This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
File: g4-9CzleqQcGxsKJrCaw1zigQkE.mft (raw, json)
Hash identifier: FCZwLjLTebpqZbQ45OeOeUSOYujJ9UAULcf3VK+3Gk0=
Subject key identifier: 23:F6:AB:6A:5B:68:58:7B:3C:61:7D:24:BD:86:A5:A0:E9:65:BE:2D
Authority key identifier: 83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
Certificate issuer: /CN=A917BB9A/serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Certificate serial: C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
Manifest number: C0
Signing time: Mon 29 Dec 2025 05:08:40 +0000
Manifest this update: Mon 29 Dec 2025 05:08:39 +0000
Manifest next update: Mon 05 Jan 2026 05:08:39 +0000
Files and hashes: 1: g4-9CzleqQcGxsKJrCaw1zigQkE.crl (hash: 2/3E9DqjWXUhnTQNcVkUh5m8VM3He6D84jSf+MDhTmg=)
2: 0CBF3110D59011EFB76D6824C4F9AE02.roa (hash: zf4VXC00w+/l84Z7TgltHAME/FckYYEPpSyVri8Ai2k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 05:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=838FBD0B395EA90706C6C289AC26B0D738A04241
Validity
Not Before: Dec 29 05:08:39 2025 GMT
Not After : Jan 5 05:08:39 2026 GMT
Subject: CN=69520cd8-a4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:19:79:34:1e:6d:5a:ea:d6:a0:b4:0a:0d:
da:8b:bd:f8:bd:ae:af:7d:c8:f4:0b:16:7d:ad:2f:
7c:f8:35:ae:45:4a:ff:ef:84:f9:e8:93:9d:65:46:
83:d5:e8:f2:eb:1e:71:75:52:d1:0f:34:17:88:4f:
47:be:c1:d1:cf:c0:59:c5:c6:be:88:88:d8:59:27:
7a:cc:d1:c2:94:03:e4:f0:5e:75:bc:62:4a:b3:da:
60:cc:a7:fc:0c:09:79:65:45:f4:04:49:2e:8d:ef:
e1:ae:bc:81:5e:c2:b2:73:4f:c6:7b:48:03:e8:64:
87:81:31:3b:02:35:44:22:d4:a9:8d:d0:56:ee:90:
b8:2f:87:64:aa:1f:ae:2f:4d:4a:c8:d1:df:e0:ba:
e5:ec:e9:25:64:3f:b8:d5:df:aa:97:7d:65:82:48:
69:8b:ab:a2:e9:86:ec:e1:6e:83:76:d7:64:74:f5:
fe:20:4d:a2:8e:1e:2b:25:51:03:d8:20:13:b4:01:
17:d6:90:12:4c:c4:98:a9:08:a7:1f:81:99:25:e4:
be:a0:2b:05:e3:c6:a2:48:31:a6:12:42:58:80:16:
aa:93:4f:52:66:3f:d2:1f:58:be:a8:ab:d3:5b:a9:
7e:b5:4f:3a:bb:ec:42:8e:ac:53:3f:5f:c9:60:c1:
e1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F6:AB:6A:5B:68:58:7B:3C:61:7D:24:BD:86:A5:A0:E9:65:BE:2D
X509v3 Authority Key Identifier:
keyid:83:8F:BD:0B:39:5E:A9:07:06:C6:C2:89:AC:26:B0:D7:38:A0:42:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g4-9CzleqQcGxsKJrCaw1zigQkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/41390BCACFF311EF9062E521C4F9AE02/g4-9CzleqQcGxsKJrCaw1zigQkE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:aa:ea:68:a0:21:83:38:47:11:ef:30:2e:cb:bb:d7:6f:d9:
2f:3d:67:79:ad:76:b7:93:9d:fa:d6:71:39:ec:f6:01:88:54:
f1:e1:9b:85:78:26:28:6a:c0:fa:6b:4e:5c:d0:0a:c5:7b:7e:
df:fa:d6:6e:20:de:a4:b8:22:4f:d0:de:a0:90:e6:7f:33:13:
cd:b0:54:d7:98:7a:0a:61:ac:6d:ac:01:4b:ea:e4:60:54:10:
fa:78:33:32:5a:98:35:64:8b:5b:90:86:c5:be:f8:38:26:6f:
61:50:96:46:4d:a5:bf:98:16:96:99:a1:19:12:f1:d9:44:92:
03:e4:fa:37:fc:6e:9b:4d:75:e2:c5:4e:8b:f0:09:a1:23:76:
fb:78:99:27:cb:ef:55:d5:61:f1:41:ae:22:28:e9:58:9a:ea:
df:19:e8:42:cf:b3:60:83:9d:03:6d:73:43:3f:92:d3:10:f6:
ad:99:18:0c:29:0f:71:11:bc:de:27:1a:b8:c5:8f:92:43:14:
44:39:a7:f4:17:60:84:f7:7b:f9:70:de:a5:a5:00:cf:03:88:
f7:e3:e4:c0:a0:77:4f:54:a5:d9:34:e2:31:bb:69:86:15:12:
f8:95:e5:5e:f9:82:42:33:1e:96:9a:f7:87:1e:6a:e8:01:61:
c7:2f:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 18:45:00 2025 by rpki-client