This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File: A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier: /gx1puxCtBr/y1nuY8F0pj0pRdISmGZPGP3e9gXUxFM=
Subject key identifier: A5:D1:0F:7A:D2:1D:D2:7B:EF:32:81:37:31:5F:99:94:1C:D9:72:A9
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer: /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial: 0C52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number: 0C3D
Signing time: Thu 04 Dec 2025 18:05:57 +0000
Manifest this update: Thu 04 Dec 2025 18:05:57 +0000
Manifest next update: Thu 11 Dec 2025 18:05:57 +0000
Files and hashes: 1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: cGeocr6bvWhTvk4GeYFoFqNv+AUL3fXt8tHd5dWVjSo=)
2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: If6A0dtzlgPVB4CBNXQ4TMiF5xMEzeKvLljq5QFI3bk=)
3: 398848523A0011EFB7007939C4F9AE02.roa (hash: Zlhwy82VHpRYLPT4enDdRaV9Hjue+wnu8x2KNE0lTzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3154 (0xc52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Validity
Not Before: Dec 4 18:05:57 2025 GMT
Not After : Dec 11 18:05:57 2025 GMT
Subject: CN=6931cd85-2f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:34:57:ff:7a:09:80:e3:cf:e9:88:e5:d5:
e5:fa:0a:80:2e:6d:64:a3:6d:d8:cc:19:49:2e:e5:
ed:79:6a:6c:8e:5b:b0:cd:bc:ec:dc:65:27:ce:28:
f8:0e:8d:e7:88:d6:26:ad:6c:c1:b2:6f:aa:17:f8:
3f:70:d6:45:53:9a:f0:f4:03:6e:47:cb:d4:86:15:
b0:0e:8d:72:a2:85:5a:a1:30:39:9d:f6:09:e0:52:
ac:97:85:8d:18:eb:73:95:f7:77:c8:43:d6:44:ce:
db:44:26:8e:e4:7e:f0:85:6a:3d:a8:26:f3:67:51:
a8:2e:17:0d:b6:9b:bf:94:57:bb:27:87:e9:92:71:
b2:b1:a3:a8:1e:c0:83:c6:09:11:59:e2:41:33:c0:
02:ce:42:a7:0a:49:0c:27:78:c3:dc:86:1f:bf:75:
a9:66:c7:24:16:9b:cd:6e:91:08:9e:76:5a:6b:fa:
a9:99:d4:f7:82:eb:b5:48:b9:fd:79:6d:e3:74:61:
83:85:82:34:4b:5b:5b:bd:8e:ac:3f:7d:3e:dd:25:
e6:98:be:32:af:5d:c5:3c:1e:4c:95:ca:ca:28:bd:
65:1d:28:09:9e:8c:27:25:70:fd:83:2b:63:1c:68:
3b:5f:14:5a:bb:cf:cf:f3:bc:e2:a5:d5:94:4f:b9:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D1:0F:7A:D2:1D:D2:7B:EF:32:81:37:31:5F:99:94:1C:D9:72:A9
X509v3 Authority Key Identifier:
keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:83:97:85:9c:58:16:9e:03:03:45:e5:e3:84:a3:02:35:04:
40:99:1f:92:ae:a5:a6:6b:cc:e8:29:ae:14:bd:8f:ec:89:93:
34:21:35:ad:99:5d:62:dd:1a:1d:01:8f:8b:9a:e5:c5:97:1c:
0d:63:92:05:86:3a:71:c3:4a:84:7b:6b:13:23:1f:23:6d:63:
e2:71:5b:b3:ac:65:ab:e2:f0:6e:10:b2:b2:ac:83:5d:d8:4c:
a4:50:d3:07:43:48:75:a8:cb:10:b4:48:36:9f:41:c3:b6:da:
d4:f0:0b:43:1c:4e:e3:dc:3a:1e:fb:4b:45:7e:03:22:84:49:
53:5d:e7:bc:aa:40:4e:65:14:3b:cb:46:f5:51:c0:2e:bd:56:
d9:12:8c:dd:3a:85:bf:d8:4c:51:2d:7f:3a:e0:0e:ce:3f:a5:
15:aa:f8:7e:5b:3b:3e:2a:c3:da:dc:71:dd:10:b1:e4:52:30:
0d:b8:ae:ee:d1:5f:3c:ca:01:63:dd:fd:ff:5a:7d:2b:6e:7e:
8f:68:5b:dc:b7:10:e9:d6:ab:88:ee:f9:74:02:15:9c:ab:09:
2d:cd:55:c0:a8:86:05:c7:0a:85:67:92:6e:bc:23:15:3b:e0:
1d:f6:cf:1f:c7:ea:36:6b:06:c6:b0:36:fd:17:d0:c1:36:f0:
07:cb:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:45 2025 by rpki-client