This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
File: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json)
Hash identifier: R7KnCkCB7hBwdWlA+LaW7UVPIiSaRJsreiEzEnq/flw=
Subject key identifier: 55:C3:82:B6:AA:0E:A2:F6:F7:D1:A9:0A:3F:E2:8E:2E:AE:48:43:AB
Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17
Certificate issuer: /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
Manifest number: 01A9
Signing time: Sun 21 Dec 2025 02:29:56 +0000
Manifest this update: Sun 21 Dec 2025 02:29:55 +0000
Manifest next update: Sun 28 Dec 2025 02:29:55 +0000
Files and hashes: 1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: /i+sEt9mbRPwMZLqp5jACIOHHeHZe2j54JhhaE/AeLg=)
2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: bS8h4mf+TAqqcX3N8ahcjF8flM6BLK11pvGC+g7HkGA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl
rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C948, serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
Validity
Not Before: Dec 21 02:29:55 2025 GMT
Not After : Dec 28 02:29:55 2025 GMT
Subject: CN=69475ba3-9c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:94:e6:bd:98:53:72:6d:27:af:09:5d:e5:
86:3a:2f:a9:6e:11:0c:60:d9:dc:5e:5a:f6:ce:90:
a3:af:7f:d7:ed:92:35:b5:03:13:02:a1:e9:c2:f5:
ec:95:3f:56:b3:ea:1a:43:40:c4:e3:b2:6b:e6:3d:
46:19:3e:05:b1:39:d6:18:44:8b:ee:3c:f8:00:e1:
fd:77:66:1c:53:32:59:37:a9:b2:2c:7c:25:e9:25:
70:ad:b4:ac:d8:06:ca:6f:c5:8d:55:56:19:16:5f:
6e:0c:64:b8:94:12:96:25:c1:92:50:4c:10:3f:87:
69:6a:2c:3b:29:69:27:3e:3a:d6:36:20:3e:2c:f7:
b3:f3:ed:26:01:20:d6:84:39:3f:6c:8d:41:e9:e0:
bb:1f:2f:28:86:96:30:ca:aa:f8:5a:c1:b3:13:46:
01:a0:c3:30:2b:06:97:6e:c2:cc:bd:88:b6:4e:82:
aa:14:4f:f1:4e:f7:7e:7a:cf:c3:88:1b:f4:32:a8:
04:a1:8a:d5:dc:37:25:1d:b8:7b:5c:64:fc:c9:22:
2a:df:20:d8:2d:14:f9:70:b8:76:d7:da:18:f2:31:
68:b0:41:bb:2e:ab:0d:9f:de:74:ab:81:1c:e8:41:
65:4a:bf:f2:85:32:5c:ac:d3:fe:b0:b5:09:0e:60:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:82:B6:AA:0E:A2:F6:F7:D1:A9:0A:3F:E2:8E:2E:AE:48:43:AB
X509v3 Authority Key Identifier:
keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cb:29:a8:96:31:25:ea:98:24:4a:85:e3:bd:1a:25:a1:00:
77:6e:b1:07:f7:55:38:da:45:88:e8:c6:15:5d:ff:a8:bf:64:
c4:71:7b:0c:b3:72:da:11:74:4f:5a:8a:ac:7e:ce:f2:a7:ed:
1f:06:2a:2c:a0:f2:8a:4a:0c:bb:61:62:3c:2b:b8:75:33:e4:
91:ae:61:29:a1:4c:87:d4:74:42:07:49:25:8f:74:a0:a4:87:
4c:6d:e4:09:3d:bd:23:56:3e:e7:00:4a:27:b3:85:d4:f9:70:
31:b9:66:50:7b:34:fc:15:b0:a9:05:03:eb:c8:44:d6:af:cb:
08:99:34:3b:06:db:6e:e3:f4:38:32:2b:a5:5c:28:92:c4:75:
84:07:04:ba:e0:16:0d:a0:bd:c5:5a:e9:96:5b:c5:10:a5:d5:
ef:27:0a:98:48:99:39:49:0b:5e:02:d0:66:98:9f:76:2f:d3:
74:c4:a8:c9:07:2d:5b:c9:a0:a7:11:0c:0b:45:30:a1:0d:78:
fe:03:8b:c1:ee:e4:38:74:a2:63:34:3a:5f:1e:af:5c:ac:7b:
1d:14:8e:ee:a4:8f:a3:65:07:2e:13:f2:6f:8f:f0:30:d6:ec:
fe:c6:96:e6:24:5a:b4:a9:cc:34:ff:5b:b3:8e:ce:a4:03:9f:
13:06:4d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:22:20 2025 by rpki-client