This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: 6zqB2CHSVGv0BVU5vgYsT2T1t6wkvrjIU6wwqOtNT1k=
Subject key identifier: 8B:BF:9E:41:6C:1E:62:5B:0E:00:74:5C:C4:66:99:89:42:CA:DD:16
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 0812
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 07FF
Signing time: Sat 20 Dec 2025 20:27:57 +0000
Manifest this update: Sat 20 Dec 2025 20:27:57 +0000
Manifest next update: Sat 27 Dec 2025 20:27:57 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: g26eF/Fh8PEiBTn8iM9iO7O70RcoVZwwERPyoXgJAcI=)
2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=)
3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=)
4: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2066 (0x812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: Dec 20 20:27:57 2025 GMT
Not After : Dec 27 20:27:57 2025 GMT
Subject: CN=694706cd-2fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e6:d6:1d:3a:a5:1e:ee:d2:46:a1:ef:d8:d7:
6d:5c:17:03:1d:03:85:ae:07:f8:ba:c4:8a:1a:5c:
5f:04:22:1c:52:82:ed:02:36:fc:db:cf:f9:bb:8e:
83:70:f5:e3:73:30:3d:9b:cd:e4:7d:0f:f1:87:14:
bc:3c:09:65:39:2e:24:d0:3f:c9:b2:2d:55:2d:b7:
36:ee:da:fc:ed:4f:a6:18:44:6a:51:66:e8:7a:b4:
d3:0e:4f:3a:3c:25:0a:7d:b6:be:bd:46:cb:2b:2a:
26:cb:2a:d2:6a:6b:be:b6:33:1f:de:b9:02:90:88:
6e:78:9f:cf:f6:7b:af:04:77:07:29:1d:63:a1:6a:
5c:0d:a4:6c:18:7f:50:94:52:d8:26:6c:23:c6:10:
fc:0e:41:7f:65:31:ec:00:04:dd:43:9b:69:e4:69:
3e:c2:67:92:9f:c0:7d:7f:e8:56:f8:54:58:9d:8a:
e6:83:52:aa:f2:7e:c3:28:cb:7d:9a:44:6f:28:13:
06:fd:a7:21:e3:78:06:a0:f5:65:b8:4a:a0:b9:06:
41:1f:02:20:db:fe:ee:4d:a5:42:c7:87:5c:9d:2b:
63:46:0d:0a:60:e7:f1:06:21:bb:f0:4f:f2:fe:30:
4b:35:c2:da:a0:d5:12:ae:ab:48:fb:44:b5:45:22:
bc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:9E:41:6C:1E:62:5B:0E:00:74:5C:C4:66:99:89:42:CA:DD:16
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b2:97:d1:fc:09:59:30:1b:15:2f:1f:14:d2:fc:1f:c3:f8:
0f:70:13:45:63:48:82:3b:39:67:88:22:80:f5:c2:5d:a8:63:
a0:aa:ff:9e:60:f8:24:45:91:ea:74:c2:48:5c:d5:8f:64:19:
84:e9:99:d9:c3:d1:d1:72:c6:36:ce:59:a9:01:85:e1:08:a1:
ad:4e:3d:7a:d4:49:2a:90:4c:18:06:d8:a3:bc:17:5c:93:6d:
ff:0c:7c:ba:2f:ca:ae:4e:1f:f0:7a:af:5d:97:ca:b9:96:7f:
4b:ab:1d:a7:76:9e:7e:4b:e3:8c:35:02:c7:b9:0e:59:1e:b9:
67:31:00:17:1f:5c:e1:5f:b6:96:13:a9:d9:93:6b:50:ce:db:
b3:03:5e:3d:ca:d5:51:5c:78:e5:d0:e2:99:90:ea:22:1c:3b:
0f:e5:26:d3:b6:60:74:43:42:34:32:0b:44:f2:d8:43:64:85:
a5:a4:da:1f:f3:0f:93:74:ef:4b:e6:ed:33:ba:02:fc:66:cb:
cb:eb:86:48:79:22:85:95:ac:ae:42:4a:9d:8b:82:ca:9f:70:
8a:f4:c3:77:fa:38:28:11:1a:37:23:a2:7c:b4:6e:39:a3:55:
67:d4:43:5d:a5:30:b6:86:2a:c3:23:2d:55:9e:56:af:b9:d4:
64:98:f5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:16:33 2025 by rpki-client