This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
File: 4Loijq-YEvBn0v87-AaJVpjJOXc.mft (raw, json)
Hash identifier: WscMkPUGiABYzxxCUqyys21acvw/FaTfaUMrjUnmZPw=
Subject key identifier: 77:6D:25:47:E1:56:D5:30:B0:56:AD:62:07:C0:43:7B:A7:56:FD:C3
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial: 0700
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
Manifest number: 06A1
Signing time: Thu 04 Dec 2025 21:26:04 +0000
Manifest this update: Thu 04 Dec 2025 21:26:04 +0000
Manifest next update: Thu 11 Dec 2025 21:26:04 +0000
Files and hashes: 1: 4Loijq-YEvBn0v87-AaJVpjJOXc.crl (hash: TWNmL7dWRdma9liRctesGw1qtKionZYqVQixwVsbFrI=)
2: 5D81DB7C51B611ECA674F080C4F9AE02.roa (hash: P2a+kPtjJ6yhmcNIHbs+Vm7Ygg7MHd+sRsHHDgTnLWA=)
3: D396006E251C11EEAB8BE444C4F9AE02.roa (hash: aw/mMcLGZFpDDulSaY/b/FllgryrbPv9l31A9Fqr2ho=)
4: B91AACE86C8A11EEA934912FC4F9AE02.roa (hash: 2i7Zy6YTNDUm3q2k9+7q5qaY4ohOTEgm7A4bQdJMwCc=)
5: D304973AC1E011EE81429B3EC4F9AE02.roa (hash: 9FIxKZess48cgYzpbCKgWUSjt13PFUPPV98OXdhIeTg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:26:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792 (0x700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164D60, serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Validity
Not Before: Dec 4 21:26:04 2025 GMT
Not After : Dec 11 21:26:04 2025 GMT
Subject: CN=6931fc6c-2f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:61:21:0d:c6:75:83:31:f5:27:15:61:01:c1:
ed:ed:28:db:05:87:88:42:d8:e5:ba:20:42:11:80:
8e:70:2b:15:0d:ea:56:fc:ab:1f:80:a4:9a:80:19:
3f:cc:f5:35:76:70:c0:30:8d:d7:13:6c:d2:5a:bd:
fe:b9:30:93:7a:70:07:8e:9f:ee:a8:96:41:7f:30:
d7:de:4e:94:25:86:a0:f9:98:17:42:c3:fc:9a:42:
56:56:0e:45:19:9b:ab:f7:a9:6b:65:d9:3f:bf:b8:
84:7a:ef:2a:90:58:d8:4a:51:95:6a:05:5e:b1:9d:
00:37:26:0e:98:11:d6:20:07:e2:e4:21:ba:a3:60:
bf:92:dc:d2:bb:5f:7b:e2:3b:aa:17:5b:e3:39:04:
3f:a1:28:32:d9:76:4b:28:ab:15:02:2a:58:cd:33:
9c:15:08:90:e0:d5:b9:c2:b6:71:b0:e0:35:7f:a1:
c8:22:ee:36:64:c7:48:73:42:1d:13:4e:89:5c:7e:
b2:ac:e8:bd:90:06:da:0d:79:e6:cd:6b:b8:f3:6c:
e6:94:35:4a:bd:05:3b:ab:6d:cc:50:82:3f:4b:26:
99:9a:fa:a5:8f:8a:dc:fe:3c:8b:8c:17:1c:3b:5c:
fe:c6:b4:48:8e:2d:87:6f:f5:ba:92:d0:c9:31:bc:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6D:25:47:E1:56:D5:30:B0:56:AD:62:07:C0:43:7B:A7:56:FD:C3
X509v3 Authority Key Identifier:
keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:96:76:06:54:98:eb:c9:62:5f:a7:07:fb:38:ca:8e:82:77:
b7:4f:dc:b3:b5:f5:e1:b0:0a:c9:36:4f:ac:88:f4:91:6c:c1:
2d:4b:00:ed:92:ad:75:b3:fc:ef:83:47:59:4b:5c:56:38:80:
fd:aa:d3:4a:32:a4:15:04:be:36:e7:b2:c6:1f:09:bc:8e:86:
77:ca:cc:6f:0b:5b:7f:3e:de:8e:d7:84:49:22:ac:8e:ab:b4:
f4:59:d8:ef:b5:4d:6e:83:c4:a4:1b:f1:da:9a:a9:0d:31:6c:
2b:60:bc:e7:cf:c8:ec:68:c2:e3:7c:a1:68:66:a6:40:f1:14:
3d:81:6b:5b:0a:82:1e:f7:4b:67:17:80:f2:79:e9:00:c0:3b:
cc:72:25:87:79:59:7a:5e:84:d6:20:ce:b6:81:c7:8f:3f:4e:
ea:91:c8:1e:7f:75:6a:fd:70:c1:eb:8f:9c:25:6e:d5:72:77:
44:7a:af:d9:3c:58:b0:d8:60:21:b8:5e:7a:ac:bc:0e:ec:d2:
eb:db:d1:7d:48:83:9c:7a:07:9e:4a:a8:d9:d5:f0:79:e4:01:
9a:b7:b3:5c:27:c2:80:34:2b:8b:d9:50:37:54:84:34:00:a8:
a9:60:cc:00:a5:95:ae:1f:31:d3:59:03:57:37:18:c6:ed:a0:
6e:d9:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:36 2025 by rpki-client