This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
File: AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft (raw, json)
Hash identifier: J6dK0F+lZH9gp//tywdRZ9J4IC9Sx0RugXUiHte1WGo=
Subject key identifier: ED:08:04:D2:09:77:9A:8A:C2:14:91:6C:63:ED:BD:BE:55:21:68:55
Authority key identifier: 00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
Certificate issuer: /CN=A91FFBAF/serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Certificate serial: 0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
Manifest number: 0A
Signing time: Wed 03 Dec 2025 06:09:41 +0000
Manifest this update: Wed 03 Dec 2025 06:09:40 +0000
Manifest next update: Wed 10 Dec 2025 06:09:40 +0000
Files and hashes: 1: AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl (hash: /QW25pEtiB/Sm8FUpH4VqDqoooBFPu/LdCTXVTzhgPg=)
2: C7200E0EC37D11F09171F578C4F9AE02.roa (hash: LJ7UDn6IIkcbGD6zUISagJkWCJY/fIVXp/q52OKMMBM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:09:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FFBAF, serialNumber=00AF60185D1FB9A08A58B77EF40481AC380AF1B1
Validity
Not Before: Dec 3 06:09:40 2025 GMT
Not After : Dec 10 06:09:40 2025 GMT
Subject: CN=692fd424-6198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:82:de:e3:3c:25:b9:b1:b9:19:dd:7c:00:
d0:8f:f5:65:05:ea:9f:2d:28:5c:6b:03:4c:3c:a5:
5a:e5:45:47:12:70:6f:0f:1f:47:01:af:2c:01:fb:
82:a7:c2:85:6c:de:51:f4:c2:4e:37:4e:41:9e:48:
e6:3a:a6:92:ad:e8:7c:f7:a7:5d:33:cc:be:35:0f:
7d:0f:7d:ce:33:15:89:9d:34:9c:ba:a2:c4:0f:a1:
01:fc:27:45:e6:a3:e4:a1:b9:4a:63:58:b4:e6:01:
e5:54:29:79:47:09:57:40:d5:61:2a:d6:a3:d5:fb:
aa:83:59:87:f6:83:12:3f:45:94:dd:c0:8d:df:84:
16:ad:5a:27:b7:46:4d:98:3b:8a:91:4e:bf:10:53:
c2:04:66:65:c4:f2:9a:47:6c:9a:ee:0d:67:77:c1:
4c:db:8a:e8:db:97:9e:f4:d3:c8:e5:2c:55:c3:cb:
46:98:18:bb:e7:5d:0d:df:3e:86:b8:44:09:46:d1:
56:26:00:fa:06:cd:fa:5c:d1:82:1b:45:2d:aa:0c:
e0:36:4f:e6:ad:d6:a9:7f:07:b9:58:03:be:a2:81:
5c:bd:d3:99:34:82:2b:95:09:f9:ba:c0:2d:d5:aa:
b6:e3:18:c8:d5:d6:96:3f:05:f2:1f:92:ac:3d:f0:
b3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:08:04:D2:09:77:9A:8A:C2:14:91:6C:63:ED:BD:BE:55:21:68:55
X509v3 Authority Key Identifier:
keyid:00:AF:60:18:5D:1F:B9:A0:8A:58:B7:7E:F4:04:81:AC:38:0A:F1:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AK9gGF0fuaCKWLd-9ASBrDgK8bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/70FCA772C37C11F0B518A532C4F9AE02/AK9gGF0fuaCKWLd-9ASBrDgK8bE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6d:f3:2b:33:b6:80:5d:87:3b:6b:a4:da:fb:ac:ab:c4:be:
5f:6f:77:b9:d9:4c:9e:64:03:85:99:ca:70:fd:82:53:71:98:
9f:9f:0a:e8:16:39:8f:72:ff:05:d9:2d:ae:b0:64:bb:2f:b6:
84:f3:f2:27:c6:d0:8f:4a:86:d7:17:40:3b:38:25:41:9d:74:
0c:dc:60:13:c9:c2:71:67:5b:5c:8e:b5:94:85:b5:40:76:d6:
a5:a2:91:fb:8b:46:b7:3f:9c:38:55:b9:45:ff:13:86:2f:94:
e4:d2:a5:38:8c:d7:91:77:73:e2:a4:61:e2:9c:86:41:af:76:
83:87:a7:d3:07:9c:10:04:9e:58:fb:00:10:e9:99:cb:be:00:
56:b1:b7:73:ed:00:bf:74:3c:c2:8b:04:bf:46:40:e6:62:91:
00:c9:fd:a4:ef:4a:af:c7:3a:9f:4d:01:46:2b:3d:e2:19:79:
76:c4:91:5e:d6:74:b9:39:67:a7:0c:15:cd:42:54:f6:a7:3c:
5f:99:81:09:4d:b3:ad:ec:78:09:c7:19:46:cc:2f:06:21:62:
72:43:0a:65:8f:f2:eb:c0:75:d3:e7:2d:3f:e2:cc:57:94:dd:
09:32:27:1e:9b:50:a7:bb:1d:a4:e4:6f:23:97:26:74:ff:4e:
5f:58:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:49:13 2025 by rpki-client