This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json)
Hash identifier: hFwlKaE8nObdR/BP+6gEwIvey/hf5bxx4WPRRrR90eY=
Subject key identifier: 69:17:47:06:CA:AB:E7:50:5C:0E:87:83:CD:71:E5:1D:EE:B3:95:22
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial: 1864
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
Manifest number: 185B
Signing time: Sat 06 Dec 2025 16:07:19 +0000
Manifest this update: Sat 06 Dec 2025 16:07:19 +0000
Manifest next update: Sat 13 Dec 2025 16:07:19 +0000
Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: lOzelocNHgwLqgBZXdXJiKVozT96B41P/1c80pWIulA=)
2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: 10aXr/v+1/g6rLOfgsT16qisBW6bzI99/6nvUNzz75M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6244 (0x1864)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Validity
Not Before: Dec 6 16:07:19 2025 GMT
Not After : Dec 13 16:07:19 2025 GMT
Subject: CN=693454b7-c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:d8:a7:f3:51:f1:69:a4:52:0b:08:ce:b0:
0d:33:26:ba:31:f7:f0:81:98:b6:b5:ac:4d:02:fc:
de:85:fd:20:25:2b:3d:74:01:a4:a1:24:f3:87:6d:
aa:1b:29:fe:7b:e6:33:f5:ba:27:0b:ee:29:74:fb:
dd:25:1b:73:82:f3:78:55:a0:c2:e4:99:7d:af:d1:
a9:a5:2a:14:90:f6:cb:6c:40:04:b8:cb:bf:d0:30:
76:4a:72:9c:f8:2f:32:1a:c6:28:3c:3e:85:f7:68:
2a:51:f3:ae:a4:c5:80:5b:ac:46:1a:4c:a5:6a:9e:
ae:61:95:fc:2a:e8:66:95:30:e7:69:1d:24:4e:fb:
53:e7:f3:f1:2d:bd:41:f9:07:b2:73:f5:8f:23:6f:
e0:bf:5c:a2:d8:3d:ac:4a:77:68:6e:9d:15:b1:2c:
24:86:3b:72:56:4b:b9:27:42:7d:44:1e:a8:16:8a:
51:3a:1d:43:ee:d5:d5:4a:fc:f0:5f:67:01:62:2f:
47:f8:a0:ad:b2:02:85:7f:21:90:e6:20:c0:04:f2:
16:b9:c8:11:e8:df:bc:fa:bb:6d:2f:8c:4a:8d:0c:
e8:1d:d8:ed:f5:d9:79:cb:0f:7c:2a:57:a0:fa:03:
10:39:a1:ae:ce:52:fc:67:23:4d:cc:54:f3:e2:ae:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:17:47:06:CA:AB:E7:50:5C:0E:87:83:CD:71:E5:1D:EE:B3:95:22
X509v3 Authority Key Identifier:
keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:4b:cb:c6:15:82:b0:9a:9f:0b:db:05:77:57:bb:f5:f7:e4:
7b:13:49:d1:fb:4c:f3:e2:9a:a6:6b:0f:61:84:96:6c:79:05:
47:55:58:ad:b4:b3:05:fc:eb:1a:1d:f2:e9:6d:15:d4:38:75:
6c:01:0f:b1:4a:f0:a6:98:54:bc:df:20:73:2d:b0:f0:c8:96:
c8:81:a1:74:98:9e:80:7d:e9:34:7a:35:07:cc:8a:9a:39:2f:
59:7b:77:e3:e3:8f:a8:bb:78:7c:b7:ce:0b:e2:23:07:04:53:
39:2d:7c:b8:bf:f9:8d:b8:3f:7c:49:ee:4a:34:f3:38:ba:c0:
88:4b:9a:01:db:b5:62:89:f6:db:88:5c:3c:8f:a1:60:3a:a8:
8e:b4:6d:86:fe:1a:31:37:97:a8:fa:2c:74:60:f2:9e:a6:ad:
85:18:d4:4f:8e:6e:c5:3c:3c:c2:d4:10:60:41:36:13:79:90:
89:f8:19:5c:60:7e:f0:c7:27:d4:97:aa:5b:de:e5:7a:9f:21:
e6:0e:ca:ad:c7:bf:e9:76:59:05:19:19:ea:d1:8e:9c:25:80:
dc:8b:b7:f9:8c:1c:d2:86:ea:f0:d7:56:22:28:68:31:a2:50:
91:74:b7:24:1f:a2:a0:25:66:f5:da:36:ca:23:e4:e0:f3:7b:
7b:75:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 02:52:39 2025 by rpki-client