This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File: n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier: Wnr8u7yYsCfJfe3vzNuU+3qjBoLnffpsp8+gAWkp+pQ=
Subject key identifier: 58:56:F0:DE:C0:0C:C9:78:43:48:D6:56:4D:6C:0A:4C:66:42:C8:E4
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 3638
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number: 353A
Signing time: Sun 28 Dec 2025 14:21:53 +0000
Manifest this update: Sun 28 Dec 2025 14:21:53 +0000
Manifest next update: Sun 04 Jan 2026 14:21:53 +0000
Files and hashes: 1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: fI63dI0CUJ/aAG9+Fb88Uw/oABwcmiHxxrHQbLw5msw=)
2: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: vcrOZBXHjq3K5b9IM2tb0fFhXmrTMImV0akcYw7Q7n0=)
3: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: 8/pIg0nOoslqGVpUnPoQipLD1CjxnbDa2dRCnlmkpWQ=)
4: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: xHKRgZRt4qbSzDPZH6wkR/9CWnhDd6W1bLMRhJgSvfc=)
5: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: x5gAALbDWXYABqxH0UVKGWQASAjVkWdpYaVlhYcPqAc=)
6: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: t33tjefPncP8dR8GX15pU981pTfbTiVj5ryxyONgq7A=)
7: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: jWBtMJRBrQmahUt0pi2YibmAZBgFlEfn4PBIYmSkROs=)
8: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: 9Ico4h3XlCaLtqQIGUKMAvjEzVqPREECMseESR6/+Rs=)
9: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: Hnemh9EwwTeduD1Zc7gVprQ1BQwQSdNFXtPrRgQGYJ0=)
10: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: yxUvZSwNOnvgFyxK+xyWLF/IFfuAV6JnnBBih/qkFIk=)
11: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: JfCzlyEj5RyOEksRQ5dZM0w5+meyD4/0WxMSGEXGqU0=)
12: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: 0+kajyIDxu72hFKkbKyeIRpJ6iZ+zJJsd5Bir90Bjbs=)
13: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: 5+MRoBA+rOp6HemFzB+KMhs/OCqWXA66uUpcbDP4GD0=)
14: CEC68F44973211E9954F0565C4F9AE02.roa (hash: UYL3PlfPOBzM+4YTE4YVT/B9+S0RmwIC0/LTv+8zEeU=)
15: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 07u1m9+WpmKzkUImJC5UFriIMTCX8GggMGZm/tBb4Wg=)
16: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: sX+id3lu89Hjy6wyXn7YJf1vycTYavS1aKnHsZ9N81M=)
17: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: RlLRteQSfjgNjoDFYZ12j4xm4gJcxx7/ouGdnACi8jE=)
18: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: Jl/N0P/2cG5vuafM7WPanArTIdcgOJaMycU46eiVqR8=)
19: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: Td1yZRJHEJdrXdDkVXf585lTVDZ/gAEOrflJZU/zpIE=)
20: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: +zMT8yB+e8TH1LiL/hekG194ZDTDk4B7qTjHy7txnvM=)
21: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: EcBR1Y+LSwE3SFyQmCPHJrgPGrIw6HZerXAZglO7fSw=)
22: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: ZQ/r1ORMQDfDWVK/TZq7hs+eIvBXZKfdyf99uBq0RP8=)
23: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: 2vo94c8bhE/vlqMz+w1F2CTUOl+XnRdJZlNw0Ckqzz8=)
24: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: 1bdsgMBWNk0J8N0RhS3NVIo135QEMXhjy/l9087BnFU=)
25: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: am25QW4MJ5THnozpBZGdhNNGRi5OPU/F57+oBhLG+ss=)
26: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: 1cfJQS5ACrYfLQAyh5Ja07hoswmqC8p/ibeUwb6rjOE=)
27: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Vvt8gIzT7X3zFgaHKZZTu/elNVhHdcP8J7ECpTHkuWo=)
28: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: Ou9GXrK/fzDAww5dRpeY0Rn8NUNZjPo4uNl9tQUkuio=)
29: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: 0A0Nhnr13g/AyJ6eZl3uyvpwaA6ghz922H++qApXnN8=)
30: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: P0DmiEGqN7lW5E2uoWn71/z/nYWW3JpwNu+rpvGmCIs=)
31: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: CEN7jfWU1vPpLzR5uzYZhWk4C138cZA3lkf/fBKS00g=)
32: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: zLL9jkNh6O2K6tYXIsyvEGSPolQEwe8/GLuSvRNkabw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 14:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13880 (0x3638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Dec 28 14:21:53 2025 GMT
Not After : Jan 4 14:21:53 2026 GMT
Subject: CN=69513d01-5413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:cd:70:f9:f2:f2:39:89:24:68:cc:96:dd:
f0:46:7b:76:33:0f:ce:1f:c2:33:e9:bb:96:55:22:
3c:88:37:4d:ee:08:01:c4:6c:6a:02:22:f5:8c:4f:
10:e1:dc:47:94:e5:5f:ad:1c:13:47:a8:ec:f3:b3:
22:0c:b6:65:dc:f5:84:24:ef:07:e3:f9:d5:9d:55:
35:18:26:3c:fe:9b:c1:0e:2e:40:93:c0:be:44:49:
97:f2:72:e0:a0:fd:01:ac:15:d4:6a:3a:1c:01:b4:
c0:49:f9:7e:20:45:80:82:7f:a7:02:69:6d:d8:29:
61:9f:00:81:f9:83:33:75:12:d9:b1:c4:3c:f7:de:
15:92:2c:98:07:9b:15:2b:65:30:b1:3c:53:a9:c1:
2b:7b:15:66:a1:43:82:29:85:6c:c1:2a:bb:4f:a3:
7f:c0:8f:02:f4:c6:b8:14:f5:e5:84:de:1e:05:dc:
19:6b:f2:5c:fd:7e:23:b6:47:af:ba:ed:c5:33:1f:
a9:1b:07:c1:61:a0:fc:4f:63:26:62:c2:5c:7a:29:
d5:0a:d3:1b:d9:b0:4c:43:dc:98:39:ad:67:8b:39:
bc:d2:75:cc:59:15:15:f6:ad:b9:ec:9c:f3:e0:33:
76:24:8b:25:bb:bb:a6:e7:d7:6b:f4:2a:0f:7c:c5:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:F0:DE:C0:0C:C9:78:43:48:D6:56:4D:6C:0A:4C:66:42:C8:E4
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b7:08:a5:1a:89:26:81:50:e9:85:11:c9:d7:e3:84:bb:7f:
cc:51:8f:21:32:12:f8:2a:13:b0:58:45:c7:f1:a7:39:c6:96:
20:eb:e2:f9:b1:09:ad:7d:47:8d:e1:44:b1:fa:bb:54:d1:eb:
1a:14:df:58:35:b4:d2:88:67:3c:ff:ef:5e:2c:51:e9:16:c1:
5c:32:b2:48:14:fe:49:3d:f5:24:75:36:62:b4:b4:06:0b:2a:
fc:ab:a1:f4:8a:42:d5:c3:49:63:01:ac:84:9a:d4:26:d1:57:
f2:98:bc:81:33:2d:da:96:1e:d3:a8:41:d0:7e:36:7b:79:5f:
4a:4a:22:26:4b:e5:05:27:59:c9:03:ca:cd:84:c0:a2:5a:d3:
1b:d6:22:96:eb:b4:fb:00:f3:9c:6d:a5:3f:40:bd:79:44:48:
b2:b4:6d:00:9c:01:a6:23:e2:2e:c9:31:03:de:73:c8:a4:c7:
cf:e4:e3:9b:35:7a:00:91:c5:b5:b1:e0:3a:5d:a0:99:43:ba:
40:7a:74:f9:9f:53:fa:6b:ed:e8:25:b6:93:70:93:87:47:09:
85:42:82:80:9d:42:41:26:c1:09:b0:dd:40:cd:aa:6b:4e:d7:
4b:7b:51:b7:3f:b9:b5:0a:eb:bc:53:5b:43:dc:02:05:b7:a4:
ef:b5:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:53:47 2025 by rpki-client