This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: A4/4AfWc9pqFGVr60MxPEisZHwxV7btmTjS9S+u+M8g=
Subject key identifier: EB:EF:EC:CE:11:09:6C:71:50:82:51:AB:D3:07:D1:79:EB:E8:4C:23
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 2486
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 479F
Signing time: Thu 04 Dec 2025 15:35:27 +0000
Manifest this update: Thu 04 Dec 2025 15:35:27 +0000
Manifest next update: Thu 11 Dec 2025 15:35:27 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: 3ltOYkwz69S3fj8LrUdIHqMDptJHnOb9oNMY/cEfOqQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:35:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9350 (0x2486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Validity
Not Before: Dec 4 15:35:27 2025 GMT
Not After : Dec 11 15:35:27 2025 GMT
Subject: CN=6931aa3f-27e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:83:1d:ab:cc:74:7f:08:ed:62:6d:a9:9f:
03:01:ea:16:25:96:a6:7b:5d:07:3c:70:5c:b2:71:
f7:5c:70:8a:f1:66:90:72:ec:e3:ce:6b:76:5b:28:
c7:93:7d:9e:5e:6e:57:67:64:b2:19:d1:b4:90:86:
37:c0:f2:64:4d:51:f9:8e:22:6c:67:23:7c:6d:91:
c3:2e:f5:6c:11:6d:e5:d3:e7:a1:59:39:e1:38:bd:
82:83:14:ef:9f:2a:10:b1:fb:67:02:1e:b9:8a:1e:
86:ab:8c:bd:cf:e6:7e:8b:99:41:79:cf:62:59:0d:
8b:8c:be:b1:d2:87:dc:5f:21:06:a0:d8:af:b5:54:
22:10:7c:36:31:8c:7b:04:e6:90:1d:89:70:93:c2:
f7:0a:ab:f0:31:59:94:46:9c:4c:51:a3:9c:2f:c7:
9f:d6:1b:cc:05:13:22:28:1b:0f:4b:66:c1:8b:4d:
d0:2b:c8:b3:1c:41:10:14:ae:5f:57:b5:eb:20:40:
72:42:cc:16:f1:40:2e:91:35:af:87:1c:d8:00:57:
a5:ec:ee:d0:5e:7e:53:3b:fb:2c:d7:94:60:3c:e1:
8e:4c:ce:93:d8:80:d9:20:45:77:c9:49:2c:79:4f:
de:86:45:31:76:f6:6a:28:a8:f3:d7:1c:78:7c:9c:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:EC:CE:11:09:6C:71:50:82:51:AB:D3:07:D1:79:EB:E8:4C:23
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:6b:26:86:ec:04:26:be:1e:6b:fc:10:8d:d7:b6:3f:fd:5f:
fb:a2:5d:54:65:28:f4:ec:e9:6d:64:85:1d:ed:b3:87:84:25:
90:32:b8:7f:b0:97:d4:f8:68:6a:0e:5e:66:bd:bf:ea:e7:73:
42:52:f7:38:d9:af:3f:eb:61:91:36:aa:bb:35:ea:db:61:e8:
72:6e:c2:02:4e:7c:1e:78:7c:ea:c4:82:50:95:8c:de:a2:6f:
2d:17:3e:c4:58:44:3f:91:d1:5d:6d:d4:43:19:67:18:4f:96:
cd:d5:02:d8:0c:7a:10:33:71:45:9e:2f:ba:8f:14:87:8a:cf:
72:0e:d9:80:67:7c:62:ee:be:1b:62:5e:16:47:32:3e:87:b5:
f1:6f:ff:8d:49:de:74:0f:ef:ea:0c:e4:e4:7a:aa:c3:93:58:
21:95:f1:93:17:69:7c:f4:66:a5:9d:cf:2f:4c:99:e4:f1:01:
77:d6:d9:b0:a5:0e:3e:0a:81:10:27:af:b4:b9:36:bb:92:4d:
29:db:14:da:cc:2e:a4:9a:59:80:c5:c7:5d:0b:e5:f0:81:a5:
f4:8e:d8:64:53:9f:4e:bd:c9:64:12:3c:83:c2:c0:0e:c0:ac:
88:85:37:a9:bb:df:3d:5b:b0:7f:77:a0:63:dd:c5:e3:36:27:
40:92:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:48:51 2025 by rpki-client