This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier: 5TALVvm2GTf6lq9wGLdJ9v4axC0BYCL4prG0eocCaic=
Subject key identifier: 80:F0:BE:E0:2D:AD:87:01:89:13:88:63:A5:C4:18:4D:87:38:6C:DE
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial: 090E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number: 0905
Signing time: Mon 22 Dec 2025 19:41:50 +0000
Manifest this update: Mon 22 Dec 2025 19:41:49 +0000
Manifest next update: Mon 29 Dec 2025 19:41:49 +0000
Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: 23kpiygLCGaKSBxe2TJmBq/wqsE5FwDjy3OoKXIqtLo=)
2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: gGfvaVEV+hPlcS/KUAGxCctceZxcis75EZYZWWO9DrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Validity
Not Before: Dec 22 19:41:49 2025 GMT
Not After : Dec 29 19:41:49 2025 GMT
Subject: CN=69499efd-d310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:57:b4:44:c1:27:55:23:b1:4f:a6:e7:dc:
31:79:10:25:f6:8d:ca:32:52:43:bc:ac:5f:a2:0f:
d8:13:25:46:f6:27:f0:ba:57:27:c1:ee:7d:89:f8:
1c:8f:cc:62:c2:f8:c0:a6:1a:f8:2d:b5:38:fd:d0:
eb:54:88:8d:13:95:6d:45:a9:f5:c9:79:2a:33:de:
81:fa:37:ef:c0:91:9b:b4:25:49:56:6a:f2:d7:7b:
f7:55:e3:2c:6c:e8:e9:ed:7e:ab:75:b9:77:63:81:
61:f6:00:13:cd:98:4f:28:df:4c:a6:a2:78:58:7a:
e6:8a:f3:bd:3c:4e:bb:23:bf:b3:dc:02:7d:76:5d:
a9:bd:a6:f6:b6:bc:eb:04:86:95:dd:e1:d4:73:d8:
42:68:38:d6:c1:18:d8:00:e5:09:a2:43:18:99:a6:
8a:51:14:34:59:fa:ad:07:ac:26:a7:c3:b3:d0:07:
f0:39:e1:1d:e2:40:b3:6b:dd:31:e5:07:5f:bb:78:
55:f6:b7:a9:43:85:fc:ee:23:b7:b2:bb:95:74:bd:
4f:c8:10:de:cc:83:87:86:be:a2:a5:00:4a:57:49:
5f:f4:2a:c3:8c:c8:a5:3f:1f:bb:38:11:7d:99:55:
f3:97:3a:8c:d7:55:b1:74:fd:83:29:ec:eb:7c:15:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F0:BE:E0:2D:AD:87:01:89:13:88:63:A5:C4:18:4D:87:38:6C:DE
X509v3 Authority Key Identifier:
keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0c:50:6d:e8:38:43:61:cc:1d:78:13:9a:85:c4:1b:ea:31:
ef:40:67:53:12:ad:40:6c:a9:7e:e3:99:05:63:84:f1:a6:62:
52:49:1a:eb:98:1f:b1:26:aa:32:c2:d2:ac:22:0c:9f:7f:bd:
5a:0c:9e:83:f8:35:f9:05:55:f5:9f:a6:18:5a:80:ba:6d:7e:
1d:24:96:c3:f5:01:27:c1:29:08:d0:b8:3c:42:33:c9:6f:3e:
6f:36:3a:ef:5f:29:dc:8d:e7:8f:d7:09:e9:58:0d:cb:82:a0:
1a:9d:95:e2:47:e0:13:22:ef:31:1d:50:0b:7b:e2:3c:02:bc:
48:b3:29:74:fe:b0:31:c7:92:de:f5:3c:a7:c1:fd:5b:a6:0a:
ef:b2:ee:89:15:35:62:65:d6:dd:31:c7:5a:1f:15:05:68:04:
2f:6d:d5:1e:00:8f:cb:c5:e3:fb:60:10:c5:ab:a9:ce:b5:40:
58:ed:b7:57:3c:48:90:4a:bd:06:38:9a:a2:82:22:be:26:40:
e2:65:e2:d9:2e:c3:3c:c4:ff:7b:90:3f:3f:99:64:66:6d:6e:
d9:32:c2:c5:9e:cd:db:cf:25:45:24:0c:cc:4e:51:9d:8a:85:
3f:f3:a3:78:a6:b1:34:13:ee:8c:cf:20:59:1d:b8:b6:41:e0:
f2:aa:0f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:14 2025 by rpki-client