This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier: eBN+eI/MEn3d15lbHT1Ix0tMlWkqCunvUCdU+kGCk3g=
Subject key identifier: E2:13:66:5D:E5:50:91:B1:A4:B2:DF:C1:1E:24:30:DD:A6:0F:70:B4
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial: 095B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number: 093F
Signing time: Wed 24 Dec 2025 19:41:03 +0000
Manifest this update: Wed 24 Dec 2025 19:41:03 +0000
Manifest next update: Wed 31 Dec 2025 19:41:03 +0000
Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: QX5JTw3WZgjhPyBWl/wZWazGimU/6Ap+TOGBZtUvhi0=)
2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: RO65RMNM2Nj+skVx9D4SwK+SURjH9kvIKLTrXVq1cDk=)
3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: AMggt9zpwS0BRdqI+ClPrj6WWxTra7y9F4TlC3w0Ums=)
4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: rJeii+ilF+9cVriG2vucr/nhWEU/kidxHLEjPFgUME0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395 (0x95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Validity
Not Before: Dec 24 19:41:03 2025 GMT
Not After : Dec 31 19:41:03 2025 GMT
Subject: CN=694c41cf-acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c7:ad:a1:f7:3c:c2:35:69:9b:bc:a5:55:a0:
14:e0:53:41:82:77:9e:84:33:cb:0b:58:15:29:2c:
54:5e:0e:2e:08:69:7e:8f:2b:25:0e:46:46:f4:b6:
a9:17:8c:a0:37:16:03:d5:d0:b7:39:47:1c:c6:9b:
95:87:90:ff:f8:8b:7b:4e:eb:8c:ef:e2:b7:2d:0b:
38:8b:59:74:90:00:32:64:77:77:bd:07:38:14:3f:
cd:d0:05:bd:6c:ed:10:ec:19:fa:97:96:56:03:f7:
2c:a0:63:14:a0:06:34:e0:a4:cc:0c:67:4d:b3:dd:
f8:6c:48:45:a4:8d:32:37:e4:1c:07:b5:6e:9c:cd:
75:08:92:29:26:06:fc:19:e1:d7:b1:8c:37:46:4d:
3d:27:0e:84:22:f2:35:c4:ee:81:06:3c:e3:cd:88:
15:a9:59:90:37:85:af:25:19:82:ce:45:90:a6:c3:
1a:0e:10:39:c5:82:3c:c4:90:4f:40:f5:c2:37:07:
6c:9c:a9:c5:c2:c2:fb:7b:dd:39:94:70:32:c1:75:
36:fd:eb:e8:54:d1:3b:3d:c8:93:e5:83:e6:6c:51:
9e:9e:fa:22:d6:58:e7:e5:d7:67:c6:8c:0d:8a:0f:
5e:f4:31:d6:1e:96:67:a0:ff:e5:49:38:55:c0:3b:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:66:5D:E5:50:91:B1:A4:B2:DF:C1:1E:24:30:DD:A6:0F:70:B4
X509v3 Authority Key Identifier:
keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:ce:82:3a:ab:85:07:fa:43:03:d4:f4:ce:bb:df:9e:f1:
3f:6d:9d:d3:af:2a:09:73:d1:97:50:90:6b:b6:b0:6c:6c:ba:
38:36:73:8f:a4:fa:20:62:5e:ac:ae:2c:29:54:96:98:a2:71:
44:ab:dd:8c:fa:3e:c1:61:d2:1f:7e:d8:6f:c7:10:08:9c:bc:
6f:5d:69:80:b5:c9:06:c1:20:4d:a5:ef:e1:93:fc:07:f3:4b:
86:c3:7f:cb:e2:08:e0:e0:e0:57:2a:f0:bd:6e:b8:15:8a:e5:
35:9f:b2:63:46:b9:3d:2b:4f:34:5f:44:d1:2b:7d:5b:63:b6:
19:fc:2f:86:e4:9d:1d:63:64:f4:86:ff:b0:fd:30:a4:0e:28:
46:73:eb:3e:8f:d0:ff:1e:ad:56:84:62:24:58:c5:9a:c7:9b:
16:d8:41:9a:9a:06:e5:fd:f9:5d:98:7b:38:b8:3c:7c:5a:78:
71:47:c5:5f:08:0f:72:10:e1:ab:c0:9a:17:54:09:f4:82:9a:
dc:b7:d6:a8:79:82:2e:6e:2e:ad:10:21:46:66:5f:b1:01:f8:
6b:8b:f0:93:72:33:02:db:b7:be:6c:2f:52:25:c8:76:35:3b:
14:18:30:79:3e:c0:d5:6b:e0:1d:53:e0:bb:f8:f0:08:0c:26:
01:f6:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:23:55 2025 by rpki-client