This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
File: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft (raw, json)
Hash identifier: vXa/BtJMa4/8WkcR4ZUEIU6J+iceBi+vejpPK3Z3uKY=
Subject key identifier: 38:11:7F:F0:1F:09:7C:8C:02:E5:91:AC:E6:EF:95:86:15:1C:2C:28
Authority key identifier: E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
Certificate issuer: /CN=A91E1887/serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Certificate serial: 07A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
Manifest number: 079E
Signing time: Mon 22 Dec 2025 20:49:07 +0000
Manifest this update: Mon 22 Dec 2025 20:49:06 +0000
Manifest next update: Mon 29 Dec 2025 20:49:06 +0000
Files and hashes: 1: 4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl (hash: UqqAilIXKBSFF4uIWEJf4wMO0ZeRPXRIGwN40DeVVLk=)
2: F6714DD6C69711F0A13E891EC4F9AE02.roa (hash: UZaqS26DC1nA/+p1uPfwjTjffQi/JnVfd0FrTswFSkE=)
3: 9F46C468355711EBA5B81020C4F9AE02.roa (hash: v4DiUmWE1xeUpzloW71W78cO/NDm2EheqghtHaYyYsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1887, serialNumber=E0E9B9399B8A4A5FDCDE209FC5BEC078AF95CF7B
Validity
Not Before: Dec 22 20:49:06 2025 GMT
Not After : Dec 29 20:49:06 2025 GMT
Subject: CN=6949aec3-1001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:c7:e6:70:41:e7:c9:29:01:cf:fb:fd:28:
e7:aa:fd:c8:5c:5f:74:3a:8c:28:1c:64:f0:ee:c0:
71:15:72:4d:83:45:7e:eb:f9:4b:e1:80:77:17:80:
58:ee:7e:f7:50:bb:af:a4:6e:29:81:18:7b:a4:63:
d2:91:03:fc:ea:e3:e7:f1:d1:52:47:f2:65:77:8b:
45:43:71:ea:7c:b8:52:3d:d2:3c:0b:e4:e3:d3:b1:
74:de:51:24:c1:62:c6:39:f1:d1:ca:e1:3a:0e:6b:
13:33:26:59:4c:48:ad:11:e1:68:f6:87:30:44:b1:
8d:b3:1a:e2:26:1f:32:75:34:5f:3d:d0:bb:79:2b:
64:3b:c9:4f:38:bb:d5:10:44:e3:a5:f5:95:2e:28:
9e:04:6a:13:de:6c:62:92:cf:f0:66:f6:21:54:68:
dd:65:4b:cb:73:a6:29:47:1b:4c:01:80:41:f4:41:
71:b9:07:6c:d1:51:5f:12:e2:2d:9b:9b:6d:76:9b:
bb:4b:2b:ee:c0:6b:9f:b9:d3:0d:41:76:f1:b3:28:
12:8f:ca:75:83:af:50:7e:4a:c1:a8:8d:8f:dd:31:
6f:46:af:59:2e:bc:95:44:8f:45:47:d6:c1:e2:b1:
60:0d:9f:b8:c0:ec:ec:38:ef:4a:60:99:39:3c:e3:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:11:7F:F0:1F:09:7C:8C:02:E5:91:AC:E6:EF:95:86:15:1C:2C:28
X509v3 Authority Key Identifier:
keyid:E0:E9:B9:39:9B:8A:4A:5F:DC:DE:20:9F:C5:BE:C0:78:AF:95:CF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1887/84EE8B60355111EB9F41950EC4F9AE02/4Om5OZuKSl_c3iCfxb7AeK-Vz3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:d1:95:d4:e4:dc:25:b2:ab:bb:0d:c0:f6:73:1c:79:f9:
10:8b:92:ad:04:a5:a8:17:56:e7:65:28:99:5c:59:06:cc:e8:
a5:f0:a9:45:8d:1b:2a:97:b7:3d:c8:5b:39:93:29:d2:16:34:
26:fe:e0:7c:e0:70:77:1c:2c:e7:aa:7e:d4:05:ea:13:63:d1:
42:07:b6:bb:4c:c4:7d:6d:be:e0:3b:cc:1a:93:87:9f:1f:f1:
e7:7a:63:ec:85:06:a7:08:c4:d3:30:d0:e8:1c:33:c7:74:1f:
aa:3b:65:e2:be:ac:bd:c6:4f:cf:2a:28:60:3c:9d:b2:29:1b:
76:ec:4a:a3:ad:9a:f9:6d:a7:79:73:bb:05:2e:29:bc:3f:85:
8a:f0:e5:43:88:10:40:27:17:ae:6d:c2:16:7d:14:ae:2a:5c:
d7:c1:eb:46:59:64:64:db:66:09:5f:9c:6f:ca:42:13:41:d0:
e8:b9:7b:23:be:bb:e0:cc:95:8b:e8:2f:d2:96:be:a0:fe:83:
be:13:97:b0:a3:25:03:3d:71:85:a5:d8:d0:59:65:27:13:c6:
b2:2e:58:85:6b:13:4e:e2:7e:d5:a6:dc:d1:c3:39:86:79:d6:
95:e2:5d:7f:04:a3:80:c4:39:bc:59:89:28:07:c4:76:65:b5:
c6:14:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:09 2025 by rpki-client