This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier: Qpboyef+R84ST02LfbHnO4B6b0e1my1ZbBK1oJl6Z2g=
Subject key identifier: 01:6B:BA:25:B8:D6:CE:E1:6E:86:DF:60:4C:5D:78:DD:E8:B1:19:1F
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial: 1274
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number: 126C
Signing time: Sat 06 Dec 2025 16:37:57 +0000
Manifest this update: Sat 06 Dec 2025 16:37:57 +0000
Manifest next update: Sat 13 Dec 2025 16:37:57 +0000
Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: VmdrPLEBQmWsBC9eftOSW1Bpw7rnSBUOzBzv+uoOJZA=)
2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4724 (0x1274)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Validity
Not Before: Dec 6 16:37:57 2025 GMT
Not After : Dec 13 16:37:57 2025 GMT
Subject: CN=69345be5-d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fe:0a:e4:e7:93:7f:87:0b:c3:b0:fc:83:f7:
37:5d:7f:d0:73:d0:22:66:3a:82:6f:dd:92:fb:a4:
25:0e:91:89:53:a2:3c:8f:12:b1:13:11:3e:4a:d0:
6a:ca:9b:3a:ce:2a:6a:5b:d3:af:94:9b:64:0e:92:
cb:94:fd:26:4e:d5:54:78:bb:f1:7c:bd:d9:ad:16:
4c:79:9a:b2:b4:09:8c:93:bc:e8:eb:4e:fd:fc:2b:
a7:07:56:5e:30:43:28:a6:74:81:ae:38:cf:4c:d0:
22:76:10:5b:dd:09:48:8a:ff:8a:f7:3b:a0:43:af:
8a:9a:87:2e:b2:42:9c:9f:96:37:f9:cb:0d:22:46:
af:7b:82:83:2a:1b:a4:80:1d:70:a5:48:ce:24:25:
38:36:a4:69:b9:59:dc:a5:b1:16:09:25:3b:f2:dd:
21:18:8e:69:9c:9e:50:08:79:02:d9:c7:a0:18:fa:
43:5c:b6:3a:03:a4:68:db:e7:af:ed:76:b4:b2:25:
88:58:77:f9:27:dc:18:30:fe:89:bf:65:c6:c0:57:
3d:74:3f:e4:d7:51:7a:18:83:11:20:75:7e:de:95:
ee:51:85:82:2e:f5:16:d0:f8:c3:b9:65:ae:e2:85:
26:fb:72:c5:59:f3:2d:7c:c2:cd:6f:c5:80:81:dd:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6B:BA:25:B8:D6:CE:E1:6E:86:DF:60:4C:5D:78:DD:E8:B1:19:1F
X509v3 Authority Key Identifier:
keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c8:68:55:20:8b:19:5f:f6:de:02:6e:a7:7e:a6:21:81:be:a0:
80:cd:3e:02:ff:d5:92:2f:e1:00:be:bc:83:aa:bf:d0:21:fa:
ac:66:85:3c:10:fc:ed:05:dc:af:b0:fd:6a:8d:18:61:0c:d3:
b9:31:50:52:42:2a:41:6b:58:7a:ec:19:1c:ee:60:08:95:80:
cc:0c:2e:6b:d7:06:ca:7c:68:50:29:0e:a4:67:b6:14:3a:e1:
33:b7:61:46:9b:90:4c:dc:6b:a8:8f:ea:97:61:1d:1f:b0:c8:
4c:e3:d1:82:cc:bb:8f:3a:56:eb:44:6b:4b:62:89:72:cd:b5:
79:7a:b1:5a:e2:11:42:6f:d9:28:91:91:7b:84:e1:bd:30:f2:
1a:56:48:f1:c3:07:fe:4d:fb:38:c6:8c:a3:6b:9a:9b:49:e5:
1f:bd:fc:57:3b:11:c9:53:e4:38:a6:99:1c:44:84:ef:ea:22:
29:fe:a1:5a:4d:c7:1c:b1:85:a3:95:8a:04:65:36:7b:9a:10:
2a:80:fb:fc:11:c6:2c:7b:d2:a4:42:98:d8:8f:6a:c8:b3:1f:
82:08:c6:2f:a4:44:a4:fd:56:67:1d:8a:75:e4:98:a0:ee:fa:
28:29:ad:10:b2:37:77:4d:88:dc:5e:53:13:9a:ea:c5:88:fa:
e5:16:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:16 2025 by rpki-client