68:76:5f:a5:26:44:3a:bc:af:d3:38:8f:e2:4f:
19:b4:a9:40:57:f4:ce:0f:df:25:85:0d:cb:0f:72:
ea:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:56:74:99:C7:90:1C:6C:7F:6C:4D:7F:42:8F:CA:1C:3A:B6:F0:40
X509v3 Authority Key Identifier:
keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:60:66:4d:e9:ef:ec:7e:1c:3b:bc:ab:3a:36:93:48:cd:43:
4f:77:26:53:c6:69:78:bb:95:ce:b8:3c:7c:cd:1f:00:38:b5:
4d:32:d7:f6:c2:fd:92:fa:59:e5:da:48:81:d0:53:36:93:67:
81:78:a6:b2:c6:ed:9f:d8:8e:dc:1c:d0:58:ac:6f:2f:0c:50:
da:80:d9:eb:9f:0b:c1:3f:51:07:e3:52:c6:4a:35:d3:cf:bc:
20:7d:d2:e9:63:f3:45:83:19:88:09:fa:c6:2a:92:39:7f:49:
f6:47:d3:39:53:58:23:79:11:65:cb:27:21:84:a8:40:00:ad:
92:46:00:40:7d:52:25:29:94:b4:7c:20:ab:2a:07:04:5b:a7:
0f:a8:46:91:c4:0c:d4:1e:b4:13:fb:0e:1e:71:5f:35:09:5c:
61:a4:a7:82:86:35:b1:81:5a:98:8c:af:5b:7d:4a:70:f5:ed:
86:e3:df:7c:13:e6:cb:59:98:eb:37:80:19:5d:e8:53:f4:38:
9c:ff:bd:31:27:0f:41:d8:48:d5:cb:51:12:8b:87:25:61:a0:
44:83:9a:b9:b2:28:c7:86:df:df:b3:97:f5:e1:37:6d:d7:57:
0b:a3:ff:51:fc:1a:a8:a3:71:1b:2d:61:30:f4:f1:95:28:2e:
12:57:64:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 04:45:27 2025 by rpki-client