This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
File: 556bUhJjfjPKXcthdpCc4ZYhumQ.mft (raw, json)
Hash identifier: v0Bv7IlON+pZTsEihK/VnauK8agRwjksg4JGwHeOgnI=
Subject key identifier: 0F:CF:5F:39:07:C8:94:ED:9D:22:8B:2E:9E:61:F6:F0:65:12:67:48
Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Certificate serial: 04C1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
Manifest number: 04BA
Signing time: Sat 20 Dec 2025 16:44:34 +0000
Manifest this update: Sat 20 Dec 2025 16:44:33 +0000
Manifest next update: Sat 27 Dec 2025 16:44:33 +0000
Files and hashes: 1: 556bUhJjfjPKXcthdpCc4ZYhumQ.crl (hash: MWs6lbPTCnndr9VoejMykoLiWcRUVhGKI6l2pSdIYgo=)
2: B7E86B40595311EC9ECF510BC4F9AE02.roa (hash: Lnyzv8UILVvSxBwFCz0H7Yvcdy+f/I6Ub3qLIXVIRQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:44:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1217 (0x4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C47E, serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64
Validity
Not Before: Dec 20 16:44:33 2025 GMT
Not After : Dec 27 16:44:33 2025 GMT
Subject: CN=6946d271-08c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:7c:3c:91:c9:ce:ad:ed:39:9e:98:8d:99:
b8:49:c5:51:19:53:ec:c1:f2:c1:41:30:45:67:7a:
87:c3:3f:1e:a5:36:1c:cc:44:2e:c5:3a:ac:e3:dd:
28:4d:1e:c6:8f:6c:a2:15:cb:06:01:6d:20:4b:55:
45:52:4c:2a:25:ae:56:1b:69:bf:37:12:ed:43:17:
26:48:18:5d:c1:36:df:09:e7:8a:a1:bf:18:f7:a4:
65:dd:9e:84:88:f9:4f:18:3d:9a:90:c2:83:97:83:
ca:90:e3:82:d8:fb:99:b7:51:5e:5d:f7:dc:62:75:
80:41:a1:57:5e:5c:94:ad:18:38:f4:f5:7a:c8:93:
d4:17:3b:34:5a:ae:83:e8:43:35:1c:f0:e5:ed:78:
b1:84:75:a3:a2:29:04:a9:98:67:18:ef:5a:43:70:
00:8a:cd:df:86:7d:47:3d:ac:85:e5:81:6f:be:b4:
a4:9b:a0:69:92:46:58:94:fc:f0:5f:54:dd:d0:fa:
71:96:0e:a5:b7:e5:a2:48:14:4d:09:5d:da:11:d0:
c9:05:cb:e5:8c:4f:3d:2e:00:f0:a3:02:c0:b7:8a:
45:d3:44:99:c1:87:09:53:12:2e:77:98:5c:c5:49:
1d:ac:47:1e:b9:94:b0:e0:b3:b9:dd:9b:16:56:8b:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CF:5F:39:07:C8:94:ED:9D:22:8B:2E:9E:61:F6:F0:65:12:67:48
X509v3 Authority Key Identifier:
keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:bc:93:2c:62:69:00:0b:0d:2d:ce:da:a6:b2:34:a4:89:e7:
6a:83:ba:40:81:df:a0:8d:0d:18:17:9a:04:38:78:e4:79:24:
73:b1:8b:2b:af:ca:9d:cd:df:5d:fc:62:a5:5b:14:da:40:f5:
09:56:c8:8f:71:e9:af:df:48:ba:23:b9:98:4e:93:1f:46:8c:
20:13:fa:3b:c3:cd:43:ec:f1:f6:f0:26:7c:7f:e1:a0:64:f7:
74:16:5e:60:ce:b5:c2:b4:98:f4:7d:d2:e7:1e:08:fe:c2:41:
d6:8d:9b:87:ca:3f:dd:3e:e8:c6:19:41:aa:e4:62:2b:f4:62:
d7:89:28:3c:be:2e:55:e2:c5:d7:bd:35:52:d6:5d:f1:9f:46:
09:23:bb:e5:66:3c:a0:ba:c8:2b:8d:0c:d1:a7:9c:3c:68:fa:
16:cd:2c:45:79:fc:6e:4f:cf:bc:d0:63:39:16:13:ba:37:e5:
33:3b:74:00:39:ce:cd:ac:dd:2d:af:59:8e:1c:1e:95:68:a6:
0f:28:89:66:de:e2:7d:0e:a9:cc:86:1f:81:2c:ee:3e:0f:d0:
f8:ad:8e:0c:41:a4:3e:35:73:d7:b5:5d:2f:49:38:14:bd:c8:
02:75:f7:3c:35:3c:6f:95:95:06:15:12:cd:90:74:4b:3a:ae:
45:8e:2b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:24:57 2025 by rpki-client