This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
File: c4TcZntNSaWs1QpYtIkWoVrCYWs.mft (raw, json)
Hash identifier: hUEf5hoHef8H9AjS8jtWqpz2TQjmpN7Dc6hx3AJuI44=
Subject key identifier: 94:55:11:02:82:F4:3A:2D:4E:79:31:E5:46:CC:8A:23:84:C4:54:78
Authority key identifier: 73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
Certificate issuer: /CN=A91E8D07/serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
Manifest number: 0198
Signing time: Tue 23 Dec 2025 02:26:35 +0000
Manifest this update: Tue 23 Dec 2025 02:26:35 +0000
Manifest next update: Tue 30 Dec 2025 02:26:35 +0000
Files and hashes: 1: c4TcZntNSaWs1QpYtIkWoVrCYWs.crl (hash: waAjT2D5CXKzUbKoiQmD600loPvzMcvuvgV0ubvUVjU=)
2: F1E9B236718E11EEAF67DB48C4F9AE02.roa (hash: 9XhRThFjNVeDL+2pDUfxrLUAPNk2YMBSMtMafrP6rso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8D07, serialNumber=7384DC667B4D49A5ACD50A58B48916A15AC2616B
Validity
Not Before: Dec 23 02:26:35 2025 GMT
Not After : Dec 30 02:26:35 2025 GMT
Subject: CN=6949fddb-acff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:df:53:b8:cd:54:b1:98:a3:6b:e5:82:13:
c6:7d:69:bf:3f:1a:b1:3a:8a:32:24:db:6c:27:18:
cf:81:21:42:a6:bb:8b:c6:df:ce:b7:dd:8a:ab:85:
49:23:18:ad:bd:48:7c:34:dd:bb:ae:55:6b:49:03:
3e:41:55:21:ad:5d:fd:8b:aa:84:f3:d0:8a:7c:49:
5e:b2:ec:d9:6b:4c:bd:c3:8a:e7:8b:24:5f:61:8e:
c1:2d:da:f0:3b:54:a3:6d:c1:68:3e:ef:23:77:4a:
9c:2a:aa:ce:05:0d:e5:9b:24:64:7e:0e:af:c0:70:
d2:f3:f4:d4:22:bf:c9:9f:bb:53:e1:60:0b:69:aa:
21:78:2e:34:dc:d3:d1:8b:8b:12:42:20:05:32:53:
a1:e0:f2:96:58:d8:c9:b1:ff:3c:7a:85:2d:82:90:
bc:65:50:19:f0:a5:8f:75:0c:5c:6d:c8:37:7c:5e:
6c:58:0e:26:1e:49:c7:a2:c2:f9:81:ab:6e:1a:1d:
03:a9:03:73:24:4f:9b:13:74:5a:e3:1d:19:c0:2a:
4f:d3:81:c7:04:7b:b1:39:e3:0d:a7:6b:e8:28:0e:
b3:18:00:d8:9d:98:bc:7e:3e:05:7f:e3:eb:d4:88:
30:aa:0d:69:b5:fc:b9:e2:b2:ca:0a:06:41:52:53:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:11:02:82:F4:3A:2D:4E:79:31:E5:46:CC:8A:23:84:C4:54:78
X509v3 Authority Key Identifier:
keyid:73:84:DC:66:7B:4D:49:A5:AC:D5:0A:58:B4:89:16:A1:5A:C2:61:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4TcZntNSaWs1QpYtIkWoVrCYWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D07/505560B66E7B11EEB7E97D5FC4F9AE02/c4TcZntNSaWs1QpYtIkWoVrCYWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:16:f2:02:26:91:87:a0:7d:29:32:e6:70:3b:bd:b5:d7:4e:
d6:bd:70:e9:54:dc:a2:e4:d1:e0:c7:1b:7f:0e:a0:4c:5c:2f:
61:6f:ec:7b:d3:87:24:54:d7:62:19:a6:32:29:20:c6:35:63:
10:3f:ae:e0:da:5b:6d:a6:64:ec:9e:90:e2:94:8a:11:03:5c:
93:a2:cf:89:df:03:76:64:84:3d:23:40:a3:32:31:f9:5e:1c:
2d:7b:8b:db:c5:44:e0:11:e8:b8:68:21:4d:74:e7:6e:b9:07:
dd:9d:6c:e7:d3:67:71:ba:ab:45:71:23:de:98:8a:c2:95:6b:
2d:38:95:cd:83:30:3f:e7:82:f7:8a:5b:9f:19:44:40:10:30:
5b:c9:88:d2:fc:ba:8e:97:61:10:0c:7f:20:49:5d:77:46:2c:
d2:2c:29:36:63:c0:63:61:2a:10:90:d9:2f:87:4e:5c:4e:1f:
44:b5:b7:5b:e9:b7:42:6f:b3:3d:e5:be:da:8b:1d:81:0f:d6:
b6:d4:a7:5c:96:af:4f:c6:ff:09:d9:da:8f:ad:92:58:9d:0e:
49:8f:db:0f:d1:40:b4:e2:e8:8a:29:88:6b:ce:5c:8c:46:7b:
ed:ba:bb:aa:1e:d0:84:4f:4c:e2:ec:9b:f9:f1:ec:e0:f8:fe:
90:91:d1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:54:02 2025 by rpki-client