This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
File: aBiEwMdVflJu8rxNHlq8M2rif54.mft (raw, json)
Hash identifier: V7eIA+sGGO9ZSkKVTCuw2TPDEb7iIBMqEKQkS3h/PIQ=
Subject key identifier: 53:71:0A:44:B4:80:10:70:A0:3E:0A:AA:17:4F:9B:46:C1:6F:5D:AA
Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Certificate serial: 06C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
Manifest number: 06C1
Signing time: Mon 22 Dec 2025 21:27:18 +0000
Manifest this update: Mon 22 Dec 2025 21:27:18 +0000
Manifest next update: Mon 29 Dec 2025 21:27:18 +0000
Files and hashes: 1: aBiEwMdVflJu8rxNHlq8M2rif54.crl (hash: gIHDX+AOjN5JRf/p/D6Ai4pAeguCdJIigiafXQlhQu8=)
2: 9BC411EEA03F11F094CBF530C4F9AE02.roa (hash: WA/tDmga3l8gZvc4ZjpwlBlP3nDfqhnwsfFvTM1otOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:27:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1737 (0x6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9605, serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E
Validity
Not Before: Dec 22 21:27:18 2025 GMT
Not After : Dec 29 21:27:18 2025 GMT
Subject: CN=6949b7b6-aca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:90:34:de:61:50:c6:18:46:63:25:62:7e:
0a:d1:34:10:34:e1:e3:6f:8b:95:fe:be:0a:47:2c:
f6:42:76:31:b8:01:c3:62:b0:5c:21:24:fb:3a:ea:
23:9c:1d:db:86:f9:54:6f:78:ed:80:16:fb:85:bf:
78:51:8d:66:62:48:a6:6a:a3:43:8a:5a:0f:7e:30:
fd:36:32:7f:fa:eb:3a:09:34:a6:46:d4:3c:db:da:
67:7a:ae:0c:b9:db:fb:89:03:e4:e7:1e:1a:9c:04:
96:a3:a1:74:ec:0b:03:32:34:1a:1f:25:6c:71:27:
f5:da:15:b8:39:6d:7b:6f:e5:66:d0:5e:82:20:56:
07:4a:35:8c:40:ab:6e:d1:eb:80:e2:8e:0e:b5:2d:
f1:c9:dd:3d:98:55:9d:a3:a6:98:d0:a5:7d:94:62:
0f:86:26:01:b3:6c:3c:e3:a2:02:a7:cc:e1:7d:f5:
42:a3:d0:9b:4d:46:82:23:bc:e1:12:5c:ce:a0:17:
f6:08:94:57:6b:47:c9:65:c6:a6:db:c7:85:f5:b3:
93:be:4a:c6:09:de:32:a8:66:ad:5e:f6:f5:7c:45:
7e:06:4c:b9:00:b8:a1:7d:44:7c:d3:e0:c7:14:28:
ce:b5:65:b1:e7:a8:f3:54:d0:32:52:c6:9f:52:f1:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:0A:44:B4:80:10:70:A0:3E:0A:AA:17:4F:9B:46:C1:6F:5D:AA
X509v3 Authority Key Identifier:
keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:32:39:52:47:5d:6a:5b:e6:14:a6:40:51:cf:b0:9f:c8:20:
ef:f0:65:6e:58:1d:bb:68:3b:f7:2a:3f:19:11:e9:3d:70:0f:
23:39:9d:8d:65:b0:9c:d6:3e:f6:0c:81:87:2f:89:d1:0e:35:
a6:34:bf:08:85:e7:64:e0:ea:93:6e:03:10:15:31:19:38:12:
2c:c2:b2:f1:3b:e8:a9:7b:c6:0d:73:f6:bb:4f:ba:ac:70:66:
df:0f:1a:c0:f7:9b:c1:7e:15:9f:b5:b7:47:6f:66:6e:6e:29:
ae:b1:65:ab:01:13:b6:b3:a5:f8:4f:db:04:18:0d:6f:ca:47:
67:22:b9:e7:46:6d:ac:8d:bf:05:dd:f9:d0:c1:8c:1f:10:71:
0b:ef:89:31:9a:1d:02:34:63:88:10:76:99:d6:46:99:57:c3:
06:ca:77:2d:da:6b:b6:6a:4e:80:ea:45:c2:69:4d:10:5f:05:
27:ea:db:18:fd:e5:3a:77:db:06:f8:eb:31:bf:5b:1f:60:b4:
97:5f:c6:df:9c:20:ea:af:36:c4:cf:67:15:19:98:b4:c5:28:
81:9c:e7:6c:2d:0c:60:47:93:9c:5f:d7:d8:51:99:be:ed:7a:
39:87:ce:b2:e3:08:69:fd:aa:cb:07:39:37:ed:dc:d5:92:bf:
53:0d:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:51 2025 by rpki-client