This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
File: i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft (raw, json)
Hash identifier: hKP7PU4VdKlY4CWpWSu1V8dye0iBPeBHSgjJxLERWG4=
Subject key identifier: E6:A6:B2:01:1F:C0:30:76:31:50:57:C7:EE:66:EB:D8:06:98:EA:F5
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial: 07BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
Manifest number: 0730
Signing time: Thu 04 Dec 2025 21:05:35 +0000
Manifest this update: Thu 04 Dec 2025 21:05:33 +0000
Manifest next update: Thu 11 Dec 2025 21:05:33 +0000
Files and hashes: 1: i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl (hash: lPJ+c8r8wFn/u3Qsu9d0kChaC+2GO/Eb+bBT1vu7mmc=)
2: B7BC1B76506A11EDBB3A804AC4F9AE02.roa (hash: j0xrsPerWvAmq5TrfXCCAXxhmW7uoVGvVR9TrXHmI/c=)
3: 79D30C40BABE11EB825A5D09C4F9AE02.roa (hash: VF1EKdtqMB8DRuSBnFKjSSnE5AI9LEnGrDvhJPYGcJw=)
4: 30CB9694A28911ECBC355360C4F9AE02.roa (hash: iacyWEeXTvXTILxRcADZ+9lCVjiDHQnMplIMRt/73Xk=)
5: 97C79A806C0511EF8B77D10EC4F9AE02.roa (hash: Z/eyVAkA9R8S1+9PHNU8ppbtyyeeA+WhA6oeOKeAzo8=)
6: BB9C14F6AA5511EB86F34077C4F9AE02.roa (hash: bcPbqQLGQnoAzNP2Fmg0TCnc4h72RS0Eli/gU7/zCsQ=)
7: 317095E0A28911ECBC355360C4F9AE02.roa (hash: Pa0iKARYCWRSksppmbtkHK6D27x19i+sB6izIsd+594=)
8: 8BB6CB12A4D511EB9E4DF342C4F9AE02.roa (hash: q95wxrZ9LN/HMmU4q1987KOKTt7X/HBomrSB/BVWhIg=)
9: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (hash: ahURvf3WgTOlPvJ2Yvz5ikj2GmylBcCLMIT4Gjnelzo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Validity
Not Before: Dec 4 21:05:33 2025 GMT
Not After : Dec 11 21:05:33 2025 GMT
Subject: CN=6931f79e-d2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:6b:b0:96:b5:82:6c:71:c0:78:9e:20:05:
cb:3e:42:56:38:57:e8:b6:b0:7b:dc:a8:3c:57:a7:
9f:9b:4e:e4:78:35:8f:76:53:ea:59:1c:d6:a9:9b:
53:6e:2d:60:df:9c:e9:ad:f1:eb:01:ca:eb:ee:04:
66:c3:ae:ab:aa:0a:72:47:ce:4e:c9:08:13:c9:5e:
18:a8:d7:6a:a3:d5:7d:bf:e3:3d:be:73:45:67:f6:
af:6b:cb:56:81:11:98:b3:24:44:bb:20:bc:bc:6e:
09:d1:d1:b9:56:68:7f:ca:3c:d2:a2:a1:e8:2a:1e:
24:c6:a6:90:45:68:41:7a:7e:19:8a:21:8d:5f:fc:
81:35:b3:26:a7:f8:a3:6e:61:e5:15:c9:6c:c6:1b:
d0:2b:db:84:66:bf:51:63:4c:eb:24:a1:28:00:63:
a3:46:8f:f0:00:cb:94:e1:2f:3a:19:c9:a1:35:e0:
0e:e9:03:8a:b6:c2:20:7e:b7:f1:2c:ee:b9:6d:cc:
93:b8:84:2b:90:74:bb:a7:1a:6b:30:d8:27:80:11:
de:1b:2b:90:71:1b:ba:4c:74:bb:6a:a8:0d:1b:b7:
99:cc:da:ef:c5:63:76:5c:a6:da:80:9b:28:3c:ff:
ff:8f:6b:70:5f:dd:c0:af:47:4b:f5:41:bc:4e:eb:
fc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:B2:01:1F:C0:30:76:31:50:57:C7:EE:66:EB:D8:06:98:EA:F5
X509v3 Authority Key Identifier:
keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9d:f0:c6:50:f2:8a:a0:0a:05:d0:ac:6a:43:88:d6:e4:ec:
c5:b7:15:17:b4:2b:2d:92:27:41:51:04:6a:a4:2a:3f:b0:00:
f5:42:71:16:46:7a:fb:39:38:b7:b0:40:3f:85:1f:79:66:39:
3a:69:01:0f:3e:23:15:89:32:b4:9c:6b:d8:89:1e:ce:0c:ce:
8f:e7:15:a6:90:3a:23:36:96:c8:4a:5d:c4:81:4c:d0:d6:6b:
20:d1:13:75:a6:62:8d:82:eb:ee:80:39:e2:ce:2a:36:00:71:
d8:07:cc:55:bc:a0:ce:fe:77:88:05:21:cf:73:fe:f0:82:b1:
5c:51:8d:d1:89:04:30:fc:6a:26:8f:87:11:cb:d6:c6:35:f2:
00:21:49:a9:b4:ef:9c:24:4b:33:69:cd:c7:65:cd:c3:cf:9f:
b2:25:37:45:e4:12:db:dc:7d:01:4d:89:4e:d7:d5:56:e4:4a:
2c:23:5b:f4:fd:35:1a:47:6b:f3:7a:f6:b8:1c:13:4c:f4:10:
7e:75:7b:aa:35:cb:3f:83:0b:96:3f:4f:b8:06:dd:2c:7b:d0:
24:c0:59:a7:51:56:d5:3a:9b:8a:74:62:a6:f7:a2:b1:b9:19:
a6:e8:73:2c:13:54:51:5a:76:47:29:6c:22:9f:3a:19:69:21:
b4:5f:89:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjUxMjA0MjEwNTMzWhcNMjUxMjExMjEwNTMzWjAYMRYwFAYD
VQQDEw02OTMxZjc5ZS1kMmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnlJrsJa1gmxxwHieIAXLPkJWOFfotrB73Kg8V6efm07keDWPdlPqWRzWqZtT
bi1g35zprfHrAcrr7gRmw66rqgpyR85OyQgTyV4YqNdqo9V9v+M9vnNFZ/ava8tW
gRGYsyREuyC8vG4J0dG5Vmh/yjzSoqHoKh4kxqaQRWhBen4ZiiGNX/yBNbMmp/ij
bmHlFclsxhvQK9uEZr9RY0zrJKEoAGOjRo/wAMuU4S86GcmhNeAO6QOKtsIgfrfx
LO65bcyTuIQrkHS7pxprMNgngBHeGyuQcRu6THS7aqgNG7eZzNrvxWN2XKbagJso
PP//j2twX93Ar0dL9UG8Tuv8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOamsgEf
wDB2MVBXx+5m69gGmOr1MB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzMxQi9EMEVDQ0Q0ODg5M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0
ejBhTFgwbHFrYXV3NUl6NmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLnfDGUPKKoAoF0KxqQ4jW5OzFtxUXtCstkidBUQRqpCo/sAD1QnEW
Rnr7OTi3sEA/hR95Zjk6aQEPPiMViTK0nGvYiR7ODM6P5xWmkDojNpbISl3EgUzQ
1msg0RN1pmKNguvugDnizio2AHHYB8xVvKDO/neIBSHPc/7wgrFcUY3RiQQw/Gom
j4cRy9bGNfIAIUmptO+cJEszac3HZc3Dz5+yJTdF5BLb3H0BTYlO19VW5EosI1v0
/TUaR2vzeva4HBNM9BB+dXuqNcs/gwuWP0+4Bt0se9AkwFmnUVbVOpuKdGKm96Kx
uRmm6HMsE1RRWnZHKWwinzoZaSG0X4kX
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:26:43 2025 by rpki-client