This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
File: Tky0uRUee64RK-xTWcMclVgO4DE.mft (raw, json)
Hash identifier: 1blk0465Q/Nzqg6MfGVwkCeGkXgxoa2+lh5pNiVZvc4=
Subject key identifier: F4:E2:09:07:82:68:E3:98:B1:87:C5:EB:9C:1F:34:5C:B3:67:18:3B
Authority key identifier: 4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
Certificate issuer: /CN=A91609E6/serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Certificate serial: 04C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
Manifest number: 04C0
Signing time: Thu 04 Dec 2025 22:25:02 +0000
Manifest this update: Thu 04 Dec 2025 22:25:01 +0000
Manifest next update: Thu 11 Dec 2025 22:25:01 +0000
Files and hashes: 1: Tky0uRUee64RK-xTWcMclVgO4DE.crl (hash: BDUmq7xkOgDGlVD/ZqrZqyNEZiOiB7F+F4rToch+9ac=)
2: 7B0E744E994111F09D282143C4F9AE02.roa (hash: Cd7XZiHe1qVaHcpx6zxYlqRsLTSHLcGFR7Jjk7pxmLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1222 (0x4c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609E6, serialNumber=4E4CB4B9151E7BAE112BEC5359C31C95580EE031
Validity
Not Before: Dec 4 22:25:01 2025 GMT
Not After : Dec 11 22:25:01 2025 GMT
Subject: CN=69320a3d-4f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:71:b9:89:3c:2c:49:3d:f8:17:46:7d:fd:
ab:2e:8c:5e:1f:d7:2e:43:2c:31:f1:e5:73:5c:13:
fb:2a:b2:1e:e7:23:a5:bb:50:e9:7c:cb:0d:e5:2e:
dc:11:33:52:63:db:36:08:53:83:d9:6b:7f:af:c9:
c6:56:be:a5:e8:4d:6d:92:56:ec:b9:57:8e:47:fa:
d0:ee:51:04:b2:0f:d0:f0:2c:02:32:1f:6b:7d:cd:
82:84:b1:f4:d5:b2:2a:5b:2d:b5:2b:90:62:21:02:
3c:f8:8b:af:c8:3c:20:7f:af:2d:89:f7:46:0d:33:
a6:59:d8:91:a0:58:0e:80:71:a1:b9:4e:a2:e2:1f:
70:42:a5:c3:23:81:4f:05:3b:0b:28:2a:75:86:7c:
1e:b6:89:6d:e4:0c:1d:97:28:fb:56:a2:42:68:ba:
22:71:45:32:09:53:92:dc:f0:66:0d:bb:fb:b0:cf:
66:ab:a6:7f:c0:56:06:30:c8:c5:59:c5:a4:cd:dc:
13:ae:e5:cf:67:97:bb:54:8d:d5:88:19:ed:2f:cd:
b4:17:fd:29:9b:77:67:51:8e:53:d1:3b:5f:07:b7:
f9:ef:fd:75:be:da:40:ff:67:97:b8:9b:43:58:ed:
2b:e8:b5:10:80:0d:c4:b9:6a:a3:71:fe:72:f5:8a:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E2:09:07:82:68:E3:98:B1:87:C5:EB:9C:1F:34:5C:B3:67:18:3B
X509v3 Authority Key Identifier:
keyid:4E:4C:B4:B9:15:1E:7B:AE:11:2B:EC:53:59:C3:1C:95:58:0E:E0:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tky0uRUee64RK-xTWcMclVgO4DE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91609E6/B616C86A4F7711EC9F09456EC4F9AE02/Tky0uRUee64RK-xTWcMclVgO4DE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e1:4a:03:57:3d:c4:22:f9:e5:9d:cb:58:ab:a6:ad:a1:0f:21:
dd:36:3a:3b:cd:78:69:87:25:83:ba:3a:b3:7f:6b:5e:a5:5a:
d4:78:37:b2:33:72:7e:cc:9d:87:8f:7f:b9:2d:e0:08:b9:d5:
75:61:25:c8:cc:41:c3:62:f5:a7:95:27:2a:28:6c:2a:12:da:
d5:67:85:6b:c2:ef:00:e0:23:3a:82:fe:85:ea:08:18:52:fe:
5c:ab:a0:b6:f2:bf:01:6a:f8:96:0f:d6:89:5c:17:ca:19:d5:
e0:ea:0e:bf:72:df:55:a7:f4:6d:bc:fa:6b:b3:31:f2:76:5c:
9c:f6:4d:89:95:74:9d:35:5e:8c:c9:ad:fd:b6:9c:99:01:6d:
20:22:e1:90:bf:c6:1b:4d:65:36:5c:35:a0:7c:1e:08:39:86:
70:1c:af:c1:14:38:f8:02:e6:86:07:46:50:0c:96:d3:d4:46:
87:a3:79:1a:af:0f:61:b5:1a:e9:e7:82:85:13:eb:7c:e7:e6:
67:b9:c3:2b:7f:70:30:25:3f:ca:fc:94:a3:d1:e9:12:eb:3f:
cf:91:3d:25:d3:bd:56:eb:15:ce:62:f6:12:87:f6:a8:7a:8f:
12:96:7a:92:1c:c1:04:e3:c3:fa:22:20:b1:87:65:e3:5b:61:
c7:d6:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:40:15 2025 by rpki-client