This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
File: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft (raw, json)
Hash identifier: Xu7ye0te6oF0J9jkBlndLNKJn9r4I5/4FVQnr69UpmQ=
Subject key identifier: 90:2D:FE:45:5C:BC:B6:71:56:DA:A9:4D:B3:8E:FC:B2:5B:21:7B:79
Authority key identifier: E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
Certificate issuer: /CN=A9188CCC/serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Certificate serial: 01C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
Manifest number: 01B9
Signing time: Fri 19 Dec 2025 02:19:42 +0000
Manifest this update: Fri 19 Dec 2025 02:19:41 +0000
Manifest next update: Fri 26 Dec 2025 02:19:41 +0000
Files and hashes: 1: 4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl (hash: d7lawJ5+ztsTWJqcVqLFR9ulJwmrx4BWqVs3sogXWDU=)
2: 9B2C760CD89B11EF8D75534EC4F9AE02.roa (hash: Uy5zrbL2pI5z6ViK9IXiOIdBb841QWHkAKP7kKyILAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188CCC, serialNumber=E231D30927E49A6A22D9F6ACD706103BE3E5DC16
Validity
Not Before: Dec 19 02:19:41 2025 GMT
Not After : Dec 26 02:19:41 2025 GMT
Subject: CN=6944b63e-2c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:bd:80:c7:75:68:62:e1:8d:c7:ce:30:cd:
2f:18:5c:0f:78:91:84:10:a3:8c:04:86:82:cb:95:
e1:41:22:c8:6c:e1:bb:73:ed:fd:04:92:d8:71:03:
90:62:bf:ef:dd:70:93:56:a1:f6:09:e5:a4:9d:a6:
3f:05:32:8d:5d:8e:47:87:61:a5:37:00:d6:59:36:
ec:f5:82:32:f3:dc:7f:03:80:a2:2a:de:8a:7b:bc:
51:ec:b5:2c:af:40:0a:de:1c:48:16:c8:f3:63:95:
a9:79:bb:a0:b6:25:e3:0f:ff:e6:6d:43:16:3d:a9:
45:8a:9e:a8:51:bb:ca:fe:47:9a:2b:7b:52:b9:33:
ce:0c:6b:73:4f:3e:23:90:a5:3f:ef:27:07:8a:07:
cf:19:8a:d1:69:40:b6:7f:4c:05:32:87:60:a9:6b:
fa:07:6d:b2:79:9f:0f:8a:3d:8f:95:40:f4:c2:54:
70:51:ac:75:65:47:7b:c5:96:f6:c0:14:87:bb:f8:
93:4c:74:e6:76:7f:fa:92:e7:97:ea:d3:5d:4b:fe:
a5:ea:47:5e:10:69:aa:79:e4:7a:50:0d:63:4e:5b:
f4:17:00:cd:e1:b6:5b:7e:40:cd:45:45:f1:e5:bc:
2d:be:e4:6d:2a:f5:15:13:c4:e3:b4:dc:07:65:51:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2D:FE:45:5C:BC:B6:71:56:DA:A9:4D:B3:8E:FC:B2:5B:21:7B:79
X509v3 Authority Key Identifier:
keyid:E2:31:D3:09:27:E4:9A:6A:22:D9:F6:AC:D7:06:10:3B:E3:E5:DC:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jHTCSfkmmoi2fas1wYQO-Pl3BY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188CCC/7E6E0014454711EEACD35F41C4F9AE02/4jHTCSfkmmoi2fas1wYQO-Pl3BY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:3c:16:04:44:4f:22:43:ec:de:9e:37:44:be:38:6b:da:
97:41:f7:39:1c:24:3b:a8:ed:fc:85:15:e1:9c:68:52:f9:88:
85:51:82:ec:b2:aa:2d:1a:66:2c:d6:a0:67:95:c7:22:f1:93:
13:36:80:6e:6a:b9:ff:aa:dc:3d:bb:05:3f:5c:4d:df:4a:45:
f7:0d:93:62:41:54:d2:77:98:51:6f:65:16:ab:5a:f5:5d:f8:
81:37:c9:2c:da:07:75:94:f7:17:a8:f4:45:88:bc:dd:0c:2a:
53:18:b9:91:04:3e:43:1d:9f:68:73:5a:04:81:c2:2a:e8:20:
35:54:1d:01:41:97:8c:d7:c8:3a:29:ae:2e:0a:0d:ba:bc:88:
49:e3:e6:dd:cb:18:b1:d5:b7:00:97:d7:70:9d:d1:ad:0d:80:
73:00:cb:a8:f7:10:33:92:4f:9f:c6:cd:33:d5:1d:88:2a:7a:
83:ec:20:e3:28:f7:2a:63:9a:7d:50:75:90:1c:44:22:46:e6:
0a:a8:fd:f4:2a:1c:6a:6f:da:f5:3b:dc:5d:c8:eb:56:f0:49:
b6:1d:31:8e:4e:1d:77:8a:a3:15:b7:5f:53:48:e9:78:f5:55:
62:96:c8:dd:2e:4a:b2:f9:41:dc:1d:da:18:41:12:4b:ae:05:
f3:92:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:07:02 2025 by rpki-client