This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
File: xgN4bVWpBBJOdZLu0ome9XiSEQA.mft (raw, json)
Hash identifier: Ufg7wr0bguWUt71BMzCHWNbjr3nM1I84qNbb0wQcyK0=
Subject key identifier: 7F:02:B0:63:EC:AF:6E:1E:DE:02:84:A5:54:5C:94:C0:41:33:6B:A6
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7DE0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
Manifest number: 4891
Signing time: Thu 04 Dec 2025 16:37:06 +0000
Manifest this update: Thu 04 Dec 2025 16:37:05 +0000
Manifest next update: Thu 11 Dec 2025 16:37:05 +0000
Files and hashes: 1: xgN4bVWpBBJOdZLu0ome9XiSEQA.crl (hash: JKQvtCYpVQP/IYcHHpKTvCmD1AFv57d3oJTsbhDc0Z0=)
2: C6EB4BB695C411EFB4437E46C4F9AE02.roa (hash: gt0aztJNpVc6KyHHIu4zVZe5pduw/IDthduLAxbDEGo=)
3: 51DB195AACA011E8BA30FF16C4F9AE02.roa (hash: D+6z2UE89EEz0CJ5FsX6HX4bJl6z6qhGqxMwgCKoLK8=)
4: 596D48ACC17311EAB16B1912C4F9AE02.roa (hash: vQkkHhe44jmvD4H+y1zHy/eVtFXiwqeEyiEpP2p2y/4=)
5: A160BBAEC17711EABFFC9E1FC4F9AE02.roa (hash: +X9cqy5nzsM4rL9d9VoTaGOa9uOReDyvmQJrwlCmxzo=)
6: 0F7F7F6A072311ED8067812FC4F9AE02.roa (hash: RUuXRFdsOwvKWwq9m+sHFH3M/ghjA85wtgfcZdC1dGw=)
7: 5079D4A2ACA011E8BA30FF16C4F9AE02.roa (hash: iaZWlKC0BRK6sTPEnHrhdlX9WtoZdkozdrPT67pGJDY=)
8: A2696B18D16C11EA8886BE5DC4F9AE02.roa (hash: L+xwzjXtQzYgvG+vHsmiVYE6Ewfl0oVoDgfwzY5pwN8=)
9: 1ACCB31CCA2011EEAAE0BC1DC4F9AE02.roa (hash: YJSyg7QmXDp0BYbgvJF4Ri7C1eahVBb5r1mM5QY6K6M=)
10: 0526730C2C4811EEAC2E4D46C4F9AE02.roa (hash: sO+0Vdvls9ZYR5Dlw5L5vQENPT3Y8xAMCjDslvaGngI=)
11: 638483FACB0911F0AF79E43DC4F9AE02.roa (hash: pIZq+mgsQzLzCQRGUuLSGhuDwtg0YRuP5PHB+QGFpf0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32224 (0x7de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D, serialNumber=C603786D55A904124E7592EED2899EF578921100
Validity
Not Before: Dec 4 16:37:05 2025 GMT
Not After : Dec 11 16:37:05 2025 GMT
Subject: CN=6931b8b1-f4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:ec:99:2b:93:ce:62:f2:fd:20:e7:20:12:
a1:01:d3:fa:00:05:42:08:49:b8:31:01:7a:54:c4:
37:04:7a:70:b3:8d:35:ec:69:b9:73:93:bf:a5:4b:
31:c8:7b:a3:ff:ec:2f:53:b8:fa:9c:11:28:88:5c:
83:77:28:a2:e8:89:08:e1:a1:d8:64:ac:03:40:0b:
80:c6:4b:c0:7a:14:e0:81:56:88:8f:c6:a9:8f:ca:
2d:80:13:88:60:61:41:19:fb:13:ad:03:ab:66:2f:
93:cc:8f:34:22:70:a5:39:cd:31:55:76:71:54:78:
a6:f1:6e:c8:6b:6b:2b:0c:b1:76:46:a2:af:a4:99:
8d:d6:9d:ab:60:18:62:a5:aa:b6:d0:ac:e7:a9:e4:
79:98:65:fd:c6:ab:bb:92:9a:b2:e9:b4:cf:bd:e7:
74:6b:28:63:fa:82:26:d0:fd:44:72:5b:e0:62:05:
dd:1a:d2:98:a6:19:3c:65:f5:16:01:f7:f1:a7:af:
41:5b:ad:07:b0:60:5d:02:88:ea:b1:e8:ef:b4:59:
ae:83:3c:93:dd:4d:28:3c:88:ed:26:03:34:b5:73:
de:32:dc:5d:24:c0:f4:6b:e0:44:b4:43:fb:68:9b:
39:3e:d9:7f:e4:8c:53:3b:d2:0e:a9:c1:87:bb:bd:
47:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:B0:63:EC:AF:6E:1E:DE:02:84:A5:54:5C:94:C0:41:33:6B:A6
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e5:a9:00:ec:24:5e:11:a2:f4:00:49:d2:bd:32:8c:0c:82:
3d:bd:65:da:32:b4:f3:ab:58:21:9c:bf:68:2f:99:ed:16:0d:
5c:6b:7a:5c:d7:56:bb:46:77:5f:ef:dd:2a:e4:7c:b1:40:ec:
46:b8:72:ae:d0:35:ff:38:ef:35:1d:db:de:79:4a:47:7e:67:
36:4e:96:f3:3c:f0:4e:5d:84:aa:1f:7a:6e:30:c5:59:2d:62:
d3:4e:10:99:6c:4b:00:b0:71:d6:e1:45:81:29:8d:2b:75:21:
73:af:a5:79:bb:11:8e:e2:46:04:4c:36:1c:9b:83:6d:3e:b3:
52:a4:5a:68:64:e7:6a:41:3f:3f:dd:75:c1:98:15:af:51:e9:
ed:ac:99:d6:f8:04:60:76:88:1c:4c:67:5e:29:a9:20:e7:d6:
e2:38:00:02:cb:d8:2c:da:3e:6c:59:74:b3:ff:22:23:31:c1:
ec:59:b1:9f:41:b5:ba:d6:81:9f:8d:5b:de:b0:df:de:93:0e:
d9:c8:e1:15:34:c7:53:52:27:9d:fc:51:9b:67:4a:03:6b:d2:
06:0b:f2:38:e9:fa:17:e7:66:46:ac:3a:f0:b6:0a:a2:7f:4d:
bc:69:81:6e:c9:10:ed:ca:16:fa:8c:58:8f:32:ee:1c:48:f7:
74:56:d4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:18:52 2025 by rpki-client