This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File: 4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier: zt0QwWeWpVuKB5zQRo4TkB/U2juwI6idBo765cuyiVE=
Subject key identifier: 81:9F:24:16:EE:F2:4E:DE:EE:64:2C:75:DE:A9:C3:9F:25:DB:82:BD
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer: /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number: 56
Signing time: Tue 23 Dec 2025 06:06:49 +0000
Manifest this update: Tue 23 Dec 2025 06:06:49 +0000
Manifest next update: Tue 30 Dec 2025 06:06:49 +0000
Files and hashes: 1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: NVlTrmMoPuLWo3cGrzCbWeza/pQI7oeAM/nDyE4pwQ0=)
2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: VJHNLTTmYE0OnrSaYRsFhyrLIddh+nJKNb/E2v8OcCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Validity
Not Before: Dec 23 06:06:49 2025 GMT
Not After : Dec 30 06:06:49 2025 GMT
Subject: CN=694a3179-c0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:25:b6:09:32:51:70:16:2d:4b:f1:43:26:
33:c5:c9:35:3a:a2:73:92:21:a6:a1:de:f5:00:04:
5f:2e:1b:65:ed:6a:95:a0:83:2f:eb:c0:2b:1c:2e:
97:c7:6c:ce:11:d4:4c:b5:7d:b7:2f:12:98:e3:1c:
9e:10:dd:f0:59:9a:79:17:8c:42:d0:24:f0:bf:ff:
0f:a5:eb:f7:80:78:00:77:a5:50:0a:64:4c:5f:03:
77:ce:f8:89:10:b8:f4:2d:bf:38:d8:ec:92:01:17:
39:2f:e6:5b:42:1a:83:83:3a:71:71:ec:bf:b9:cb:
e1:f3:39:a3:70:49:52:8f:60:8f:ab:81:f4:c8:24:
09:1e:49:45:e1:bc:d8:25:74:20:67:f4:32:14:9a:
0f:ed:43:b6:09:1b:09:fb:8e:a8:0b:36:88:33:8f:
a4:b7:c6:e3:cb:75:5b:19:60:3e:9d:cf:83:90:d5:
56:33:fc:01:4c:ec:5a:31:1f:8f:fd:c1:46:b1:7b:
38:79:0a:23:22:11:4a:b6:7c:64:ed:cb:c6:25:b4:
bb:ca:9c:28:67:da:18:5f:5d:be:0b:28:17:86:79:
1b:4d:ea:43:52:7f:0a:ed:4f:d3:a8:96:5d:80:5a:
95:d7:32:62:91:82:0d:86:ba:c9:5e:6a:a8:be:b5:
29:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:24:16:EE:F2:4E:DE:EE:64:2C:75:DE:A9:C3:9F:25:DB:82:BD
X509v3 Authority Key Identifier:
keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:d1:89:a4:24:13:d6:3c:e7:08:9f:0e:15:a9:66:91:61:d6:
59:83:1e:e6:93:4b:da:60:22:b5:70:bf:6a:06:f4:1a:ae:20:
12:e0:53:31:24:14:47:f0:28:ad:7e:27:35:3b:8c:13:85:7b:
4d:a5:2e:28:9d:9f:09:1b:f6:a8:48:cb:80:68:10:bc:27:d1:
4d:b5:37:ad:b0:6e:8e:b1:37:14:f1:b5:b6:1a:6e:a4:f0:71:
8a:0a:cd:54:d5:d7:c0:0e:9f:18:71:74:94:89:c1:db:42:21:
ba:12:17:09:c8:1c:1a:93:91:0b:0e:6d:ca:b0:d3:23:e9:d6:
da:61:b5:a3:2e:1f:5f:2e:d8:e1:d5:00:d0:d9:bc:c8:38:b2:
41:91:b9:33:9b:3d:34:69:c3:33:1a:26:d8:53:90:90:70:42:
ae:9c:3b:3d:a3:37:2f:74:f5:8c:c9:c7:e7:18:f3:68:13:53:
1b:4d:77:0a:06:e8:99:c6:03:ff:5f:a3:02:9d:6f:e0:91:ee:
96:36:85:19:92:bd:f3:76:95:20:e0:8f:e2:c5:85:91:41:82:
10:f6:db:39:28:40:bf:9e:e0:3e:e2:c3:1e:79:34:b1:30:d0:
09:fc:66:c1:f7:73:9f:82:82:ba:a5:8f:af:68:5b:e4:ab:16:
66:c8:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:38 2025 by rpki-client