This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
File: 4TxHTdRFcajO9AZpTgStasYbJWY.mft (raw, json)
Hash identifier: OZs8eEnLFkqmyn69KoppkiaJmt4NFpU3teDP1QF5ojc=
Subject key identifier: 9A:B9:0B:DE:79:9B:CC:D9:5A:BE:BF:05:22:26:C1:76:AD:FB:1E:53
Authority key identifier: E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
Certificate issuer: /CN=A919D313/serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
Manifest number: 018F
Signing time: Fri 05 Dec 2025 01:44:37 +0000
Manifest this update: Fri 05 Dec 2025 01:44:36 +0000
Manifest next update: Fri 12 Dec 2025 01:44:36 +0000
Files and hashes: 1: 4TxHTdRFcajO9AZpTgStasYbJWY.crl (hash: hLV/KzOuKJdGwrEDn/x3y/l6fMLlZ7lUzH6LOJox8OE=)
2: 658CF9F2721411EEAC707910C4F9AE02.roa (hash: q+T3C3H2UjoBgZcZ1La6G7C0poZwdj+81El+MVIEtoY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D313, serialNumber=E13C474DD44571A8CEF406694E04AD6AC61B2566
Validity
Not Before: Dec 5 01:44:36 2025 GMT
Not After : Dec 12 01:44:36 2025 GMT
Subject: CN=69323905-99ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:3f:50:28:41:fb:72:01:87:b9:98:12:c3:
37:60:c3:3c:8a:ba:fc:77:fd:86:64:fd:19:12:44:
94:27:c2:67:f5:c3:49:2c:cc:23:da:ec:52:8d:d1:
1e:40:88:d7:ee:99:4e:fe:ba:c4:41:5e:8b:8b:d4:
da:1b:39:d3:2c:3d:9b:09:bf:99:3b:c8:f7:aa:b6:
96:78:a6:df:4c:4d:5f:8d:5e:8b:35:48:07:4c:a5:
5f:69:42:bd:6c:51:d8:29:7a:0f:93:f9:57:cd:c8:
58:f9:63:1d:0a:83:e7:2e:03:01:be:b3:9f:f9:3f:
97:77:c3:83:f3:57:b8:49:fd:0e:27:06:b9:32:a8:
eb:ee:ba:8e:e6:bd:25:21:01:64:29:84:ee:0b:14:
e8:c5:56:14:7f:cc:11:8c:ca:3b:e6:af:70:b1:9e:
97:20:4e:8d:00:0e:86:8a:92:17:04:d2:ed:51:65:
e0:23:fd:e1:2d:e0:b9:e7:2b:2b:e1:81:05:b7:ab:
91:4c:3c:f4:76:59:83:bd:cd:94:44:b3:38:fa:ce:
51:f9:79:e1:2b:dd:20:8f:06:51:59:a2:68:8c:3c:
2a:77:cb:a2:5c:bd:52:e9:79:19:d2:63:20:8b:5d:
5c:78:f7:c1:2f:29:2b:08:1d:de:93:85:65:4f:da:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B9:0B:DE:79:9B:CC:D9:5A:BE:BF:05:22:26:C1:76:AD:FB:1E:53
X509v3 Authority Key Identifier:
keyid:E1:3C:47:4D:D4:45:71:A8:CE:F4:06:69:4E:04:AD:6A:C6:1B:25:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4TxHTdRFcajO9AZpTgStasYbJWY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D313/0F2079766EF511EE84DA6982C4F9AE02/4TxHTdRFcajO9AZpTgStasYbJWY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:5c:bb:39:45:34:29:3f:37:1e:92:ff:6b:f9:4b:64:e4:39:
b9:34:8e:dc:ff:63:44:03:69:6b:7a:0a:5d:9a:51:07:8b:4b:
2f:0d:96:10:5d:dd:e8:61:42:dd:f3:dd:a4:5e:b1:4b:7c:ec:
66:e6:d5:80:f2:98:89:6a:71:b7:29:74:6c:b4:1c:a2:7e:f9:
ef:93:18:20:7c:73:75:48:d1:67:5c:aa:72:26:56:a7:43:ff:
91:50:2f:32:ac:b6:a5:1c:3b:fc:f4:d3:c4:02:20:bd:9a:b8:
fb:ec:c0:49:ba:86:cf:5e:b7:0e:6a:4a:fd:88:f5:16:4e:31:
76:e2:24:f9:e0:84:5e:ec:85:24:82:e2:c7:52:3b:16:a3:6a:
28:0c:af:fe:db:ea:ee:83:79:5a:8f:f8:3c:dd:b6:0f:04:ce:
a3:06:35:30:cd:af:e1:c3:4a:dd:f9:b6:54:ae:e5:f6:10:9d:
88:33:e9:da:e6:25:e5:ab:54:d6:d6:c6:b3:52:10:49:37:d2:
cb:65:1a:91:e5:67:17:63:70:66:d5:77:c5:16:bc:fd:4c:6d:
10:fa:26:42:e1:7e:53:cb:c1:15:76:2d:15:13:db:5b:84:99:
37:41:28:e8:2b:05:ee:a3:aa:41:16:1a:7e:c6:bf:0a:6b:61:
a7:67:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:58 2025 by rpki-client