This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
File: a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json)
Hash identifier: LKYvZ//Pj1YPNDMgM0GO/Hg5nP4sh26fu8aJqVgZSoM=
Subject key identifier: 1F:AE:BE:DC:7F:47:50:AA:FE:79:6E:FA:54:68:05:D1:8E:2F:B5:F2
Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
Certificate issuer: /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Certificate serial: 1BBA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
Manifest number: 1BAC
Signing time: Wed 24 Dec 2025 16:03:48 +0000
Manifest this update: Wed 24 Dec 2025 16:03:47 +0000
Manifest next update: Wed 31 Dec 2025 16:03:47 +0000
Files and hashes: 1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: Gv+3xoBoTvJrkrxNlNGQYDy1O6+63kxa7i6RXfJY+x0=)
2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: 007hNBFQ4agzcZp7exrZCBX0cMl9koNLsuJSkF67azA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7098 (0x1bba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Validity
Not Before: Dec 24 16:03:47 2025 GMT
Not After : Dec 31 16:03:47 2025 GMT
Subject: CN=694c0ee4-cae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:da:b0:c3:c5:8f:81:92:7a:51:26:69:d7:
a6:30:f1:eb:21:8a:0d:54:d5:ac:3a:a6:9d:7c:01:
25:b5:78:a9:60:6f:8a:81:90:2a:eb:2e:68:1d:cf:
fb:42:bf:70:7b:13:83:59:52:b1:a8:7d:2b:38:65:
ca:47:4e:77:b5:08:1c:03:f6:13:14:a9:69:ee:09:
d9:15:af:9c:1b:ca:af:fc:1f:7d:e6:33:51:f4:e0:
1b:14:ba:15:a8:bf:75:38:c5:c6:ab:43:c8:fe:37:
64:a1:44:82:35:c7:90:d8:a1:f5:2e:b5:db:47:8b:
5e:80:bd:2d:83:22:e1:b5:61:31:e0:3e:19:7f:2d:
71:87:c0:eb:43:bc:b8:ea:3c:c8:8f:9a:92:34:21:
3a:7a:17:9a:bd:11:5a:4f:ac:d9:ab:8d:0f:57:f4:
91:3c:88:48:f3:81:8c:92:ee:25:2a:ab:5e:4f:1b:
5b:17:56:d8:65:64:3c:56:2a:2e:0c:6f:6d:14:c6:
de:68:b7:1f:d3:c3:44:49:e6:c9:82:59:fe:1f:05:
e6:ab:40:18:33:b0:be:ac:69:b9:f0:31:fd:e1:53:
44:70:dc:03:eb:1e:af:8f:58:84:f2:a1:91:de:fa:
d6:ae:8c:8a:3a:81:fe:fb:b9:21:4b:46:a2:68:31:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:BE:DC:7F:47:50:AA:FE:79:6E:FA:54:68:05:D1:8E:2F:B5:F2
X509v3 Authority Key Identifier:
keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:73:0f:f9:33:92:79:72:10:4c:58:0a:f7:34:09:a2:60:
7b:f3:b1:83:79:b9:c2:b0:01:16:15:56:a9:23:19:28:6e:32:
6b:c8:90:12:05:7a:31:71:e6:39:66:83:42:e5:bb:c4:1f:88:
91:ff:85:fe:3e:d9:2b:71:ab:de:fa:53:cc:85:ee:2a:0b:8c:
9a:45:2f:1e:06:d8:7f:1f:29:07:56:d3:cd:20:68:31:c8:a6:
09:39:90:38:1b:b9:9b:87:72:90:66:11:9f:5f:3a:ac:7f:59:
28:9e:96:c1:54:c1:ed:a5:0a:e5:41:9c:9d:e7:1d:09:43:c7:
50:74:1b:28:4a:ca:cb:14:73:72:84:79:f1:cc:25:7e:4f:c0:
98:80:22:cd:4f:3b:f5:73:08:a6:80:f4:c9:08:8b:1d:1f:32:
97:5d:c7:d5:7e:74:db:fe:46:b4:69:c8:a2:35:06:5f:f2:37:
a1:1b:86:72:38:ff:22:d5:91:a8:8a:b4:19:83:47:2e:08:bd:
e4:bb:a5:40:e2:46:60:5e:62:c3:c3:09:b5:ee:f6:de:86:95:
94:19:96:77:84:f9:5f:69:13:e0:17:c1:04:cb:24:69:22:ab:
e3:1b:b7:35:cd:75:be:f2:3b:9b:f7:e0:83:40:20:1b:4b:32:
04:94:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:29 2025 by rpki-client