This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
File: 4ed5yzH_53MaM7Xrfq_GsqvbROM.mft (raw, json)
Hash identifier: 41DF/lC4yRj+ibginazwm0QzYoJgRyBuUoi8ti6cw+8=
Subject key identifier: F3:36:42:CD:D5:2B:5E:07:F5:C4:63:AA:9F:45:0C:0E:50:82:2E:FE
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Certificate issuer: /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
Manifest number: 01B9
Signing time: Fri 05 Dec 2025 01:21:35 +0000
Manifest this update: Fri 05 Dec 2025 01:21:34 +0000
Manifest next update: Fri 12 Dec 2025 01:21:34 +0000
Files and hashes: 1: 4ed5yzH_53MaM7Xrfq_GsqvbROM.crl (hash: ntEJ7oYU5kyZSmW/UDGSJuTpKLrkKYEPHBntYApG+20=)
2: 9E6C93C6372311EEACE5BF61C4F9AE02.roa (hash: glLqt8A+PG2i48HeZjmY7dCokn6j6eyQTAGv7a4dQe4=)
3: 9F1B80CA372311EEACE5BF61C4F9AE02.roa (hash: cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Validity
Not Before: Dec 5 01:21:34 2025 GMT
Not After : Dec 12 01:21:34 2025 GMT
Subject: CN=6932339f-4608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:fc:42:2b:ae:7c:04:3f:61:47:cb:89:3a:
2a:ae:73:dd:5d:89:b6:4b:e6:4c:3f:5b:62:0d:53:
7f:1c:be:be:cc:a6:cb:7f:0a:e6:be:60:12:3b:9c:
0c:6c:cf:3d:47:9e:f9:31:a2:12:a1:7a:6d:7f:88:
96:57:4d:1e:c0:cf:ce:85:42:c8:ac:22:8d:80:c9:
eb:ad:0b:c1:b7:b5:f2:f6:70:8a:62:79:7c:c2:b1:
cc:61:41:79:b4:b6:c2:0e:62:ca:c3:67:2b:4e:83:
08:de:90:66:30:32:bd:e7:7b:81:a9:70:a9:62:07:
41:32:37:12:0e:94:47:6c:39:89:90:eb:f7:48:95:
83:cc:a7:bb:67:7d:28:52:ae:ed:95:54:97:fb:99:
cd:db:fa:83:2d:f6:79:a0:56:ee:77:43:88:aa:f2:
cf:17:6a:7f:1b:a7:fa:4a:ce:0c:26:c3:0b:aa:68:
e4:f1:74:5a:20:80:a3:b3:ec:f9:16:dd:62:c8:6e:
d5:98:e9:a3:1d:bc:c6:d8:7b:72:3a:9a:a5:95:8f:
76:43:55:1f:02:d7:bf:94:ef:da:a8:b2:2f:9b:5a:
fe:af:83:3d:3b:02:6c:11:79:aa:43:79:d6:0f:a2:
08:44:59:5c:c4:93:d5:16:3c:c4:d1:57:90:c7:f9:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:36:42:CD:D5:2B:5E:07:F5:C4:63:AA:9F:45:0C:0E:50:82:2E:FE
X509v3 Authority Key Identifier:
keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:e5:9d:94:77:be:84:16:82:1f:a0:e4:11:1f:96:a1:3b:
ce:a9:f2:91:c1:00:ba:a8:0b:b6:20:35:0c:f5:9d:2e:5b:12:
27:6b:95:12:47:02:22:69:9f:1c:c9:5d:17:3a:87:cb:c0:b2:
9a:0b:66:e8:a4:d9:1f:89:3c:25:19:49:03:7d:d1:19:32:02:
2a:b3:75:dc:50:84:77:ee:cc:ed:1c:3b:47:3f:f5:7c:bd:ac:
36:2b:2a:e6:d5:25:99:4d:5b:79:25:d4:92:f5:d8:1d:07:22:
21:89:8f:60:04:e9:b9:5f:6f:f9:3e:a9:58:e1:6a:9e:68:60:
c0:49:0c:04:5e:66:5d:30:b1:e8:a1:70:cf:d1:b2:5c:12:f7:
67:d4:2c:e2:e0:6b:32:db:31:8a:73:3b:63:46:5d:b0:eb:04:
4b:86:9b:d3:10:b5:b7:78:72:85:ad:58:cb:31:c7:11:86:9b:
65:bb:f6:88:49:85:32:e8:d1:70:e7:81:3d:58:d3:e6:45:32:
58:c3:66:0e:f2:1d:44:80:a5:32:9f:40:e5:6f:68:4d:27:66:
b8:37:f2:5d:38:42:0d:bf:d2:6d:a2:fc:97:a0:51:06:81:be:
a6:d0:79:a8:11:97:f6:92:9c:5c:f5:41:96:92:22:a4:91:ce:
19:5c:d3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:02 2025 by rpki-client