This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
File: R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft (raw, json)
Hash identifier: yayow4FeqmBZLLVCqCIlFqyfzY0rlcipJU2Jywk+bUU=
Subject key identifier: 34:A0:84:FF:BC:89:49:FE:2A:85:3C:C4:C4:8F:4B:26:98:2D:A4:C4
Authority key identifier: 47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
Certificate issuer: /CN=A911F753/serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Certificate serial: 57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
Manifest number: 55
Signing time: Fri 05 Dec 2025 04:03:17 +0000
Manifest this update: Fri 05 Dec 2025 04:03:17 +0000
Manifest next update: Fri 12 Dec 2025 04:03:17 +0000
Files and hashes: 1: R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl (hash: FVpTX+OjHbnYpEFa++ckRS3hdBiZMwxOKJDIZ5aTD7o=)
2: 5E34D78AB13A11F08347B23DC4F9AE02.roa (hash: 7VC7xLhtQRTwz/061p8yDCut4qIajVNwZJuM4A7Qe+M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Validity
Not Before: Dec 5 04:03:17 2025 GMT
Not After : Dec 12 04:03:17 2025 GMT
Subject: CN=69325985-d936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:0d:52:a9:64:8b:b1:09:cf:cf:d0:85:70:
ff:a0:de:a5:b8:bd:42:8c:79:44:a5:71:06:58:14:
f6:b5:dc:dc:1a:ed:51:d6:41:16:97:f3:11:55:f7:
17:24:4c:87:46:d7:2f:0e:9c:6a:b2:e5:92:5a:da:
04:6c:4d:40:be:44:3f:ba:3f:61:ea:cd:6f:e2:5f:
0c:56:dd:dc:f2:a8:d4:e7:f3:d2:1a:e1:cd:d9:3f:
da:20:8e:8a:31:72:3b:5a:6d:9c:4f:f6:c4:8b:47:
59:fe:c7:62:c4:4d:a5:56:d9:6f:0f:09:68:f1:2f:
97:b2:eb:64:d1:72:ba:3b:fc:82:23:67:dd:4b:a6:
a1:4a:a1:19:92:5a:88:bc:dc:0e:a0:a0:96:61:f1:
74:03:e2:69:27:c8:8c:15:2f:3c:f8:83:ae:59:c9:
46:3d:03:d0:4d:ba:21:3f:89:f4:84:59:cb:52:db:
f9:de:db:e9:2e:6a:98:ca:ac:15:24:97:af:6a:6b:
bd:dd:d7:b6:d7:72:24:e8:cc:fe:bb:26:86:80:d8:
90:a9:52:7d:17:d8:f1:1b:cd:58:4a:99:ee:ca:ab:
a5:44:b3:19:32:91:a4:c6:5c:23:2c:6c:c2:f9:87:
54:d6:cb:71:e2:bb:7b:17:b1:0a:48:f6:05:af:a8:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A0:84:FF:BC:89:49:FE:2A:85:3C:C4:C4:8F:4B:26:98:2D:A4:C4
X509v3 Authority Key Identifier:
keyid:47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:7f:bb:2c:9b:50:bd:36:6b:9a:44:b4:cf:ce:a1:9a:30:7e:
6c:6e:86:72:41:b8:15:99:3e:86:34:8e:a8:be:8a:6d:8b:64:
fb:fc:49:f0:43:99:73:a0:65:ef:07:7b:3b:0f:e1:b6:95:98:
23:4c:ef:6e:8c:f3:20:dd:b8:53:95:6e:6e:b6:96:e4:5b:1e:
91:c0:fb:21:28:bb:aa:22:f4:08:e0:06:09:81:76:d7:5e:d9:
37:ec:aa:48:df:96:64:e9:6d:d4:84:a4:bf:39:71:c4:fc:70:
b3:48:0f:1f:fc:a2:7b:eb:f7:9f:05:78:a5:1e:9d:50:15:24:
bb:ff:9a:d3:42:9d:45:7f:b2:66:02:35:e5:95:43:81:16:d7:
a9:34:6d:24:09:e4:6d:20:32:d6:9f:5a:dc:3f:12:d9:28:19:
4d:64:fb:64:a5:a3:8f:0e:1c:22:56:a3:b0:3e:d5:08:04:4f:
27:6d:e7:34:80:3d:fb:34:37:cd:6c:87:01:83:eb:e3:de:b0:
e1:16:22:38:be:8b:e4:5a:f0:51:8d:d9:8d:e4:cd:9d:e0:47:
54:3f:3d:83:63:d1:f2:5c:92:83:68:11:bd:fc:49:b4:d4:c1:
ba:5b:ec:a0:1c:51:78:60:c3:2b:ab:7e:01:d8:06:c5:2a:68:
fe:35:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:07 2025 by rpki-client