This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier: 5RPrW2Wzedgy9F/RZTvHRoj9Mk9ibx0GVSGjTX6Ym/g=
Subject key identifier: 1C:43:34:48:D5:6D:AA:45:8A:FF:92:5C:47:47:4A:B3:B2:82:BA:50
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number: 0503
Signing time: Tue 02 Dec 2025 22:33:20 +0000
Manifest this update: Tue 02 Dec 2025 22:33:20 +0000
Manifest next update: Tue 09 Dec 2025 22:33:20 +0000
Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: vpcswb27OWHDu+AlPgQyFURGxfUhMt5BCztBhiZMaBg=)
2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: nB1Fc0QMLbcF1uaFMm0p596y3EBZJfglMzsBOCS68V4=)
3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: twWAVRWCyGBu4AJbenJKIlIqQ97WQNS4qNYxUhMYIRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 22:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Dec 2 22:33:20 2025 GMT
Not After : Dec 9 22:33:20 2025 GMT
Subject: CN=692f6930-8fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:ad:c9:62:ff:80:34:f6:55:5c:52:76:e9:
6a:cc:81:25:53:3c:4e:02:02:d9:22:dd:be:7e:d5:
a0:08:97:b6:ae:29:f7:1d:dc:53:d8:f6:bc:b3:96:
5f:b4:c4:a1:df:22:e0:0e:57:45:eb:06:d7:12:fb:
57:b2:1b:da:d8:3f:d5:23:69:c5:69:1c:e0:d8:34:
9c:29:6e:1d:23:0c:38:97:fe:92:4d:9b:f0:7e:9f:
6a:45:61:60:90:2f:b3:7b:be:97:9e:0a:4a:96:95:
ce:b6:a0:e6:22:a5:51:1d:fc:c9:c8:09:e3:de:0f:
af:8d:e1:16:d4:c5:59:27:e0:f3:41:a0:a9:70:cf:
b5:87:62:56:8d:84:3a:08:72:3f:ef:c5:fd:3c:c3:
e1:b2:28:21:6b:7b:37:41:a1:91:7c:65:a1:aa:83:
71:2f:48:cd:81:04:12:10:ac:5a:2e:01:f1:fc:31:
fc:e7:68:a5:71:21:e8:7b:82:2b:a5:f9:ac:dd:a2:
64:3c:db:f0:49:f5:7c:a3:02:3a:a5:3c:be:80:23:
73:af:b7:20:5e:58:7d:9b:28:37:eb:e9:0b:5a:e5:
7e:55:d2:1b:5f:71:d1:3f:46:b0:73:b2:10:5b:d3:
e2:df:22:e9:23:66:b9:ee:cf:3c:a6:d8:73:70:c2:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:34:48:D5:6D:AA:45:8A:FF:92:5C:47:47:4A:B3:B2:82:BA:50
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:87:ad:77:f7:03:43:09:da:49:1f:27:2f:1d:62:b4:16:3b:
fb:ee:37:5e:2b:6d:09:11:d2:0e:1d:d1:9b:77:e9:be:58:0c:
36:73:01:a3:1b:d1:bb:87:3f:1c:33:0f:8f:62:47:11:8d:50:
19:32:39:87:16:39:e8:3e:85:3d:45:5a:e6:03:c4:3f:62:a6:
23:0e:66:fa:b0:9c:c5:2b:dd:11:e7:b2:ee:d5:30:a8:d9:39:
84:1b:8f:e0:16:3b:a2:1f:f2:23:a3:6f:fb:ab:bf:84:3f:3d:
65:3a:91:d7:58:61:9a:2a:e0:57:dd:ae:97:02:6e:fd:05:09:
b4:62:ea:b6:6e:6b:e0:db:5a:0d:07:24:56:82:08:a1:db:9f:
0b:7e:05:a6:eb:8f:d4:63:ba:27:1d:6b:34:8b:71:68:ad:ac:
f1:b6:4c:bc:46:c2:dc:ba:fc:0f:89:92:66:3d:fd:e4:3d:9a:
c7:52:71:4d:d3:d2:9b:e4:f4:ca:1b:bc:00:de:ab:1d:7c:f7:
79:0b:22:39:f0:d5:8a:9d:fa:41:8c:ac:d1:0b:3e:76:c1:1d:
65:3a:4f:5b:f5:b7:31:8d:c2:9d:f1:40:3c:96:9d:bb:22:b6:
0f:f6:84:79:b8:4b:d8:70:5f:39:01:96:a5:85:04:a0:56:32:
7f:c1:f5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 17:16:34 2025 by rpki-client