This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
File: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft (raw, json)
Hash identifier: FOGm1WfqSU7/0Rkm1dGiDc60jVUCh+g11imAcLMwW9U=
Subject key identifier: 0F:78:76:6F:D8:4B:15:F7:D2:6E:5C:B0:73:8A:19:2C:2C:C2:64:D1
Authority key identifier: E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
Certificate issuer: /CN=A91FD8BE/serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Certificate serial: 0154
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
Manifest number: 0149
Signing time: Fri 05 Dec 2025 02:30:22 +0000
Manifest this update: Fri 05 Dec 2025 02:30:22 +0000
Manifest next update: Fri 12 Dec 2025 02:30:22 +0000
Files and hashes: 1: 4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl (hash: eky4jRZMK7UvrDAVzxHkhVxJYnBGWB3+F1Bf1bLCsXM=)
2: DAEB24B0176111EFAB2AD122C4F9AE02.roa (hash: w52d9OuktB7yo9yKgF19teLaRAwVoNJ/C/T16AevquE=)
3: A475B3E000B511EF96C1B911C4F9AE02.roa (hash: MNv7Tv9JE/4kyK1NNSNq4H6AovhKI1wlDUP/bnL+AHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD8BE, serialNumber=E3F18D412026F31BA443EA33F56706FFB2F0F162
Validity
Not Before: Dec 5 02:30:22 2025 GMT
Not After : Dec 12 02:30:22 2025 GMT
Subject: CN=693243be-94c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:bb:51:58:e0:9e:c3:42:7b:37:18:57:e8:
78:76:75:b6:76:e3:24:fa:55:0d:f7:18:6c:6a:1d:
9c:00:ee:c0:99:1d:17:2d:0c:15:d5:25:01:24:d5:
c7:86:36:ed:17:c8:f5:7f:d3:1d:fc:4e:3b:29:95:
9b:00:b7:aa:fe:a6:54:4a:a4:c1:b4:f6:3f:25:58:
08:ab:df:4a:5f:4b:9a:04:22:db:0f:22:ff:fc:69:
e4:af:ef:50:25:4d:77:65:f3:da:4a:de:a9:3b:43:
2e:9c:3c:d9:88:c5:71:e4:19:f6:b4:8d:7c:89:2c:
8a:e6:26:2c:75:72:73:9f:fd:ed:7d:b0:a7:41:e6:
fb:f8:fb:e3:90:e2:0d:e6:a8:87:66:f9:15:7d:72:
a2:99:da:df:1a:f5:43:bc:d8:19:19:08:1a:a4:8a:
fd:45:68:d1:c5:8f:39:be:c7:f6:1e:42:33:cb:f7:
a8:a7:5f:d6:f3:39:07:a5:09:b3:7d:4e:f2:0b:8a:
af:00:f5:e0:f6:63:3e:1c:1b:16:d5:37:ee:b0:31:
10:99:62:8e:1d:ef:08:93:8c:3d:32:ad:e6:6d:11:
36:a3:63:6c:ce:20:27:ea:a2:b9:77:51:01:72:c5:
8e:84:4a:22:c4:1d:ef:ee:cd:0e:29:29:af:f5:b5:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:76:6F:D8:4B:15:F7:D2:6E:5C:B0:73:8A:19:2C:2C:C2:64:D1
X509v3 Authority Key Identifier:
keyid:E3:F1:8D:41:20:26:F3:1B:A4:43:EA:33:F5:67:06:FF:B2:F0:F1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD8BE/C68EFF9EE5D611EE8B356739C4F9AE02/4_GNQSAm8xukQ-oz9WcG_7Lw8WI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:26:37:c4:ec:52:99:56:1a:ff:ae:cc:42:e7:0e:df:e8:
b0:eb:42:d8:fb:6f:6e:50:fd:03:0c:77:69:85:94:62:cc:78:
bb:29:30:f1:4d:06:c2:0b:ba:df:a0:a6:b3:a6:63:f5:8d:ea:
c1:6c:29:89:02:95:bb:66:ea:59:ad:c8:9f:8c:40:f6:b5:ba:
07:5b:cc:83:ee:a1:84:d8:57:da:35:28:b2:98:33:ef:e2:54:
92:ca:f4:6b:9b:9b:78:bd:05:ee:27:18:18:c8:58:01:de:26:
f4:05:f9:69:d0:b9:70:60:fa:03:d7:bd:67:94:83:fc:ac:93:
9a:38:6e:3c:59:c9:12:b6:72:e0:d3:a1:3e:c3:99:26:43:9c:
f7:77:c8:68:37:60:02:8c:44:95:9e:e6:55:4f:cb:df:bd:44:
a1:bb:39:c7:59:0a:f6:f8:8d:72:1b:4b:8a:6a:4f:58:53:fb:
b7:16:2d:19:2c:ab:1c:00:8a:90:ea:d5:3d:de:78:7d:d5:fe:
1d:f7:03:92:bd:d3:ce:85:49:fb:b2:00:43:38:9d:4f:63:d1:
b6:64:59:81:7e:93:36:44:55:7a:cc:ff:07:96:5a:3c:38:ec:
4a:d1:08:ca:ea:df:24:76:57:26:f6:64:cb:8f:37:dd:c1:7b:
0d:55:4d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:24:04 2025 by rpki-client