This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
File: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft (raw, json)
Hash identifier: EWKNinruwg+/1Lb7tCfbjGl/kVGm/pL3AMuPTL+bfwE=
Subject key identifier: 3E:58:AF:B0:CB:C0:DE:F5:E6:1D:D8:6C:50:CD:D4:0B:22:6B:46:8E
Authority key identifier: E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
Certificate issuer: /CN=A913B0D6/serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Certificate serial: 080D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
Manifest number: 0805
Signing time: Mon 22 Dec 2025 20:22:12 +0000
Manifest this update: Mon 22 Dec 2025 20:22:11 +0000
Manifest next update: Mon 29 Dec 2025 20:22:11 +0000
Files and hashes: 1: 4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl (hash: tSYFG4qMrKUPVZg6hoyiLmQou08GY0uQHvCl6JxxnzE=)
2: A7501D94086B11EBB0FF1A43C4F9AE02.roa (hash: pUsMoQNYddbaBRncCe385CofEgc91nu8PjnLEgH0J9o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2061 (0x80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B0D6, serialNumber=E2D813D66CE50DD938FC3A532DB8EDE2C5BA795C
Validity
Not Before: Dec 22 20:22:11 2025 GMT
Not After : Dec 29 20:22:11 2025 GMT
Subject: CN=6949a873-ac4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:6c:7a:76:59:00:dc:fb:ad:e2:4c:7a:82:
c3:31:de:4e:47:46:d7:53:ca:79:2b:28:39:43:7a:
e9:65:59:e1:a9:5b:74:06:f0:cd:f7:48:e3:78:e8:
09:ec:03:2f:09:0e:da:25:53:28:29:90:bf:eb:aa:
18:2f:48:fc:33:e4:21:28:d5:cb:a2:5f:76:f7:99:
9f:90:ba:09:53:18:0f:36:e0:cb:fb:bc:ce:20:a9:
49:45:e3:4a:24:4a:a9:24:b1:58:27:59:60:4b:00:
9f:96:c3:51:e0:87:f1:35:32:30:53:16:b8:5b:48:
02:43:d3:c6:b1:90:de:f0:24:e0:33:a8:37:9d:6b:
f0:22:ef:d5:b8:8d:8c:88:00:e8:ad:4c:59:b8:e4:
db:61:cc:e2:8c:0a:57:11:76:4f:b1:98:88:7d:9f:
fa:2f:41:ed:ff:4f:b7:80:ef:a2:8d:2d:a2:15:3e:
ef:f0:1b:da:fd:15:f3:54:d6:ce:c5:07:5b:48:55:
8d:c0:6e:61:8e:0d:eb:07:40:cf:d6:3b:38:a5:a8:
16:ee:43:c7:91:d0:b3:cc:80:61:03:17:13:d8:6b:
ab:53:39:27:56:56:24:03:e5:d8:59:21:3e:64:79:
da:d1:ef:4d:ce:b6:fd:1d:a7:ca:6b:a9:d0:bf:b9:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:AF:B0:CB:C0:DE:F5:E6:1D:D8:6C:50:CD:D4:0B:22:6B:46:8E
X509v3 Authority Key Identifier:
keyid:E2:D8:13:D6:6C:E5:0D:D9:38:FC:3A:53:2D:B8:ED:E2:C5:BA:79:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4tgT1mzlDdk4_DpTLbjt4sW6eVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B0D6/89A0E7A2086A11EB9DF33842C4F9AE02/4tgT1mzlDdk4_DpTLbjt4sW6eVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a3:4e:c3:b0:66:82:c0:35:14:8a:26:ef:f7:32:e7:56:8d:
2a:10:79:21:37:3a:f9:e5:2a:72:09:d0:2f:1a:49:8f:50:00:
f7:0f:9a:5a:70:ca:29:36:c9:3e:a2:fc:60:9f:9a:39:44:0f:
31:19:33:6c:6e:32:24:78:94:22:3f:c9:c4:9d:d9:8d:63:e6:
8b:8e:e4:52:d1:4f:67:4e:bd:d3:cf:a1:52:1f:a9:fa:33:82:
ae:bb:8c:74:ea:a7:f3:f9:75:c9:8e:ef:3b:c6:3b:d2:56:ad:
fb:88:21:08:0c:c3:62:9e:24:6c:8d:bd:55:70:a0:b2:34:e6:
7f:67:b1:aa:71:ef:8e:f9:1e:9c:88:2b:bc:e9:85:a8:88:1a:
2d:fc:fc:40:e6:0b:40:f9:f2:77:23:91:66:b1:73:97:1a:64:
20:51:18:c2:b0:a8:c2:45:39:bf:63:81:b3:9c:f2:5d:57:51:
a0:b7:bd:1f:6c:19:3f:39:13:10:f3:79:99:32:c1:dd:bb:35:
ad:17:51:07:fc:ef:f6:e7:0a:42:02:07:14:cf:ba:e9:0d:24:
7c:11:d3:60:92:fb:25:29:2d:9f:48:95:18:4c:95:18:b9:7b:
1b:d4:2b:7a:18:6a:43:ea:0a:ed:a3:74:b6:b8:f2:32:70:53:
99:f6:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:32:16 2025 by rpki-client