This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: 09XkSxSSQkUIa8cOeKdNvt3e99MbR9LloBtVYRpdFFM=
Subject key identifier: 48:FF:0B:13:5A:D9:51:85:07:1D:7D:FD:B6:7C:AC:A4:97:9E:A8:82
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 019F
Signing time: Fri 05 Dec 2025 01:40:23 +0000
Manifest this update: Fri 05 Dec 2025 01:40:23 +0000
Manifest next update: Fri 12 Dec 2025 01:40:23 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: nmDoerL2RG4MsmH6dvfPMfs0h52yfxRlWNJLJaW5N+U=)
2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: coTbLMChMtsb+9hU9/oYsNe+RoCOnIHIavvRJNUhB3k=)
3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: SLEJBl6iI7A9mQ/gCP8wQV/FveWhHBwcWU7BMm4+pLE=)
4: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: SQBva7AHaoJKrZ6vg+VCRRVDYT6lI9oaiIx6/QC8zvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Dec 5 01:40:23 2025 GMT
Not After : Dec 12 01:40:23 2025 GMT
Subject: CN=69323807-cbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:04:b8:0d:7f:40:d0:4c:68:87:28:e3:ef:
8d:ce:b4:8e:87:b4:d6:95:0b:f5:c1:50:e9:bd:67:
88:c3:10:d7:a4:1b:90:cf:a9:3f:c3:c4:ee:9c:27:
7b:26:db:a1:58:4c:6f:24:46:f9:93:b0:eb:80:ca:
51:5b:03:0c:ab:b5:1e:96:41:cf:03:0c:16:b1:63:
c8:ed:bf:d7:62:09:1c:14:e9:69:62:90:61:dd:b3:
d4:44:80:9b:22:ad:90:35:a0:6c:6a:43:90:d2:94:
d3:fe:24:a6:c6:f4:ec:d7:14:8c:6f:c1:58:b4:c7:
9e:5e:bb:c7:81:53:e5:8c:b4:68:28:49:96:1d:ef:
f6:86:76:ac:e5:42:91:ea:47:af:1e:04:c0:0b:a9:
66:60:a9:43:f8:df:a0:2f:29:dc:ec:0b:07:4a:cd:
4e:b2:62:15:27:98:ce:e9:ca:ae:af:98:e7:75:a0:
ef:bf:a6:f3:99:4e:58:19:54:1a:52:9d:69:b6:5a:
15:d4:d6:e0:af:ab:20:a8:ce:f8:a8:e0:20:90:f1:
51:af:93:ad:0a:34:2d:39:f4:a3:95:54:6a:0f:4b:
05:01:91:f3:a0:b2:ef:6f:2e:8b:9f:ab:9f:d1:02:
0c:cd:61:07:53:1f:a0:e9:ed:20:ad:7f:f7:0e:ef:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:0B:13:5A:D9:51:85:07:1D:7D:FD:B6:7C:AC:A4:97:9E:A8:82
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:6b:d0:34:10:d3:64:fa:d5:c3:99:73:b9:38:d6:0e:6a:
ce:28:be:36:8b:45:d4:04:9f:42:01:10:e8:87:d9:ac:ec:73:
a1:d9:1b:ef:62:4a:41:d3:3a:e0:0c:12:9a:f7:d7:7b:9f:cd:
53:2b:f9:25:c7:72:b9:32:fa:3c:d1:2a:0b:71:e4:00:48:85:
f7:d7:8f:a5:00:cd:16:0c:2e:23:b4:49:0c:a5:03:05:0e:73:
19:fc:38:03:65:3c:6b:98:51:a9:3f:8a:c3:55:f9:50:a6:fe:
85:ee:08:09:4a:01:06:3b:eb:92:ac:5c:50:f4:91:6d:07:ff:
eb:01:50:64:94:bf:06:a7:09:e2:74:d0:12:52:f9:da:3c:3d:
4f:96:f9:c5:69:73:7d:8d:f3:60:58:d9:55:ff:1d:e3:2d:c6:
fd:d3:34:03:c8:1f:d2:37:de:5b:7d:dd:93:ff:77:4a:b8:70:
07:ea:bd:31:e6:ce:cd:ad:ef:a3:c2:75:85:03:bc:2f:c2:a9:
a3:b7:24:2c:55:48:e1:d4:b5:7e:2f:49:15:c7:9a:7c:fd:8b:
6f:a6:ee:7a:01:65:92:0e:46:6b:8d:49:aa:bf:8f:de:0c:38:
2d:5e:09:57:78:d5:64:5c:ea:f3:6d:05:1d:de:d7:76:94:62:
9d:12:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:37:26 2025 by rpki-client