This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
File: B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft (raw, json)
Hash identifier: smhdGifZAeN3oU2hIWXLFpbLxqhkKTnui+4zxOxTlz8=
Subject key identifier: 37:D3:02:BB:3D:63:CF:6F:E8:EC:A3:0E:B9:9B:4F:53:DB:45:B8:D1
Authority key identifier: 07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
Certificate issuer: /CN=A91CDCB6/serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Certificate serial: 1E9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
Manifest number: 1E7D
Signing time: Sat 06 Dec 2025 15:46:07 +0000
Manifest this update: Sat 06 Dec 2025 15:46:07 +0000
Manifest next update: Sat 13 Dec 2025 15:46:07 +0000
Files and hashes: 1: B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl (hash: svv38X9Te7xdiNcCQ5I3G6aZYx8YyyacHNrawNT/LFE=)
2: BD314CEA619711EE81211277C4F9AE02.roa (hash: 16s8rqQL7ZS3OY13WYasSB/OdPD3K/KWoSmSDxk1MUc=)
3: 48471CAE611811EEB2B1C077C4F9AE02.roa (hash: XAUpnIWVoo2gP76XF78PGBVOZx+0l56I4zT3vqwFcwU=)
4: F0F97030612C11EF85AF817EC4F9AE02.roa (hash: 4P/xIWjkOZt+s6V/SN3xcWLg6ZfxIlwRFodBInoaJSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7839 (0x1e9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCB6, serialNumber=0781675CC64FAB2B845DA7F51155498042ECE467
Validity
Not Before: Dec 6 15:46:07 2025 GMT
Not After : Dec 13 15:46:07 2025 GMT
Subject: CN=69344fbf-fc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:f4:b8:07:33:51:b0:e5:8c:08:e1:d1:2d:
56:66:03:72:46:af:45:39:b4:87:1d:e0:ba:82:dd:
b0:96:c4:9b:10:26:c0:a2:04:19:87:ce:d5:74:2d:
06:15:fc:7d:00:e7:0b:d6:97:27:a3:31:35:bb:ae:
54:d3:50:16:2b:95:9a:7b:ee:a9:c0:f7:eb:ae:22:
44:ff:75:68:39:51:7d:89:40:fd:5a:ed:89:3a:92:
f3:cb:58:fa:03:df:6f:e9:e1:94:e8:6c:5d:4d:35:
68:45:96:cb:4b:55:f6:96:76:c5:0b:5b:a5:15:1c:
d3:74:b3:c9:9c:03:ac:ca:f2:af:34:4b:d7:ec:c3:
f0:9d:49:c7:bf:bd:1e:0d:52:a4:33:e0:98:e1:7d:
32:11:ad:a7:f2:b4:7e:41:35:e4:47:5b:de:72:38:
f1:28:31:35:33:6c:85:35:cd:88:11:58:32:3f:e2:
2f:d5:54:d9:0c:cd:ca:9a:81:e7:1c:ed:0c:a8:c2:
9d:35:c7:20:c2:5f:3e:7e:2f:c8:b2:49:d4:96:fc:
fc:15:7a:e7:e6:c9:01:66:07:da:68:f0:af:87:9a:
ad:ae:65:85:9a:8b:64:4e:e2:ec:e7:d6:bb:a0:72:
c5:e4:f3:13:cb:95:74:4f:f9:c7:9a:d0:57:d7:82:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D3:02:BB:3D:63:CF:6F:E8:EC:A3:0E:B9:9B:4F:53:DB:45:B8:D1
X509v3 Authority Key Identifier:
keyid:07:81:67:5C:C6:4F:AB:2B:84:5D:A7:F5:11:55:49:80:42:EC:E4:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4FnXMZPqyuEXaf1EVVJgELs5Gc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCB6/67C6AA4A8AF111E698078355C4F9AE02/B4FnXMZPqyuEXaf1EVVJgELs5Gc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b1:e2:08:42:b6:55:16:c5:60:ed:3a:63:b0:c2:1f:b4:9a:
65:6f:f9:ae:8e:3e:28:ba:78:d6:5e:11:5b:d4:b1:b8:e5:67:
ec:03:33:7d:63:e3:25:a4:b0:36:18:21:14:e5:a1:3f:62:f2:
be:88:b2:0d:cf:5e:a0:b7:a9:f9:18:25:1b:b3:e2:fb:16:ff:
e4:52:2e:8f:3d:d3:ee:5e:ce:f0:6c:4b:21:84:5b:98:c3:c0:
e2:d5:2b:a9:2a:ce:bf:64:83:68:30:57:32:5d:a9:b8:fa:b3:
57:59:2f:ed:84:95:d9:81:b9:e2:af:af:bb:d8:08:57:1c:5e:
c8:94:46:25:2d:f4:9c:df:4e:1f:00:eb:65:7a:b6:59:d3:92:
f3:c9:91:91:eb:70:64:cc:d8:83:6d:1b:35:ed:a6:88:9e:b3:
66:1d:7a:bf:5b:b8:5a:62:2c:ee:b4:f0:ef:6c:d3:d1:7f:21:
31:9a:89:50:db:41:05:9f:9c:24:e6:11:c3:e5:26:21:4f:99:
ae:8d:0b:59:e8:b6:3d:e2:4a:86:d9:5d:7e:a6:a0:5e:3b:6f:
c2:b5:17:ee:44:1d:ee:3b:ba:ee:a6:79:f9:e4:50:1d:88:53:
ac:86:74:d4:7e:7f:5a:7e:93:44:c8:d3:18:41:54:79:dd:de:
19:a8:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:07:59 2025 by rpki-client