This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier: gKRM/fLZaYx5JL30nTQXm2ySUZZ/s9cTlyvKUI3itp8=
Subject key identifier: A0:C7:CA:3B:69:F8:FA:38:34:BE:32:59:4B:E4:DE:9C:B8:FD:F7:82
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 1394
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number: 1306
Signing time: Mon 22 Dec 2025 16:46:28 +0000
Manifest this update: Mon 22 Dec 2025 16:46:27 +0000
Manifest next update: Mon 29 Dec 2025 16:46:27 +0000
Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: N/cdsLqaRw1fSxYSX4svYDBI0AMDpIseUxlVvHV/nNg=)
2: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: r6ZmJmXo5KHVG/yLQVWI5msuFaPg0Y7qHUR8OuUmDmQ=)
3: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: u3hqsVF2IxROae06RgQqau4TwcmQ2hfIoS0ycS2ZYYk=)
4: 0038D872072E11EB8914E540C4F9AE02.roa (hash: Sm2BWR/x62V1ChSVqLl9qtUU2JtttSVmIcQ57lBV/yg=)
5: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: xso6zKvBbi3wM6Wy7sgUcNmQLyVakEEliXt2454vT2g=)
6: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: mBWzVj8R0JSgpTd2/lwo26j0nuTovGbgz3rVwBfIjuw=)
7: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: dSHlc69pRBGdn38cVlmBltnXpffbwXc9Xns6KXz/aJM=)
8: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: J5rudUriqxnG3Kj9XK1/m/G4HKNPvqCv13zNix3h72Y=)
9: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: 9AZNpWMBQO5+BmyYbBmo4faP647OYT7C6DNutUy5NOo=)
10: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GtCwmWc8gA6Yj8DbZ5w0Aat1zBOR2vnVTBDt8/HEVGA=)
11: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: FblJx4AhcAktvj2/dwTjDbd3uRT5iMvilMffwyS9Rtk=)
12: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: 4ijPBPOAaTXJb677dP3lcdQkWKRIh34QpbisACynIlc=)
13: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: 6+gB7mL+bEvy7oGoW94iW1fZ9WL9S07it/mKgQAz+c0=)
14: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 732T9uPwwK9ZGQYizjkN4dg8xKfMSmsajV4WXneqdWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5012 (0x1394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Dec 22 16:46:27 2025 GMT
Not After : Dec 29 16:46:27 2025 GMT
Subject: CN=694975e4-74f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:9d:db:a6:98:9a:52:8b:6c:2b:d4:7c:d4:
54:e4:60:ad:d1:54:8b:35:e0:92:7a:15:ad:09:24:
35:c0:ee:88:ac:fd:16:17:3b:7f:ba:3c:0c:0c:35:
ca:b6:22:af:c6:99:b4:be:3f:9a:af:c3:ec:73:b9:
34:6a:bf:04:1d:50:e7:15:7d:b4:f8:ad:c0:98:72:
0c:b1:ed:b6:f9:69:06:78:37:ab:a0:f8:a7:59:7d:
e4:50:1c:99:be:b7:01:a4:1d:52:ab:71:fc:cd:bb:
76:0d:8c:63:03:a2:8b:73:9b:b1:2d:1f:94:78:08:
ec:ef:4a:62:e1:7c:10:71:52:26:4e:7c:23:ab:75:
d3:dc:7e:6e:9d:63:aa:eb:0d:ea:19:e2:54:94:b4:
ee:64:84:56:23:cb:fb:5f:21:8c:1f:9a:5b:79:1f:
41:99:b9:44:83:f1:d9:fa:b7:ab:1d:7d:e6:d5:ba:
28:ee:ab:78:aa:cd:e8:6b:09:8c:41:b6:1b:1f:10:
fd:80:f8:38:66:e5:50:38:8f:9d:ce:89:62:03:31:
76:45:2e:ff:d7:52:cb:7d:9a:4d:fd:76:1b:07:8c:
3d:ea:38:26:34:c6:66:89:e6:99:bd:01:25:1d:4e:
0f:30:5b:cd:65:cc:64:38:6b:61:d1:14:ad:b9:0e:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:CA:3B:69:F8:FA:38:34:BE:32:59:4B:E4:DE:9C:B8:FD:F7:82
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:09:81:f3:56:05:87:ec:7a:1b:09:60:07:cd:fa:c6:95:ef:
96:83:be:ba:05:e0:2e:cd:4a:7d:6d:62:c9:4d:1d:6d:83:d8:
5e:31:d9:51:1e:97:b7:f3:e0:85:b4:d3:f6:15:99:10:41:81:
7d:67:4a:cd:8b:b2:32:76:a1:7d:6e:53:55:3a:64:fe:c0:93:
7d:6b:46:27:f6:95:f4:dc:82:9e:c7:e4:61:af:8d:95:e3:7b:
51:1e:00:1f:e9:75:79:ca:4d:00:ff:fd:a4:09:2c:34:6b:9b:
af:c8:76:56:ba:58:77:c0:84:02:1a:a9:5c:12:77:14:2b:6c:
7b:ef:2b:cf:e8:05:a0:f9:3e:64:44:7e:36:a1:6f:07:53:5b:
dc:47:1b:d2:cd:20:8f:bc:76:40:32:cf:e1:27:30:64:69:ce:
24:d5:25:b4:c5:c2:5d:f4:97:22:d6:46:b4:b7:2f:6c:9b:40:
8f:da:ea:c9:5b:f3:eb:f9:7a:5a:c2:3a:81:c0:05:8b:b4:54:
a9:ad:eb:03:6a:a1:a6:ba:42:f6:16:33:bc:a3:4f:8a:38:57:
3f:08:aa:2f:74:d4:74:17:52:a7:48:57:be:b6:78:6f:65:7a:
eb:7f:6e:e4:91:b9:d3:bd:46:f9:9c:d0:a1:ca:39:bc:22:c1:
45:6f:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:20:05 2025 by rpki-client