This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
File: 4uYwZnXV9U0ge2eCqWx6qWex_JE.mft (raw, json)
Hash identifier: X3SYDRBRhuYPkQRM0cRtyds3odssp9EJFCTogWF1qvM=
Subject key identifier: 5C:05:7F:C0:00:3D:76:51:51:31:E6:D6:27:21:71:AE:F0:8D:60:C1
Authority key identifier: E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
Certificate issuer: /CN=A91B8AC8/serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
Manifest number: C2
Signing time: Tue 09 Dec 2025 03:56:43 +0000
Manifest this update: Tue 09 Dec 2025 03:56:43 +0000
Manifest next update: Tue 16 Dec 2025 03:56:43 +0000
Files and hashes: 1: 4uYwZnXV9U0ge2eCqWx6qWex_JE.crl (hash: BSrXqR1CigjLIm32xNrgCe+cOl01dV4LljEhL/rFHuU=)
2: 9074B02EB13D11EF9EFDE433C4F9AE02.roa (hash: +DamE3tU9Fo7eBYdyyuSzK/6/nm5KtgHW7yUMIG6MHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 03:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8AC8, serialNumber=E2E6306675D5F54D207B6782A96C7AA967B1FC91
Validity
Not Before: Dec 9 03:56:43 2025 GMT
Not After : Dec 16 03:56:43 2025 GMT
Subject: CN=69379dfb-618d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:79:cf:f8:b1:b3:a2:a7:ff:f8:49:bb:0d:66:
c5:25:c1:8f:d4:2a:0a:73:f4:5f:67:8d:51:7b:53:
fe:ed:24:3b:f1:33:cb:87:fc:38:50:83:91:1f:94:
f8:c7:74:86:66:b8:a9:ee:b3:3b:f0:26:a2:9b:a9:
97:c8:d4:23:e6:c3:69:76:8a:ca:29:36:81:1c:33:
c2:65:16:88:44:5f:05:f1:ff:4f:8c:a9:98:1c:36:
17:8a:dc:9e:4d:1a:18:de:7c:64:eb:0f:5d:21:01:
30:56:a6:76:22:29:e3:af:d8:b0:03:52:3f:42:e2:
81:71:db:21:11:7a:c6:42:26:17:5c:b9:3d:15:8b:
71:f3:87:6d:d3:33:f8:94:f2:41:cc:c8:e5:15:15:
85:70:c2:58:5b:e3:2c:98:4f:d6:27:ba:9c:21:e3:
d3:d8:c3:b8:1a:5b:a8:97:69:47:94:8c:d3:59:47:
ea:a2:29:ac:21:6c:89:88:ac:34:11:6f:e4:25:81:
56:ca:66:77:e2:83:62:fa:f2:a1:9e:29:fa:ea:6d:
0a:fc:d7:a9:d9:b5:f8:60:f5:09:4d:30:8c:a0:ce:
d7:20:f2:2c:e3:d9:c8:f4:b8:35:92:ea:69:68:61:
a8:ce:b9:aa:03:8b:39:a3:72:20:8a:6c:3d:2a:68:
28:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:7F:C0:00:3D:76:51:51:31:E6:D6:27:21:71:AE:F0:8D:60:C1
X509v3 Authority Key Identifier:
keyid:E2:E6:30:66:75:D5:F5:4D:20:7B:67:82:A9:6C:7A:A9:67:B1:FC:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uYwZnXV9U0ge2eCqWx6qWex_JE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8AC8/E9BE05DCB13C11EFAAF9D731C4F9AE02/4uYwZnXV9U0ge2eCqWx6qWex_JE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:7e:dc:ba:cf:26:ee:a4:2e:d7:3c:3c:e1:fd:a3:57:49:f2:
de:5e:97:a2:de:ce:f5:4b:04:03:c0:12:fa:82:e2:0f:2d:af:
16:07:9a:eb:d4:d8:ae:5d:bf:e9:f1:6d:a9:2f:0b:5d:48:fd:
0d:3e:c1:e4:b7:dd:97:f2:f7:17:1f:06:0d:83:fb:ec:93:90:
b0:b4:1a:a2:61:7a:a8:96:7f:01:02:5d:5a:49:18:22:17:b5:
1d:e9:df:23:bb:3b:be:4e:49:f3:4a:ce:73:c9:65:5f:32:36:
60:5c:a9:cc:1d:52:9c:31:c9:5e:62:30:a2:6c:ec:68:f7:60:
8e:1d:d3:9a:8f:33:eb:aa:37:b2:d2:e2:52:37:b5:f6:e6:ff:
fb:9c:ef:b5:f2:cd:4b:ea:4a:bf:4d:29:37:e8:39:a8:bc:52:
7f:94:8d:23:09:6f:9e:9e:61:d4:59:db:de:d9:22:41:e9:28:
14:d4:e0:7d:61:ea:62:1c:91:db:1f:c9:39:cc:3a:66:80:be:
54:48:e6:5f:dd:47:5f:ff:d5:d6:c1:92:2f:ad:31:ab:f5:50:
a2:6e:10:9c:62:44:75:05:d3:d3:b9:8c:a2:a7:bc:ba:f5:8f:
6f:ff:c7:fc:45:62:fe:0a:c8:c2:1f:a6:49:b0:8c:ff:a1:24:
e8:b9:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 14:21:54 2025 by rpki-client