This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
File: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft (raw, json)
Hash identifier: MhTdzIzdiEmeT2HyW6LtqLRuCy0ETHD3tB+d4wiKN/Q=
Subject key identifier: 0A:F7:4E:B1:8F:BD:2D:0E:4A:7D:D1:BE:82:F4:2E:FF:34:61:F9:9F
Authority key identifier: E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
Certificate issuer: /CN=A9149B61/serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Certificate serial: 01CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
Manifest number: 01C4
Signing time: Sun 21 Dec 2025 02:11:47 +0000
Manifest this update: Sun 21 Dec 2025 02:11:47 +0000
Manifest next update: Sun 28 Dec 2025 02:11:47 +0000
Files and hashes: 1: 4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl (hash: 6kzpFfehgJPP6Inq78zCiSd9m4wStY9f4whJnnxsvpg=)
2: 10F1A0582B8511EEA7FF697BC4F9AE02.roa (hash: imnNT9qYRRIcc5JHDTtnRt4iRKv++5OKcbvGmRUGbZg=)
3: D4FD2A902B8411EEBCDBEF7AC4F9AE02.roa (hash: st8PwK196xNld8O2k0lKE8037dLGvSfGuDJRF0i8kvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:11:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149B61, serialNumber=E3E100F804013A05F922EE11CB4E0ABEA6C22B98
Validity
Not Before: Dec 21 02:11:47 2025 GMT
Not After : Dec 28 02:11:47 2025 GMT
Subject: CN=69475763-26e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7b:77:c6:75:24:99:73:09:40:44:72:71:14:
2b:32:cd:da:23:6e:df:ee:94:ae:cf:cd:f1:c8:89:
20:c9:33:83:9a:52:40:b7:46:7a:f6:8e:72:57:b7:
e8:49:66:be:fa:d1:d3:e1:f0:0e:93:35:b5:1a:2c:
e6:31:3d:19:07:b0:6a:aa:b6:ba:5b:32:bc:f7:e7:
c1:0c:12:37:eb:20:e8:ab:33:0c:04:b6:b1:a2:38:
da:41:69:81:dc:cf:1d:e9:1f:ea:a9:4f:12:41:a1:
2a:91:3a:03:64:08:cc:02:3e:88:6c:25:35:e6:e1:
be:0c:9f:56:00:49:c5:97:40:2a:ea:e6:5f:2a:1c:
02:b0:c3:b8:94:37:ac:6e:0e:4f:ed:07:70:93:7a:
5e:1a:35:26:32:26:d7:25:d4:25:c0:a5:a2:3a:0e:
0d:4a:1b:78:49:fb:45:b6:56:11:00:a0:42:52:b0:
fd:fe:1c:e3:fa:4b:e7:de:f3:17:d1:d5:ea:d2:c7:
d2:77:9a:ad:9b:4a:5d:5f:92:e5:41:97:24:a0:07:
1b:f7:e4:8d:90:1e:c4:ee:74:f7:1b:9c:65:96:80:
dd:bd:4e:60:85:37:51:80:58:23:a7:77:65:86:e5:
58:96:e5:de:92:31:e1:d1:f9:f7:33:86:0d:e6:d9:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F7:4E:B1:8F:BD:2D:0E:4A:7D:D1:BE:82:F4:2E:FF:34:61:F9:9F
X509v3 Authority Key Identifier:
keyid:E3:E1:00:F8:04:01:3A:05:F9:22:EE:11:CB:4E:0A:BE:A6:C2:2B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149B61/7616D4FC2ACD11EEB7222C3CC4F9AE02/4-EA-AQBOgX5Iu4Ry04KvqbCK5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:bc:27:18:1d:3e:7a:24:d2:6d:41:45:a8:42:ce:2f:c2:
90:0c:8a:af:fe:8f:b1:6f:36:b0:5b:7b:1e:be:8c:f9:46:7a:
52:98:c8:17:ae:35:86:58:3a:1a:5a:72:ea:f5:f8:5b:78:d1:
2d:d4:16:6a:ac:bb:f6:f3:9f:92:21:1f:4d:48:e4:9e:0c:3e:
70:fb:d7:f1:d7:9a:d0:92:f3:f1:e9:d2:ee:05:29:b9:f5:b2:
77:6b:b3:ba:61:95:3b:61:56:0d:43:5a:ff:7c:29:c0:64:4d:
bd:b9:1b:5a:47:61:3f:df:a5:8e:82:69:f7:eb:9a:ee:c3:54:
e3:05:f6:fa:54:45:c0:67:c3:89:d6:06:45:28:5b:cd:d8:7e:
a2:0b:90:11:a5:7a:10:01:c0:25:3b:1f:46:c4:64:9d:67:b6:
43:af:08:3d:50:e6:7f:d5:b6:6b:53:01:48:02:1a:6b:4c:e8:
15:87:b9:8f:e1:07:93:81:11:0f:d4:a2:06:53:55:ec:d7:da:
b5:ef:43:6c:a3:24:b8:5d:06:87:5c:4c:75:44:46:36:0a:9d:
c9:00:89:ec:a7:ae:e3:5d:cc:5a:25:9c:52:3c:29:de:f1:d0:
88:d1:dd:22:c3:df:b6:88:1c:ec:bf:c0:04:fe:60:f5:92:0b:
50:f2:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 00:31:58 2025 by rpki-client