This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier: AXxbKJEtB9VX5EKQjZC6uu2dEWgotPa/qVuMhXPGIs8=
Subject key identifier: E2:D3:7B:C8:F6:C6:E8:53:E3:79:C9:59:48:8E:A5:DE:09:F1:88:71
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 137D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number: 12FC
Signing time: Sat 06 Dec 2025 16:36:03 +0000
Manifest this update: Sat 06 Dec 2025 16:36:03 +0000
Manifest next update: Sat 13 Dec 2025 16:36:03 +0000
Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: qLJMPSfKDocn9+ukKP0qRK4dSNENsklGOXbQSLxvJ5g=)
2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
6: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: RjqRbyNMK1bVIARBTioOMwGD64cpM4a47WdlllK30gY=)
7: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: pBVdrYkFMYbMM7FXnA5NEHBFD69jZzGLSHL7ZsHrvao=)
8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
10: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
11: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
12: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: FCJ0Leshn5Im37PLEajQHqEp0O35Wv4DJOyaOelwlCs=)
13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4989 (0x137d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Dec 6 16:36:03 2025 GMT
Not After : Dec 13 16:36:03 2025 GMT
Subject: CN=69345b73-9db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:ca:68:08:91:67:bd:d7:e3:31:a8:16:23:
eb:37:06:30:fc:e2:cf:91:f0:3e:19:36:d9:8c:dd:
fa:ba:1d:f5:91:dd:a8:e1:22:e0:fd:ec:68:6c:4e:
70:a3:76:40:59:7c:60:bc:34:01:7c:e6:27:6c:e7:
8a:8c:a5:bc:21:7a:13:4c:6c:34:6f:fc:44:00:e5:
61:3c:a7:d6:24:09:3e:50:a1:47:6d:7a:b8:5d:9b:
cc:b2:c0:74:c5:f2:1c:c4:00:18:0e:e6:d8:fc:73:
8d:fb:ed:c1:af:99:1c:10:69:a2:48:d5:8b:7c:61:
0c:dd:39:3f:2d:3a:55:85:f8:88:87:b8:eb:7e:a6:
17:cf:65:61:de:fc:96:39:3d:cb:26:33:f1:0a:e6:
93:4d:77:3c:43:19:90:0f:cd:c1:b4:82:f7:5c:f6:
f3:d2:b2:01:91:4f:5b:45:02:68:2e:68:38:a8:cd:
5a:e7:cc:23:f5:79:17:46:ba:67:0c:90:27:e2:54:
18:bc:b5:56:93:37:ff:40:e2:3c:bd:92:69:fe:d4:
9b:15:36:7e:91:06:6c:95:b1:9c:16:c9:db:dd:af:
27:d3:2f:6b:ba:cb:d0:cb:8c:ba:b4:ba:b5:d2:d5:
0f:c2:8f:16:72:80:46:62:cb:4a:55:ad:d2:ea:05:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:7B:C8:F6:C6:E8:53:E3:79:C9:59:48:8E:A5:DE:09:F1:88:71
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:08:e5:ee:13:06:18:62:5a:96:11:3c:08:22:ef:57:ee:c2:
31:83:ca:7b:c4:c4:0f:ed:4f:df:00:21:30:a9:bb:bd:47:ea:
a1:04:97:d5:07:b2:e2:86:86:2d:ef:e8:0d:d9:b1:24:98:94:
6c:1d:51:ea:53:38:83:0d:75:1a:7a:80:f6:a1:d9:4f:6f:31:
25:f2:6e:bb:0e:f9:7e:e3:d6:79:a5:49:27:b7:2b:87:74:5a:
28:4e:4e:3a:24:ce:bb:21:6a:8e:b8:15:e5:ca:f5:8d:7d:1c:
76:7f:26:c3:34:d8:1a:72:69:5b:6b:48:4d:d0:ca:02:ee:76:
d8:4c:b8:20:79:25:0a:c4:f1:11:a0:74:d0:72:7d:78:01:2d:
46:ca:9d:d4:49:9f:cf:83:78:68:68:7a:ec:60:f1:57:a4:1e:
06:a5:a1:d6:f2:4e:08:07:ac:5d:e8:3f:9f:f8:8e:7a:85:68:
2a:4e:f9:1e:58:04:b4:87:44:fc:e7:10:ae:3d:c4:f6:0c:6a:
85:c6:21:96:75:05:f8:69:cf:97:5b:c0:b9:da:ae:4b:12:00:
4d:88:95:7d:23:3e:ca:43:73:3b:f0:81:f9:5f:d2:32:88:e6:
70:99:85:d2:bf:37:1d:64:a8:d7:a4:dc:49:ad:b6:27:4c:bb:
72:6f:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:31 2025 by rpki-client