This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
File: MfN4PHoe14P8H9p0H2p1KdWl5qA.mft (raw, json)
Hash identifier: +QoJzpJmrlM4v9Zq7a8O64Ry3VysDch931VwaKvg16Q=
Subject key identifier: F0:DD:A9:9A:8C:A8:86:37:86:77:B7:00:AA:D9:01:5A:39:3D:1E:7E
Authority key identifier: 31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
Certificate issuer: /CN=A9199B24/serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Certificate serial: 04F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
Manifest number: 04EB
Signing time: Mon 22 Dec 2025 22:49:45 +0000
Manifest this update: Mon 22 Dec 2025 22:49:45 +0000
Manifest next update: Mon 29 Dec 2025 22:49:45 +0000
Files and hashes: 1: MfN4PHoe14P8H9p0H2p1KdWl5qA.crl (hash: bxZX6jmc7CQWmARrFip+IUygaOiqUFtOAjPcb1O1PNM=)
2: CF272560413111ECB71E086AC4F9AE02.roa (hash: 9Err5N47iBStiiEq7wvtNEepSJzcavlaCIsiDNB7cfk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B24, serialNumber=31F3783C7A1ED783FC1FDA741F6A7529D5A5E6A0
Validity
Not Before: Dec 22 22:49:45 2025 GMT
Not After : Dec 29 22:49:45 2025 GMT
Subject: CN=6949cb09-4a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:07:4b:27:e1:17:a5:37:83:7d:ad:c3:aa:
5c:c1:f8:d3:de:31:6e:78:af:4c:d5:cf:d2:bb:f6:
f9:cc:20:00:4f:ec:96:17:fd:a0:34:86:2b:bc:4d:
c6:8e:d4:4f:10:f9:53:aa:6d:b3:7a:46:49:cf:33:
1c:38:5b:5c:29:a9:f3:db:e3:a5:1f:3a:ef:d4:93:
cd:d2:85:68:63:3d:10:a1:2b:22:b3:ca:0d:41:d5:
78:7f:13:12:68:24:94:16:93:dd:f9:9e:a7:0c:a0:
eb:78:ab:fc:4b:1f:cd:7d:ea:40:2b:a7:2e:db:db:
24:3c:78:57:35:8c:66:79:23:69:3f:55:a7:89:b7:
12:ed:76:f9:09:dc:a6:d1:33:db:cc:75:01:2a:de:
c5:55:ab:d0:36:03:d1:7c:ee:bf:fe:35:94:f6:4c:
55:86:4c:be:a1:4d:a8:d1:c0:9f:7a:b5:0f:e7:8a:
e4:e4:5b:28:4b:0a:dc:e2:06:0b:45:c6:4b:96:a2:
3a:7d:5d:da:a5:44:e4:80:64:63:0d:95:08:19:04:
1d:a2:91:ef:7f:0a:33:3d:36:b4:f1:a2:44:7a:c0:
70:b9:bb:3f:14:03:67:f9:94:de:1c:d3:65:b1:8b:
1a:ae:5d:9b:a1:e2:91:8b:a9:be:0f:5e:0f:19:89:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DD:A9:9A:8C:A8:86:37:86:77:B7:00:AA:D9:01:5A:39:3D:1E:7E
X509v3 Authority Key Identifier:
keyid:31:F3:78:3C:7A:1E:D7:83:FC:1F:DA:74:1F:6A:75:29:D5:A5:E6:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfN4PHoe14P8H9p0H2p1KdWl5qA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B24/5FFC9EF6412511ECB7DF477EC4F9AE02/MfN4PHoe14P8H9p0H2p1KdWl5qA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cd:de:b0:50:54:94:fc:2c:8e:6e:40:9b:cb:e4:90:1f:3c:
fb:48:99:41:22:7b:d8:ed:2e:d0:2b:48:0f:65:39:f6:64:b8:
7d:63:c6:71:bf:64:26:0a:c1:4c:ce:06:8e:38:c8:e8:7f:86:
f7:d4:68:16:bd:03:85:b9:72:51:e3:0a:53:ad:d8:67:cb:02:
fa:0f:ad:69:53:fc:3b:98:c7:d5:2f:bc:b9:33:06:c3:be:cf:
da:ec:57:d8:82:34:fc:40:85:76:8b:9c:2d:8b:ac:83:db:6b:
61:4b:4b:20:1f:4e:b3:6d:f4:18:6c:49:31:1b:6b:0a:37:1d:
95:e8:fd:2f:82:43:e8:8b:02:56:a6:d0:15:f5:b5:20:d0:19:
69:5c:c8:fb:a9:77:36:3a:9e:68:0c:a2:09:47:e2:a1:8b:7d:
a1:9f:fe:fe:da:39:5d:3c:22:b1:4f:93:35:c9:77:84:d3:69:
f7:6d:98:8c:12:19:47:ad:d4:5d:e9:72:8a:ab:ee:35:07:d7:
f3:51:9e:62:2e:4c:de:e4:17:ce:ff:c3:36:fa:13:87:13:47:
05:f5:d8:04:dc:c5:69:0f:a1:3a:9c:f7:1b:b5:d2:90:cc:94:
9b:77:bf:01:cb:7f:73:86:50:1f:c5:a6:21:d6:38:46:3f:a8:
c3:41:d7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:13 2025 by rpki-client