This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
File: T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft (raw, json)
Hash identifier: begTBDFF2pIGoI1dhZcGB6zWsfwSOx9GSn7zoIpTRkI=
Subject key identifier: F5:5B:45:77:5F:8E:CE:69:C8:1C:40:0A:09:94:10:C7:72:EB:29:7C
Authority key identifier: 4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
Certificate issuer: /CN=A916DC7C/serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Certificate serial: 03DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
Manifest number: 03DA
Signing time: Thu 18 Dec 2025 23:51:16 +0000
Manifest this update: Thu 18 Dec 2025 23:51:16 +0000
Manifest next update: Thu 25 Dec 2025 23:51:16 +0000
Files and hashes: 1: T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl (hash: bsoilzjaTpBb8tbQRRglLpK5lC9nWj5oEFfcM7QB9uw=)
2: 82FF48B4AB3C11EC9D6C1668C4F9AE02.roa (hash: rWvQOGaQUF4KDCbeAOUg2IDrYzmM2mMdECYdn3UKK/I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 991 (0x3df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=4F8300E10DCA24D565D33F02AD386E6F5738F90A
Validity
Not Before: Dec 18 23:51:16 2025 GMT
Not After : Dec 25 23:51:16 2025 GMT
Subject: CN=69449374-7424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:16:ba:db:21:12:65:0c:a8:75:cb:eb:34:b9:
1e:97:ca:79:75:bb:0a:aa:09:8d:36:97:a7:45:5f:
5d:85:ae:15:c3:6a:80:f0:c5:1f:1f:58:9c:5b:1a:
4f:7d:ee:c9:c8:c8:94:e3:16:6c:de:4c:6e:09:de:
93:a9:20:2f:b0:5f:22:f0:24:cb:18:b3:0d:fa:4e:
26:41:88:18:d6:51:24:04:e3:cc:c1:e9:b2:1b:4b:
1f:04:b7:24:b3:8b:b4:3e:36:5c:45:2e:ea:c1:80:
ae:de:b6:09:44:14:b1:ec:52:6f:32:ce:aa:25:57:
ca:dc:60:bd:8a:f4:73:a5:e9:5a:05:9c:6b:d6:58:
0e:cd:62:2a:65:5e:2d:c5:03:1f:9e:c8:75:71:47:
4b:4c:03:62:0d:7c:86:9e:d3:8b:f8:5a:7f:c8:d9:
a7:02:4f:98:12:df:cb:39:3c:d0:af:95:56:f0:d6:
40:d2:ab:d6:a6:e6:63:bd:73:c9:e5:72:c1:92:5f:
af:4c:61:c1:03:a3:af:b9:2b:30:89:9a:c1:21:a8:
b4:03:d2:7d:7f:34:cf:2a:3f:0b:28:0c:bf:8a:59:
0b:b5:31:bb:43:27:40:e9:3d:e4:af:8f:83:1d:3a:
5c:26:f5:36:16:3b:42:f1:51:19:6b:84:a0:11:a3:
61:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:45:77:5F:8E:CE:69:C8:1C:40:0A:09:94:10:C7:72:EB:29:7C
X509v3 Authority Key Identifier:
keyid:4F:83:00:E1:0D:CA:24:D5:65:D3:3F:02:AD:38:6E:6F:57:38:F9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4MA4Q3KJNVl0z8CrThub1c4-Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/6AE76152AB3811EC8BDB8C3CC4F9AE02/T4MA4Q3KJNVl0z8CrThub1c4-Qo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:b3:e4:7e:fa:7c:02:83:fd:39:4c:a0:81:23:a9:29:59:
68:b9:df:71:b1:54:c0:4c:f4:40:fc:4a:03:07:f0:16:e6:ff:
4d:15:47:37:f1:de:94:10:76:64:af:41:17:51:ec:0e:81:cb:
e0:b1:69:66:45:d5:15:ee:93:5f:83:9b:0c:e4:9c:a6:4e:3c:
fb:95:c5:c4:58:4e:78:e5:94:43:e9:72:f0:bb:3c:ab:47:2f:
55:3f:f8:4a:81:e1:79:b2:9e:c3:29:a1:a4:1a:2c:91:62:8b:
f5:1d:c8:69:2d:6f:45:d0:fb:d0:f0:73:24:56:bd:e4:e2:95:
56:4e:9e:30:cb:f3:16:fc:a8:43:84:be:95:d5:d8:8e:f8:d6:
33:75:36:f8:28:a4:02:8f:78:43:00:35:0e:62:32:10:eb:c1:
03:55:ba:62:5f:86:00:c7:ef:39:1b:fb:5a:a8:70:2c:af:d7:
ed:9a:7d:86:7c:ef:b2:d5:6f:47:cb:21:cc:4b:5f:20:11:ee:
49:16:dd:47:ba:90:2b:48:88:4b:18:d3:69:18:cb:bc:39:92:
f5:dc:88:52:33:ea:36:35:21:f9:2c:c3:49:ce:4f:a1:91:05:
b4:3e:b2:41:6b:c9:54:e4:e1:3e:d5:94:5e:30:9b:5b:85:e2:
e0:52:42:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:29 2025 by rpki-client