This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
File: 1BPN69UikmPRj0A_RCF4UlVUbMQ.mft (raw, json)
Hash identifier: jxZK52H29ijw3numMFHR5lymhF2Xdf/1vOnXcUXyk3I=
Subject key identifier: F0:27:DD:F5:4F:73:AD:3E:3A:85:B3:59:DD:2A:BA:EB:F9:59:54:D1
Authority key identifier: D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4
Certificate issuer: /CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4
Certificate serial: 044E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
Manifest number: 0448
Signing time: Mon 22 Dec 2025 23:17:34 +0000
Manifest this update: Mon 22 Dec 2025 23:17:33 +0000
Manifest next update: Mon 29 Dec 2025 23:17:33 +0000
Files and hashes: 1: 1BPN69UikmPRj0A_RCF4UlVUbMQ.crl (hash: gowXNCF/U8b8dZOyQ+n6kPJbiYVDGpW/jaLZxnm3K+A=)
2: 1ACED69481C311ECA399B842C4F9AE02.roa (hash: BNcGh7UXwQZUTjV9s8n1qenXxFnqiFck1fHPTljCPak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl
rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1102 (0x44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4F53, serialNumber=D413CDEBD5229263D18F403F4421785255546CC4
Validity
Not Before: Dec 22 23:17:33 2025 GMT
Not After : Dec 29 23:17:33 2025 GMT
Subject: CN=6949d18e-d223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:88:28:bb:76:8b:6f:66:f4:1b:ee:e1:24:
7b:21:5c:d5:b1:92:ee:29:02:29:8e:e5:74:97:57:
17:d6:5d:cd:82:52:a9:75:eb:de:4e:3a:62:69:5f:
88:43:87:13:65:84:19:e0:76:84:09:97:c8:fc:f3:
55:e5:9a:3f:53:66:dc:ac:29:cc:ee:e2:44:a6:b8:
6f:b9:ed:63:82:26:be:7e:0f:52:38:32:4b:0d:f6:
20:5d:33:24:e0:bb:c4:3e:8d:86:4a:6c:9e:f6:32:
f5:55:f1:de:b4:2c:c8:3b:a3:28:85:00:ea:20:f8:
e7:4b:e4:96:78:9f:35:d9:96:dc:72:98:11:83:9b:
aa:9c:9e:8b:6b:87:84:27:50:41:3c:57:4b:d6:69:
34:fc:a7:9e:88:b2:8c:70:b4:48:ff:26:48:20:c9:
48:6f:3c:90:42:e5:d1:fd:bb:e1:f8:98:fd:e5:fa:
c0:5b:6a:3a:41:b2:36:1d:2e:69:ef:76:d8:11:7b:
41:53:65:7e:46:c8:ff:d8:9c:d1:e5:39:57:d5:4e:
ed:6c:b0:54:73:24:5c:da:d0:0b:7f:57:af:f8:37:
0c:71:ba:4a:46:aa:fc:f2:72:4c:48:f3:81:35:7c:
70:98:19:60:e8:e2:45:cb:63:13:ce:47:35:bd:c4:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:DD:F5:4F:73:AD:3E:3A:85:B3:59:DD:2A:BA:EB:F9:59:54:D1
X509v3 Authority Key Identifier:
keyid:D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ec:6f:2f:10:ae:b8:9b:7e:2f:c5:b2:a0:14:49:5e:e1:ac:
6c:c5:24:00:3d:ab:81:3c:95:c0:39:ac:d4:af:4e:0c:59:a8:
bd:67:ef:d4:31:13:55:22:63:75:76:9d:74:69:1d:d9:f1:7e:
cd:06:7f:52:36:e7:79:67:70:7e:5e:1e:24:67:5c:c5:61:5d:
0c:a4:45:ab:d0:da:18:8c:87:d8:e2:62:43:ab:c3:bf:5b:97:
95:5f:ff:b0:8c:7a:e6:6a:e1:9d:b9:8f:5a:43:2a:00:22:1f:
d8:90:ff:f5:8c:bd:2e:8b:aa:32:b8:64:36:5f:9b:43:23:e8:
8d:da:30:d3:fc:e9:3d:61:c4:4b:0f:96:dc:4b:ab:6d:18:01:
e5:b5:bd:85:95:75:ff:d2:86:4e:85:86:27:49:a5:f5:a9:4b:
b2:78:79:6b:0a:8f:a8:a5:0e:c8:4c:bb:e7:09:ab:0a:34:12:
b7:af:88:6a:cf:a4:01:87:a6:71:34:26:be:3d:98:9c:37:09:
b2:eb:46:59:a1:17:88:8c:23:93:6f:36:4c:8f:b4:0c:9e:31:
53:5a:2c:bd:1a:96:ea:b2:db:ca:65:ac:78:e6:be:b5:10:ba:
eb:d4:90:19:92:56:67:9a:d2:39:d0:3e:16:c4:74:c5:47:65:
4e:5c:d6:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRGNTMxMTAvBgNVBAUTKEQ0MTNDREVCRDUyMjkyNjNEMThGNDAzRjQ0MjE3ODUy
NTU1NDZDQzQwHhcNMjUxMjIyMjMxNzMzWhcNMjUxMjI5MjMxNzMzWjAYMRYwFAYD
VQQDDA02OTQ5ZDE4ZS1kMjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiruIKLt2i29m9Bvu4SR7IVzVsZLuKQIpjuV0l1cX1l3NglKpdeveTjpiaV+I
Q4cTZYQZ4HaECZfI/PNV5Zo/U2bcrCnM7uJEprhvue1jgia+fg9SODJLDfYgXTMk
4LvEPo2GSmye9jL1VfHetCzIO6MohQDqIPjnS+SWeJ812ZbccpgRg5uqnJ6La4eE
J1BBPFdL1mk0/KeeiLKMcLRI/yZIIMlIbzyQQuXR/bvh+Jj95frAW2o6QbI2HS5p
73bYEXtBU2V+Rsj/2JzR5TlX1U7tbLBUcyRc2tALf1ev+DcMcbpKRqr88nJMSPOB
NXxwmBlg6OJFy2MTzkc1vcRMvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAn3fVP
c60+OoWzWd0quuv5WVTRMB8GA1UdIwQYMBaAFNQTzevVIpJj0Y9AP0QheFJVVGzE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEY1My81QjJCQzdEQTgx
QzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWttUFJqMEFfUkNGNFVsVlVi
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFCUE42OVVpa21QUmowQV9SQ0Y0VWxWVWJNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEY1My81QjJCQzdEQTgxQzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWtt
UFJqMEFfUkNGNFVsVlViTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAd7G8vEK64m34vxbKgFEle4axsxSQAPauBPJXAOazUr04MWai9Z+/U
MRNVImN1dp10aR3Z8X7NBn9SNud5Z3B+Xh4kZ1zFYV0MpEWr0NoYjIfY4mJDq8O/
W5eVX/+wjHrmauGduY9aQyoAIh/YkP/1jL0ui6oyuGQ2X5tDI+iN2jDT/Ok9YcRL
D5bcS6ttGAHltb2FlXX/0oZOhYYnSaX1qUuyeHlrCo+opQ7ITLvnCasKNBK3r4hq
z6QBh6ZxNCa+PZicNwmy60ZZoReIjCOTbzZMj7QMnjFTWiy9GpbqstvKZax45r61
ELrr1JAZklZnmtI50D4WxHTFR2VOXNa/
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:41 2025 by rpki-client