This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
File: a4J2B8F85j5hIUwuZCxaqFHuOE4.mft (raw, json)
Hash identifier: DjR9XEYASPqKTBya5scIbFPOJp9GvfadLcfJceEwjsM=
Subject key identifier: 88:6B:B0:7C:B1:6E:ED:66:E1:71:6D:97:FC:A5:90:C7:1A:96:55:C0
Authority key identifier: 6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E
Certificate issuer: /CN=A91BFD4B/serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
Certificate serial: 065C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
Manifest number: 0658
Signing time: Thu 04 Dec 2025 21:22:36 +0000
Manifest this update: Thu 04 Dec 2025 21:22:36 +0000
Manifest next update: Thu 11 Dec 2025 21:22:36 +0000
Files and hashes: 1: a4J2B8F85j5hIUwuZCxaqFHuOE4.crl (hash: NfRNSOr1lGUFYaJBbgn5068d9/zhIDRfu6kYNhAbaaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl
rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFD4B, serialNumber=6B827607C17CE63E61214C2E642C5AA851EE384E
Validity
Not Before: Dec 4 21:22:36 2025 GMT
Not After : Dec 11 21:22:36 2025 GMT
Subject: CN=6931fb9c-d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:8b:f5:69:7d:8b:9f:5a:72:d3:e4:45:ab:
e9:26:1d:2f:eb:9e:5c:36:84:1c:f8:ce:32:49:eb:
e2:69:c0:92:76:88:77:c5:93:28:d6:ab:3c:63:48:
ec:8b:9f:bd:6f:93:48:60:cb:77:8c:2c:9d:90:19:
ce:7f:43:bd:fb:82:61:fb:b9:66:d2:b6:32:b1:c3:
46:cb:cb:8f:53:cb:93:47:88:ab:15:2e:ef:7e:1f:
00:e4:2f:77:13:d5:94:c8:c8:03:a5:6c:d4:97:fe:
8b:bd:9d:bb:50:a3:6a:0d:3c:db:f0:2d:e6:9a:e5:
56:84:75:d6:33:8c:04:79:f5:af:80:56:f4:0b:4e:
a6:c0:b0:23:f1:40:df:0e:ab:83:66:78:6f:1b:d8:
76:51:79:8f:8a:48:a2:08:fd:a3:a7:3c:cf:b1:09:
d9:46:66:5f:9e:bc:89:93:3a:3a:a7:36:e4:6d:08:
38:cd:c8:ab:40:e5:34:ed:c7:01:f7:38:a0:58:c7:
cc:44:9b:68:dc:ae:0d:fb:32:57:91:92:fe:97:b9:
73:8c:a0:84:4e:12:c3:87:84:64:b9:d2:33:ae:6c:
4f:e2:ab:0e:4c:44:8c:6c:7c:86:90:11:77:12:90:
2e:e4:0f:04:29:e7:6f:34:90:8a:20:8c:12:c5:0e:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:B0:7C:B1:6E:ED:66:E1:71:6D:97:FC:A5:90:C7:1A:96:55:C0
X509v3 Authority Key Identifier:
keyid:6B:82:76:07:C1:7C:E6:3E:61:21:4C:2E:64:2C:5A:A8:51:EE:38:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4J2B8F85j5hIUwuZCxaqFHuOE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFD4B/AA47893AABD911EB833D4C6AC4F9AE02/a4J2B8F85j5hIUwuZCxaqFHuOE4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:ea:39:28:b7:04:17:f9:2e:3e:d5:69:76:bb:63:bb:ad:a0:
96:27:f8:e8:84:f2:07:1b:2f:6c:96:16:ed:02:c3:90:fa:f6:
ac:31:76:10:11:9d:22:80:04:41:39:61:91:99:49:73:9d:aa:
d7:e8:9c:b6:34:62:20:99:97:d2:5f:36:32:ee:e3:4b:8a:c4:
ae:e5:d0:40:04:9b:96:b1:d7:37:77:3d:7b:69:ff:3c:fa:5c:
85:c0:52:15:06:32:83:cd:70:74:3d:09:dc:3d:77:8a:df:99:
ee:f1:ba:ee:a2:27:70:ee:f8:1f:f8:85:7f:bb:a5:a9:23:23:
8a:4f:29:24:0c:7e:d8:e5:0d:29:ff:39:26:bf:92:ca:0d:17:
b6:41:ef:cb:ed:3e:93:77:48:a5:6e:01:e7:09:35:5e:89:53:
77:a4:65:41:26:21:88:e8:2e:f5:c3:8a:d1:df:02:90:9a:d9:
ae:1a:39:67:43:93:09:4e:e3:e4:3c:ff:95:c1:fb:64:de:df:
4e:00:99:84:2f:44:21:9b:9d:bf:47:ed:2c:83:27:2f:1a:2d:
5d:42:b6:d8:6a:15:14:5b:6d:92:c1:a1:d8:90:1c:89:39:ab:
a3:78:6d:79:d5:b2:61:4e:f5:de:b0:d5:29:a1:18:8c:5f:00:
5d:b9:5a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:49:35 2025 by rpki-client