This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
File: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft (raw, json)
Hash identifier: 8XAnhnZuG+375CkhinWFM1W07t9aIWald01jgLlqwIU=
Subject key identifier: 37:48:7E:AD:B5:66:53:9D:00:6C:09:C0:5C:22:11:80:7F:44:42:EB
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
Manifest number: C3
Signing time: Fri 05 Dec 2025 04:35:41 +0000
Manifest this update: Fri 05 Dec 2025 04:35:41 +0000
Manifest next update: Fri 12 Dec 2025 04:35:41 +0000
Files and hashes: 1: _4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl (hash: gJM0/d26bgk0ApSL0zA0nJ0OE4MN2I8E6LCbsb0r0aI=)
2: 13B46272139511F0BAC02735C4F9AE02.roa (hash: lunzyAvH2WnGuuqjQcMC7tzE6PiUkG2ZqHNZmlQ3Mow=)
3: 0AAD710010B111F0A46DA723C4F9AE02.roa (hash: bk09MGKmA1KtNu/8fLfir0D9n+KVGE5j0LJioJGLi+A=)
4: 71A92448186E11F083760527C4F9AE02.roa (hash: fEhJNoYQsvAhpUWy30zyzhm+f82+0YX6EDfhlwxFPqw=)
5: C4A5B394A86711F0BD0D193DC4F9AE02.roa (hash: EzdO0E9s+3cgAs/ZEX/Wfo2/4xk/HK6LBfwW3sjjoC0=)
6: 95E16734187411F099AC2133C4F9AE02.roa (hash: GF8rCTpf/VJlJeNEZPKA8ehDu40GNOcfTE2tHrOTJPA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Dec 5 04:35:41 2025 GMT
Not After : Dec 12 04:35:41 2025 GMT
Subject: CN=6932611d-22c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:94:dc:2b:c2:25:fe:06:72:22:94:e2:09:
cd:fd:8d:bf:8a:43:a2:a8:7a:eb:bb:cc:e1:76:fa:
b0:6c:2f:f7:f6:da:1a:87:c3:3e:1e:f1:d8:7c:f4:
57:42:71:da:39:42:2d:eb:2e:34:eb:6a:f3:61:df:
03:a4:80:e2:d8:9e:32:e9:f2:62:2d:aa:83:5c:f4:
99:2e:f6:9e:e3:4d:a2:72:fd:d2:16:04:bc:12:33:
b9:b7:91:5e:9a:09:95:c5:71:7d:e4:b1:96:c9:7a:
72:03:e6:b4:b3:f5:b2:fa:5f:73:a6:6a:e7:56:98:
a4:c6:bc:db:d2:cf:10:63:4a:c6:9e:4d:0b:59:ea:
9e:17:ee:db:af:13:a3:c0:b3:f6:27:01:72:8a:f1:
a9:1a:71:d7:b0:e3:1b:c0:89:89:36:55:90:92:a0:
93:d7:43:0d:ee:23:7b:12:f4:21:d4:51:74:15:f6:
04:98:3f:e1:a3:e5:e5:8f:00:0b:d6:20:d6:88:50:
9f:69:83:cb:b2:41:a8:f4:a3:d6:d4:b7:a1:fc:ad:
2a:be:ec:d2:ab:95:4e:62:dd:32:5a:96:2a:86:ea:
e2:6f:6a:8a:9f:7b:e7:47:28:f4:d3:cc:d7:b3:5f:
09:1d:f0:ce:bf:2d:87:6a:f3:1a:77:dd:62:a1:1e:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:48:7E:AD:B5:66:53:9D:00:6C:09:C0:5C:22:11:80:7F:44:42:EB
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:2b:d7:7c:66:31:0d:95:4f:00:bc:0c:10:22:89:ec:a7:
f3:75:63:7e:41:fb:0c:4f:d4:49:16:58:28:87:c5:82:fc:5a:
8e:3f:ac:70:45:e9:4e:48:bb:5c:64:52:ab:90:b8:70:28:97:
f8:86:0c:d2:01:48:03:13:7b:46:97:a3:9e:f1:1f:29:99:3b:
be:ca:ab:cb:fd:cc:c3:a0:79:bb:6d:95:5f:77:53:f6:72:7f:
0b:ef:37:ec:f7:fd:fc:64:b9:4a:ce:13:06:23:61:78:e1:4f:
06:91:22:24:53:e7:44:9c:c6:a2:a2:6b:32:55:d4:b8:56:d3:
b1:ad:55:02:73:3b:1b:3f:e4:23:8d:a4:63:b7:70:69:63:3a:
d1:d8:67:aa:e9:3f:3b:61:2f:c8:e1:00:0d:6e:b4:e5:94:2f:
62:64:e9:d4:7b:da:91:83:cb:07:2a:17:a5:7d:87:10:a4:3a:
85:e5:3e:2a:f1:97:d1:b9:a1:bd:c5:0e:c6:03:d1:73:28:e5:
ec:1d:ab:ae:4e:f4:05:a1:22:62:d9:dc:e9:0d:ba:8b:8b:4a:
6e:c1:fe:f4:6e:fd:ea:1c:8b:73:bd:6e:cb:b0:15:c2:e6:fe:
9e:b4:8c:4c:5d:c2:4f:6b:77:4c:6f:82:cb:ae:cf:e7:c5:af:
94:a1:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:49 2025 by rpki-client