This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
File: TRThryL1OyL1be8C63LqXda-d-I.mft (raw, json)
Hash identifier: 52kSDledFj97A4oXLoU7XvSwrODeQM/odoFObL8YjtY=
Subject key identifier: 87:6D:5D:7B:BA:A2:3D:A4:CF:BE:6B:7D:12:61:8E:EA:DA:62:6B:ED
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Certificate issuer: /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial: 030F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
Manifest number: 0970
Signing time: Mon 22 Dec 2025 21:47:08 +0000
Manifest this update: Mon 22 Dec 2025 21:47:07 +0000
Manifest next update: Mon 29 Dec 2025 21:47:07 +0000
Files and hashes: 1: TRThryL1OyL1be8C63LqXda-d-I.crl (hash: FX97ky0E8Ua1AOrGQNO59cXRNUER7+b7e508Fmxke/g=)
2: D734CCEA1E0A11EF87335F33C4F9AE02.roa (hash: Zn/90qwbG+0Df96/zQSMkzHyx6xwf0/RZMauir90ZH8=)
3: C93E74B8D19511EEA71C3920C4F9AE02.roa (hash: 5yEwO4ZnTC2CHQn3tYL6GNEeTVAOOIXAZLN/7OfHXIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 783 (0x30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Validity
Not Before: Dec 22 21:47:07 2025 GMT
Not After : Dec 29 21:47:07 2025 GMT
Subject: CN=6949bc5c-b7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d3:ac:27:2e:fe:94:48:dc:a3:50:a1:50:b5:
e2:a1:fc:3f:0d:8c:ee:dd:3d:33:2a:22:1c:60:f6:
57:c1:c8:39:03:80:f5:c8:1c:e4:98:b4:c9:b9:a1:
51:ce:9a:9a:de:ab:6b:10:1b:08:24:f2:c0:a1:63:
9e:71:45:da:6c:82:75:11:35:85:b0:8e:03:f8:5d:
f6:03:04:2e:24:1f:05:1a:8e:fb:b4:3d:8b:0a:e8:
fc:57:84:36:99:32:af:40:02:43:a5:d2:6f:ee:0c:
c4:78:82:84:71:1a:3d:9a:74:df:8c:ba:b9:5c:3e:
2b:48:a0:53:62:d1:3d:6c:9e:28:ad:a3:94:a6:39:
9f:8a:16:16:ef:b6:8f:dd:e5:d5:d3:25:a3:ec:c8:
eb:1c:41:05:2a:2a:40:69:ae:44:28:bd:aa:b6:47:
70:b4:60:94:41:64:ad:97:a2:38:b9:6e:8d:cd:53:
7f:ab:74:64:a0:b0:1f:f4:c1:52:45:20:ef:ce:96:
87:6a:05:2c:94:e5:a9:74:ec:b7:ef:ac:37:8a:40:
1d:53:b6:2f:e0:1a:e5:25:7f:c5:4d:57:a3:63:25:
d2:03:da:cb:60:fe:8a:f8:9f:ed:d3:f4:84:eb:ac:
2e:ae:d8:92:3d:91:3e:da:c3:98:1e:3a:c8:f1:3b:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6D:5D:7B:BA:A2:3D:A4:CF:BE:6B:7D:12:61:8E:EA:DA:62:6B:ED
X509v3 Authority Key Identifier:
keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f2:08:1f:77:8e:c2:bd:db:88:8c:73:52:ca:9e:0f:7c:ec:
9e:30:f9:2b:44:fe:80:3a:bd:c5:59:a5:e2:d0:21:6e:83:d5:
98:f0:82:80:08:b2:59:0a:21:3c:d1:5e:82:3a:19:b4:4a:44:
37:1c:20:90:73:f1:1e:cb:6b:f9:2b:62:45:c3:6b:cf:6b:e1:
42:87:dd:af:f3:51:61:40:bc:7f:10:06:7c:5d:4c:32:55:7a:
9e:da:1d:4e:fb:7a:90:96:11:c7:01:c7:e1:37:72:4d:60:96:
e7:56:b5:43:cb:d0:43:fd:8b:24:9e:79:65:99:1b:b9:c9:33:
e5:eb:59:6d:bc:a8:c3:98:b0:20:6c:77:fb:67:14:b6:ea:f7:
6e:88:ad:ec:77:9d:64:ce:81:be:fa:dd:0a:24:94:6b:bd:1d:
3e:a8:b9:57:83:65:2b:29:05:2c:aa:c7:80:d0:db:49:5a:05:
5a:cc:52:72:ca:d1:d3:03:07:fd:db:70:35:a6:1c:e3:64:a2:
02:14:cf:a4:7e:18:8c:b0:18:e9:ba:f6:f3:16:b6:32:cf:f0:
82:3c:2e:52:a2:f7:a0:13:d3:97:a3:40:f0:f0:84:3b:42:f9:
d1:99:47:74:5d:c0:f5:ab:8f:41:8d:2f:35:f5:74:08:b7:73:
d7:9d:b0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:13:57 2025 by rpki-client