This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
File: q47HWiojWU9vKtMnsOa7wLCrm-4.mft (raw, json)
Hash identifier: iUGYmBZDmaoySHsxmAbHRPNFbC95WEcr31Np6OCpwh8=
Subject key identifier: 02:1A:EB:A7:A7:10:42:4D:56:EF:3B:6B:91:72:0E:F0:AA:EA:82:7E
Authority key identifier: AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
Certificate issuer: /CN=A91F783D/serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Certificate serial: 0E38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
Manifest number: 0E2E
Signing time: Thu 18 Dec 2025 17:37:17 +0000
Manifest this update: Thu 18 Dec 2025 17:37:16 +0000
Manifest next update: Thu 25 Dec 2025 17:37:16 +0000
Files and hashes: 1: q47HWiojWU9vKtMnsOa7wLCrm-4.crl (hash: YzApqZBFAXu1vXzvX5Oy5PHd1RH/kpy5+xj8jGrquDc=)
2: E3ACB710B9B211E9A9A37254C4F9AE02.roa (hash: Jg5gZD0YmKb91aw5MXsxMT3mckkXVt61eCbJBF82oak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3640 (0xe38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F783D, serialNumber=AB8EC75A2A23594F6F2AD327B0E6BBC0B0AB9BEE
Validity
Not Before: Dec 18 17:37:16 2025 GMT
Not After : Dec 25 17:37:16 2025 GMT
Subject: CN=69443bcd-2163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:92:fb:8d:7d:4d:e6:c6:f9:92:95:0b:64:
f0:ed:20:52:63:78:12:ab:e6:bf:2f:b6:5f:ab:4a:
1e:6e:89:25:17:d8:36:eb:ed:7c:8f:a4:69:00:1c:
49:b8:a3:c4:bd:82:f5:07:8f:fe:fe:3f:c6:60:80:
15:98:27:7a:4c:6e:23:ac:22:91:fb:8f:22:ab:4c:
4a:80:36:ac:f1:da:2a:2c:7c:48:2d:9e:2e:1b:cd:
97:a8:b8:8c:e2:bc:51:27:ff:af:06:c4:24:1c:84:
df:e4:c4:88:66:fb:38:00:38:f6:51:95:49:cb:d2:
e4:6a:64:cb:b5:11:31:ec:9a:26:3b:9c:1f:cf:cd:
73:be:0a:c6:21:c0:ee:bd:07:62:1d:82:40:a2:97:
af:87:1e:0f:4b:00:36:2d:ad:75:b2:48:9d:d1:b9:
24:e8:fa:ee:55:f3:c6:d0:d0:36:41:7b:85:6b:02:
0f:b8:40:e6:a4:69:5b:7c:31:b3:06:4d:73:fc:b9:
dd:c3:0a:2c:c8:3c:1b:50:a0:e7:92:ba:ff:c2:4e:
ad:c5:5b:13:8f:a3:b2:63:83:82:fa:4a:24:b4:b1:
c7:40:fe:16:b9:da:62:8c:fa:48:37:66:60:d7:0b:
a6:23:93:b2:49:40:df:cb:39:f9:5b:69:c2:42:a9:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:1A:EB:A7:A7:10:42:4D:56:EF:3B:6B:91:72:0E:F0:AA:EA:82:7E
X509v3 Authority Key Identifier:
keyid:AB:8E:C7:5A:2A:23:59:4F:6F:2A:D3:27:B0:E6:BB:C0:B0:AB:9B:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q47HWiojWU9vKtMnsOa7wLCrm-4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F783D/31DF1DEEB9B111E9990C0852C4F9AE02/q47HWiojWU9vKtMnsOa7wLCrm-4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
dc:77:e3:e3:77:79:93:3b:be:88:b4:1f:69:dd:fb:a9:64:60:
f8:27:c1:d7:7a:a2:7e:5f:2e:cb:68:ac:60:40:41:de:75:35:
38:95:d7:6c:6a:b9:ac:80:2a:e4:1f:78:ac:ad:20:9b:65:e7:
11:97:66:a0:45:f0:b6:a3:7a:02:ef:45:dd:87:69:3f:ef:bb:
4b:a1:d7:d9:61:5d:00:08:c8:53:d1:d6:47:aa:03:85:a8:ff:
3d:32:c0:c5:63:13:d3:c8:e1:ec:68:28:8f:dd:7f:9c:45:55:
e9:50:fb:72:af:26:9c:18:3c:44:04:6c:1f:15:66:d0:03:76:
d7:23:62:a1:03:27:42:bc:40:d0:32:e1:52:4a:cd:f9:d1:51:
4e:00:77:29:3c:25:88:1b:a4:21:9d:de:d1:d6:73:1c:65:a8:
cb:db:00:31:2a:48:39:b8:e5:66:2a:31:39:82:e9:d6:9b:61:
47:61:85:a0:9f:cb:05:b8:b5:6f:11:b2:39:f1:2f:af:d7:53:
7e:9c:79:2c:e2:3d:7a:45:6a:ad:5f:f3:2b:33:32:cc:40:14:
dd:83:04:22:05:71:ac:f4:89:d3:11:36:42:c8:ae:db:55:bf:
ca:f2:1a:20:06:fd:e7:e5:ec:36:6b:c6:78:0c:5a:ac:94:4f:
6a:43:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:32:15 2025 by rpki-client