This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: p97kXf/LK4X2Sein6ZtyMx2TOaeco8+aGAZ3KMOvJ00=
Subject key identifier: 40:B6:70:65:CE:63:54:4F:F3:58:73:64:8E:45:EA:9D:6C:41:C6:88
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 0805
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 07FD
Signing time: Sat 06 Dec 2025 20:08:26 +0000
Manifest this update: Sat 06 Dec 2025 20:08:26 +0000
Manifest next update: Sat 13 Dec 2025 20:08:26 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: 7nrUZ94wA8gkIA5KOQVjKgDZtQbK5XG5PqIGsp5NZcc=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: pUsMoQNYddbaBRncCe385CofEgc91nu8PjnLEgH0J9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Dec 6 20:08:26 2025 GMT
Not After : Dec 13 20:08:26 2025 GMT
Subject: CN=69348d3a-27a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:47:40:26:ef:21:94:04:35:73:cf:9e:80:
a5:89:99:7d:7b:f3:82:46:41:42:43:f5:f7:4d:0f:
5d:de:69:6a:ef:d5:b6:b5:97:1c:11:12:4c:d1:bc:
46:6d:2a:4f:93:24:29:3a:60:67:cc:56:70:a5:57:
33:2c:11:54:f3:c3:38:2b:ca:0f:54:91:ff:30:78:
8f:b6:b2:f1:14:32:7d:a1:74:77:f7:f8:45:d9:fb:
d2:0d:9c:52:ee:ab:7c:42:12:cf:8e:bf:24:e2:45:
0d:56:1e:72:f1:a4:26:9e:a4:74:9c:7d:a7:62:88:
45:bd:d2:7f:d6:8c:e4:9e:3c:16:57:fc:d8:bf:d3:
d4:11:71:0d:6b:67:5f:c3:bc:b1:6f:a1:5c:a6:19:
a8:d4:0f:35:b8:1b:a9:08:55:c4:bc:71:22:75:07:
73:72:1c:c6:84:b2:94:7b:94:86:e1:ec:da:41:e1:
93:b1:ce:78:9d:37:41:d7:11:0a:c1:7a:87:a3:12:
f0:f4:da:8c:a6:57:5c:45:6c:82:56:77:7a:87:9b:
45:15:56:f0:72:b7:9d:37:ba:8f:59:67:16:ef:fa:
57:98:f3:9d:64:5c:97:89:41:05:42:cd:e3:8a:3a:
ec:c3:1c:4d:86:5c:3e:5e:0d:65:4e:6f:59:6c:fb:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:70:65:CE:63:54:4F:F3:58:73:64:8E:45:EA:9D:6C:41:C6:88
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:61:cf:f4:a9:46:5f:77:fc:92:e9:49:75:01:ce:9c:c4:17:
06:cd:90:dc:fb:f2:7d:37:30:0b:aa:00:32:32:a7:c6:64:7d:
58:37:0c:69:7d:97:37:d2:68:24:cf:61:63:60:0d:53:2e:66:
cb:d7:d2:6e:07:4e:6d:65:5b:96:d6:2c:91:27:7a:10:a1:bd:
89:18:9e:63:c3:dc:72:99:95:5a:1a:c9:1c:0d:21:84:f7:84:
11:38:e3:52:15:7c:94:68:90:4b:73:1a:3a:1b:8e:42:30:b9:
49:9a:33:23:1c:72:00:0a:bb:0a:19:8c:75:ca:1d:2f:aa:e0:
38:04:a8:c8:dc:c1:87:b1:4c:0b:7b:8b:24:5c:8f:b0:ab:90:
26:81:9b:8d:48:07:d9:b7:24:b5:fd:e5:d8:75:35:1e:f0:e6:
fe:3c:f1:ff:22:f6:06:92:de:8d:27:d2:cc:fa:4a:e3:d8:28:
35:34:d7:3d:d6:b8:d6:aa:65:f2:21:d5:d0:d7:f7:cd:6a:11:
fa:ce:79:e3:bb:a5:dd:ec:48:55:09:4b:8c:be:de:3e:f4:6b:
69:f0:96:17:02:a2:8a:95:a5:f5:5c:4b:6d:49:ef:d3:61:38:
2a:e1:35:bc:bc:3f:32:b1:c0:10:a9:ed:a8:d5:3a:9a:4e:97:
ff:2b:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:36 2025 by rpki-client