This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier: N2op3HHxXl5XydCK9w15NDWOmFeSTBvIjonU/xVthDM=
Subject key identifier: 69:43:F3:38:16:1D:53:5B:83:3B:FC:80:B5:64:0C:1E:91:65:AA:AC
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial: 01AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number: 01A1
Signing time: Tue 09 Dec 2025 01:36:26 +0000
Manifest this update: Tue 09 Dec 2025 01:36:26 +0000
Manifest next update: Tue 16 Dec 2025 01:36:26 +0000
Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: ISvGy0cDhRRRTlbbPoLwnfBCAouTDDLWU6YVO77IBX4=)
2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: coTbLMChMtsb+9hU9/oYsNe+RoCOnIHIavvRJNUhB3k=)
3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: SLEJBl6iI7A9mQ/gCP8wQV/FveWhHBwcWU7BMm4+pLE=)
4: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: SQBva7AHaoJKrZ6vg+VCRRVDYT6lI9oaiIx6/QC8zvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430 (0x1ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Validity
Not Before: Dec 9 01:36:26 2025 GMT
Not After : Dec 16 01:36:26 2025 GMT
Subject: CN=69377d1a-1ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:fd:1e:92:b7:bf:bf:2e:d2:45:26:25:74:
f4:4e:4c:9a:e0:7c:e0:61:70:df:8f:b5:b8:82:ed:
11:a4:28:99:fe:eb:28:93:35:5d:95:85:74:c9:05:
f9:94:17:26:55:10:74:f7:5f:3e:6a:b2:24:98:90:
69:e5:c2:7d:53:70:fd:01:4d:aa:50:21:4e:be:7c:
5c:ac:f3:42:af:6f:9d:41:f0:df:bc:50:0c:89:18:
10:16:f7:3a:a3:8a:df:f6:e3:2f:dc:f4:69:bd:8b:
59:5a:23:3b:a5:7c:04:ed:46:cf:c7:cd:6c:bd:ba:
b2:8a:8d:d6:e1:73:ce:1c:54:fb:c8:9f:d0:18:d4:
c7:c8:e2:24:eb:94:d6:71:c3:56:b7:38:17:e9:2b:
ae:a1:d7:0d:0d:29:df:d5:a3:1c:34:23:3b:7d:5b:
e9:74:4c:eb:cf:40:a0:ff:27:77:be:cc:d5:46:b9:
69:5b:9c:eb:8d:d5:f9:03:a5:55:5e:4e:49:00:41:
dc:4a:20:99:2f:1e:fc:31:0e:bd:39:70:b6:6a:9f:
e3:74:55:bf:8c:02:b4:82:ba:d5:c7:5b:4c:75:4b:
57:94:c2:5d:ba:b4:cc:1b:de:51:3a:5d:4d:76:e9:
18:3b:44:15:f3:47:78:09:f4:db:0a:14:1c:50:66:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:43:F3:38:16:1D:53:5B:83:3B:FC:80:B5:64:0C:1E:91:65:AA:AC
X509v3 Authority Key Identifier:
keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:41:b8:c8:8e:a5:a5:59:8a:09:06:47:01:35:3b:2d:d8:96:
be:42:75:4e:26:83:5a:a5:4c:bd:81:26:20:62:b1:46:59:24:
99:3b:ca:7c:b2:49:98:65:77:42:1f:b4:70:2a:9a:50:48:ac:
12:dc:ba:38:0b:eb:a8:5d:77:4a:41:38:b5:ed:08:c5:79:5a:
29:8a:f7:06:55:b4:43:73:21:7e:7d:7b:94:e8:1a:3c:68:f2:
c4:3f:45:1a:c8:42:2e:bf:6d:19:5b:56:ac:7c:d5:d4:ad:96:
40:fd:20:3e:a2:41:12:2b:7d:f0:ee:6a:e1:9e:96:67:e7:d0:
1f:f9:a2:22:70:ce:37:ad:24:63:d9:81:f1:30:e1:19:4a:39:
53:02:d9:ff:a6:2a:3b:b2:d5:a3:2c:10:34:f7:e0:7a:66:ce:
e8:71:7e:fb:2e:d4:ac:03:93:84:2c:64:1a:56:f8:17:7c:bf:
39:c7:4b:44:54:30:1a:36:73:c3:15:ef:8b:d6:61:4b:67:8b:
40:02:54:2d:b6:a7:31:64:68:c9:d1:2e:c4:e7:c6:98:36:aa:
12:e2:2a:61:10:21:6f:ec:9e:09:b6:4d:c3:64:a6:ff:cf:ce:
fb:74:5a:4f:62:3c:24:dd:96:51:f0:a6:1a:84:7a:8e:62:5f:
4c:39:f0:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD
RkQzRkFERUMwHhcNMjUxMjA5MDEzNjI2WhcNMjUxMjE2MDEzNjI2WjAYMRYwFAYD
VQQDEw02OTM3N2QxYS0xYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlE/9HpK3v78u0kUmJXT0Tkya4HzgYXDfj7W4gu0RpCiZ/usokzVdlYV0yQX5
lBcmVRB0918+arIkmJBp5cJ9U3D9AU2qUCFOvnxcrPNCr2+dQfDfvFAMiRgQFvc6
o4rf9uMv3PRpvYtZWiM7pXwE7UbPx81svbqyio3W4XPOHFT7yJ/QGNTHyOIk65TW
ccNWtzgX6SuuodcNDSnf1aMcNCM7fVvpdEzrz0Cg/yd3vszVRrlpW5zrjdX5A6VV
Xk5JAEHcSiCZLx78MQ69OXC2ap/jdFW/jAK0grrVx1tMdUtXlMJdurTMG95ROl1N
dukYO0QV80d4CfTbChQcUGZWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlD8zgW
HVNbgzv8gLVkDB6RZaqsMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2
QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y
ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf
ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlQbjIjqWlWYoJBkcBNTst2Ja+QnVOJoNapUy9gSYgYrFGWSSZO8p8
skmYZXdCH7RwKppQSKwS3Lo4C+uoXXdKQTi17QjFeVopivcGVbRDcyF+fXuU6Bo8
aPLEP0UayEIuv20ZW1asfNXUrZZA/SA+okESK33w7mrhnpZn59Af+aIicM43rSRj
2YHxMOEZSjlTAtn/pio7stWjLBA09+B6Zs7ocX77LtSsA5OELGQaVvgXfL85x0tE
VDAaNnPDFe+L1mFLZ4tAAlQttqcxZGjJ0S7E58aYNqoS4iphECFv7J4Jtk3DZKb/
z877dFpPYjwk3ZZR8KYahHqOYl9MOfB+
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:17:02 2025 by rpki-client