This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json)
Hash identifier: Snr1U67EIOPWb3KEGMj6wuvIcjJUwpUKuXDBcBjTONw=
Subject key identifier: C9:EC:06:9E:E2:80:23:B8:E1:C3:CB:39:FE:67:F8:AD:CC:CE:D6:A5
Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
Manifest number: 015F
Signing time: Sun 21 Dec 2025 03:16:18 +0000
Manifest this update: Sun 21 Dec 2025 03:16:17 +0000
Manifest next update: Sun 28 Dec 2025 03:16:17 +0000
Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: jPO4s1CXWPnpgMN6gbMBtgryokY2rIdCYYlm351Z2ss=)
2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 03:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3
Validity
Not Before: Dec 21 03:16:17 2025 GMT
Not After : Dec 28 03:16:17 2025 GMT
Subject: CN=69476682-63b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:5a:b3:79:d5:12:53:82:cd:94:de:c0:67:
91:c4:68:42:87:cc:37:21:de:3c:04:f7:be:fa:37:
93:dc:df:4d:86:5e:18:b4:a1:de:a0:95:0e:ee:89:
53:09:58:db:1c:14:41:b3:a6:5b:60:f7:8c:30:93:
71:88:e0:ae:17:13:59:51:a0:a0:3f:b6:4f:04:7e:
79:81:27:9e:cc:f1:19:6a:72:c4:b1:d8:d6:3f:5e:
83:f4:e0:0a:c6:f7:2e:0c:09:43:ab:b9:39:33:ed:
f1:c7:ef:ec:4f:48:bd:69:30:5d:2e:af:d0:4c:8c:
fe:f5:69:7b:d1:2f:c2:05:14:9c:0c:1c:f5:c5:9a:
40:a4:56:2c:9d:3a:5d:f9:03:ca:eb:56:3b:2c:1c:
93:91:a3:38:8b:9e:0d:d4:a5:bc:ad:01:0e:81:55:
8b:e1:dc:d7:10:87:d9:74:2c:5f:e1:09:7e:7c:bb:
29:3f:92:e8:17:7c:fb:e1:0b:ca:7a:b6:5a:97:0a:
51:84:62:af:82:bc:d4:32:08:c2:e4:c9:c8:21:90:
3e:d2:38:8a:94:de:12:93:c1:59:55:22:20:dc:b9:
1a:84:62:51:82:cd:1b:41:6d:91:94:20:fc:09:92:
b3:06:f7:88:66:e8:af:18:11:d4:e8:c5:4d:4f:e2:
23:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EC:06:9E:E2:80:23:B8:E1:C3:CB:39:FE:67:F8:AD:CC:CE:D6:A5
X509v3 Authority Key Identifier:
keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:6f:ac:9d:49:e9:33:89:4e:ab:6e:cd:4f:9d:5d:30:a5:
f6:08:a9:11:5b:86:c8:12:1d:fd:1d:46:87:d1:2a:1e:ce:c3:
1c:6f:60:d2:fa:0f:8c:a0:3c:c5:04:d3:f8:a2:71:c4:72:ba:
e1:ab:36:83:f7:c8:52:70:24:20:d9:af:f3:9e:81:37:56:6c:
76:fe:fd:be:e8:7c:5d:93:c5:36:e3:bc:14:41:2b:9a:2a:4b:
b3:bd:20:90:6e:07:59:bb:4b:48:d0:5e:15:ec:75:a0:d0:0a:
e2:2d:f7:78:2b:69:d0:65:aa:ad:35:98:a5:39:6d:b4:24:96:
fe:8e:17:ec:4c:fc:9e:e2:f3:f8:6d:6c:86:76:d6:ad:44:1d:
79:58:85:b0:07:6c:85:a4:1a:1d:11:a6:15:20:97:90:0c:6c:
4f:71:5c:d8:6c:e3:7e:79:7b:72:6d:c2:42:d7:4e:e7:6d:81:
c1:1d:44:5b:93:f2:b6:29:01:d5:2f:c9:0f:64:45:fc:c2:ed:
c0:21:55:7e:7d:76:49:4d:1d:8c:e7:1f:83:76:bc:e0:1c:75:
dd:c1:87:b6:10:a2:84:b2:fd:5c:45:93:22:3b:c7:0b:92:dd:
7a:97:49:40:39:24:ed:0b:37:25:57:66:f7:e0:c2:27:b7:75:
79:34:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:33:22 2025 by rpki-client