This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: pRPEQmFjNumaUKOCz6mi5JbA9LTi8eJRn87bwkg+hNc=
Subject key identifier: 3E:53:E8:63:8E:93:92:69:CF:40:38:49:27:22:69:74:5E:3D:1B:CF
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: 91
Signing time: Fri 05 Dec 2025 04:28:28 +0000
Manifest this update: Fri 05 Dec 2025 04:28:28 +0000
Manifest next update: Fri 12 Dec 2025 04:28:28 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: akqz+l+psmRcK/GGLOV6ZUPUSCEIK0q1vlQnllg/mP0=)
2: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=)
3: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:28:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Dec 5 04:28:28 2025 GMT
Not After : Dec 12 04:28:28 2025 GMT
Subject: CN=69325f6c-5836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:4e:35:8a:7f:c0:a3:37:cd:d1:25:a1:69:
9f:70:15:c6:c8:ee:1e:8d:21:1a:e3:29:0f:f2:4f:
58:ef:d3:3b:c2:d8:b1:f1:82:b0:45:26:7b:fb:42:
17:36:8b:2d:dc:85:23:98:9f:d5:0e:31:1d:26:c2:
da:19:9a:b3:c5:bc:4f:67:93:48:1c:44:c0:d3:b6:
0e:60:b0:9f:b4:aa:4c:f9:3a:eb:20:be:66:e7:70:
2e:d5:af:5c:b2:5b:c0:e0:56:90:bf:4f:86:b7:83:
54:d2:9f:29:e4:df:ad:08:a7:43:2f:9c:8b:79:3d:
85:95:f3:55:dc:52:27:0a:bf:93:99:af:c0:03:c7:
04:a9:59:74:47:57:3f:bd:95:7f:76:3d:c8:66:2f:
77:e6:a7:3f:73:0c:09:78:94:ec:e4:e3:81:a9:c6:
2f:27:ff:a1:6d:ea:e8:a8:19:d6:d4:a5:27:79:b3:
51:03:5a:be:e3:c1:d3:11:f7:8a:6e:15:85:9e:96:
55:13:b6:b0:7b:fa:43:e6:e6:51:b9:7d:d9:b7:c5:
a4:d3:81:bf:48:cc:a8:cb:73:73:f7:d0:a0:4f:3f:
8a:d9:6c:62:da:65:09:f3:0c:5f:3f:a3:a2:da:f7:
af:af:01:2e:f8:3d:11:fe:00:1d:4b:9e:7f:36:33:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:53:E8:63:8E:93:92:69:CF:40:38:49:27:22:69:74:5E:3D:1B:CF
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:16:c1:bd:6b:6e:f0:c0:74:22:f6:1a:b7:e5:3d:df:cc:03:
6e:f5:da:9f:14:9c:02:7f:34:b7:df:b1:d4:fe:27:17:8f:bb:
15:55:37:31:89:8e:d3:ea:49:8a:48:ec:e5:22:e1:62:f0:f9:
dc:fb:50:2f:a2:0c:b3:aa:8d:dd:86:8e:00:aa:28:c2:15:cf:
8e:c3:3c:23:7b:0a:70:8e:83:3b:f0:d3:bc:59:98:65:cc:02:
b3:23:e2:fa:81:3e:19:6a:97:13:49:ba:b8:56:5a:aa:dd:b4:
38:5a:ac:36:95:e7:51:cd:1a:a5:3a:3d:06:15:3b:6e:78:f6:
f4:ca:15:ab:7b:34:69:e0:e1:c8:53:88:cb:86:0f:a2:39:71:
91:1e:6c:c4:8e:38:35:a2:53:46:88:cb:4a:2a:26:74:df:5f:
37:9d:29:46:4b:8b:e7:44:59:e1:a0:57:20:ee:02:78:06:2a:
70:93:69:2f:ae:74:d1:d6:b1:90:ab:c2:c6:f5:ab:33:7d:e9:
d6:12:7e:a4:9b:25:e8:9f:4f:70:56:77:ea:b2:03:b8:14:92:
4d:54:77:45:1e:00:52:ca:4a:04:9d:03:85:e5:36:0f:3a:3f:
58:81:ad:bb:84:8c:b3:12:6b:ee:5a:39:4a:78:ad:fb:21:be:
2c:60:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:26:04 2025 by rpki-client