This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
File: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft (raw, json)
Hash identifier: n+SQUX+jcQhS3SfQ4erGA/GRPYltqu91SKCLiVooK34=
Subject key identifier: A7:0B:21:38:DE:FA:2D:C3:7C:59:A8:2D:EA:5A:37:87:D3:72:2F:09
Authority key identifier: E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
Certificate issuer: /CN=A914E600/serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
Manifest number: F0
Signing time: Mon 29 Dec 2025 04:25:32 +0000
Manifest this update: Mon 29 Dec 2025 04:25:32 +0000
Manifest next update: Mon 05 Jan 2026 04:25:32 +0000
Files and hashes: 1: 4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl (hash: UqZnAlRlkKhgGifPZs7IzsP/0+j76efj4El19FBTA+M=)
2: D86268E877F111EFADAB6362C4F9AE02.roa (hash: e8wZoAxd5aA3CtPGlNCm2H8RgaO0sg67bbRxbVIcezE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 04:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E600, serialNumber=E0B9458F69825FF829387B139E88FD3BD6740087
Validity
Not Before: Dec 29 04:25:32 2025 GMT
Not After : Jan 5 04:25:32 2026 GMT
Subject: CN=695202bc-dcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:5f:df:6f:68:93:7a:31:27:23:4e:fc:e8:
a6:2c:bb:ed:a3:9f:29:c5:e2:34:2e:68:f8:2b:5f:
4c:65:d0:49:7e:64:69:a3:f3:78:dc:6b:e2:a9:2a:
11:5b:67:ab:31:8d:8c:fd:2a:23:4f:28:b5:4f:67:
0d:0a:bf:8f:9a:e9:7b:96:07:22:5f:2c:15:0d:5e:
02:e0:27:18:5b:51:80:c7:da:fb:a3:72:02:6f:b1:
a3:cb:67:74:13:20:9c:44:8e:26:54:2d:6b:7f:4e:
6d:f1:37:0f:c3:2a:94:5a:22:4c:b5:03:ae:3d:61:
6b:9f:fb:69:81:2c:35:24:f3:8b:17:c8:ad:11:0f:
35:95:d1:80:c4:63:e4:49:27:d0:93:b2:87:51:a5:
85:2b:08:67:df:fe:07:26:38:37:a3:78:a9:f4:6f:
2e:d0:81:99:20:8a:30:45:94:ad:f7:4d:f3:ab:71:
88:bb:ef:0f:14:57:e1:84:80:ad:5f:36:de:ed:82:
fa:20:eb:e5:a7:e1:59:4d:b1:e6:de:ae:4b:c6:74:
4f:b6:07:93:68:1c:dd:ea:2e:13:16:67:ae:01:89:
7f:55:6e:e1:cd:42:3c:f5:a3:a6:29:e0:ba:c2:7f:
2c:a8:ea:15:ba:0e:41:60:89:1e:af:d2:c1:e9:a7:
06:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0B:21:38:DE:FA:2D:C3:7C:59:A8:2D:EA:5A:37:87:D3:72:2F:09
X509v3 Authority Key Identifier:
keyid:E0:B9:45:8F:69:82:5F:F8:29:38:7B:13:9E:88:FD:3B:D6:74:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E600/221BAEBE77F111EFAC112942C4F9AE02/4LlFj2mCX_gpOHsTnoj9O9Z0AIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:2b:df:ad:6f:27:85:ee:d3:93:b1:61:e2:71:23:d7:2e:2b:
75:c1:84:36:40:cf:58:9d:ac:b2:29:30:bb:cc:ae:55:1b:f7:
cb:67:b2:75:00:f1:7a:2d:ad:ca:e0:40:e0:2a:65:13:15:59:
14:8a:ac:11:a4:78:be:a6:b2:6e:34:c8:62:5d:13:f0:6f:e4:
92:67:89:06:4d:42:b2:45:a2:df:0d:ab:59:bc:a0:cc:05:08:
25:f1:58:62:7d:d2:fa:b4:d7:a3:e8:c0:d8:66:f8:df:f4:2d:
55:60:d1:88:37:ec:8f:38:f5:0a:28:60:4f:2f:f7:ba:4f:0e:
76:28:d9:96:30:3f:9f:8e:db:1a:f8:39:f5:14:c2:54:e5:9f:
11:f4:94:57:98:9a:ad:fd:8d:ce:72:03:ce:82:37:3f:50:b0:
54:39:b2:44:bb:bf:37:30:11:78:d2:19:a6:50:fe:de:7b:51:
3e:25:e8:eb:7f:12:06:bc:7d:6c:ea:93:2c:fb:1f:22:12:c1:
b9:69:b4:72:01:8f:41:38:46:b4:d5:06:fd:df:09:04:19:ee:
51:6a:19:f6:91:8d:05:ad:c8:c6:47:64:4f:5b:1f:5d:af:ff:
52:5e:c4:ba:56:ec:10:7b:b2:45:80:46:f8:ff:6d:71:31:f5:
f2:f4:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 06:08:17 2025 by rpki-client