This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
File: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft (raw, json)
Hash identifier: SNkbVdMhRFY1Of9G/2YkyGuyJrqtn3avJs94yTAABNI=
Subject key identifier: CE:43:2E:EC:2D:9E:C6:B7:44:68:60:F3:2E:91:0D:21:FA:70:9F:51
Authority key identifier: B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
Certificate issuer: /CN=A919EE77/serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Certificate serial: 0817
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
Manifest number: 0804
Signing time: Tue 30 Dec 2025 20:27:04 +0000
Manifest this update: Tue 30 Dec 2025 20:27:03 +0000
Manifest next update: Tue 06 Jan 2026 20:27:03 +0000
Files and hashes: 1: t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl (hash: SOA2Lg12rEv/9hmBXamVC2Ew/2RIw1VnYv9ZfMiPFg4=)
2: 7BAB9AF01B3D11EE903BB536C4F9AE02.roa (hash: tLbfqsiqbU5f5RIfXdeZj0H0Fi86hjwtE1k3SMfEBD0=)
3: CD284E600CEE11EB88376B5BC4F9AE02.roa (hash: tkd8GU4TJwZRxQo7fPIxlQckyw3LFTCGlrBbg1Zjf+g=)
4: B811CFA2BF7811EE80314533C4F9AE02.roa (hash: /j+vq5djnc7hZrEiUy4WmMk+wFiISuWLXCgiYcfhmKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 20:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2071 (0x817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EE77, serialNumber=B781A2E7D91EDCA8B030DE3EA89FA4FAF1791F21
Validity
Not Before: Dec 30 20:27:03 2025 GMT
Not After : Jan 6 20:27:03 2026 GMT
Subject: CN=69543598-0cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:52:97:29:93:e6:33:9a:a6:1c:11:f7:85:
d4:bb:67:29:a3:2d:69:85:d2:d4:bc:11:2d:b6:a9:
d5:42:ae:eb:07:ca:d2:de:f8:fb:1c:43:0a:f9:23:
db:e9:af:fc:b1:4d:ef:d1:4b:91:2c:43:e1:62:21:
2a:22:93:fb:b0:25:f8:51:2c:ef:5c:9e:1e:4c:fa:
ec:83:67:5f:bf:f5:67:5f:7f:da:d3:21:4b:9f:b2:
c3:0d:cb:4f:30:41:3b:af:ac:1d:46:2b:c0:a2:b1:
3a:63:8b:30:87:55:6e:c6:87:bd:3e:31:fb:69:6b:
22:0f:87:5c:d7:c8:b1:17:82:b9:5b:9b:ec:7b:e8:
66:6f:5e:2b:aa:c0:14:1a:65:52:f5:9e:4e:02:86:
4b:14:94:9f:99:87:b9:5f:bd:49:f6:f9:e1:77:4b:
47:6a:25:bd:7b:28:fb:8e:91:4f:61:df:2d:94:74:
92:0b:c9:fb:f5:6a:83:5a:f1:0a:3b:52:c0:14:4c:
05:23:5a:1f:6e:24:de:1c:d8:d2:81:88:17:91:9e:
74:f0:5b:74:51:ea:e7:b9:a2:33:bc:f5:12:c1:64:
4a:d3:83:c4:50:37:6d:78:a1:45:9a:43:c3:be:a4:
77:bd:57:40:9a:c7:77:1e:d8:4b:19:56:64:8b:be:
f5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:2E:EC:2D:9E:C6:B7:44:68:60:F3:2E:91:0D:21:FA:70:9F:51
X509v3 Authority Key Identifier:
keyid:B7:81:A2:E7:D9:1E:DC:A8:B0:30:DE:3E:A8:9F:A4:FA:F1:79:1F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EE77/D9BE07BA0CED11EBA7F1115BC4F9AE02/t4Gi59ke3KiwMN4-qJ-k-vF5HyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:42:11:ce:d9:c3:09:2f:f0:93:b6:44:93:4e:8c:9b:9b:
72:ae:22:9d:4c:6a:a2:d8:aa:11:aa:ff:31:c8:6b:f2:d8:a9:
38:2f:ed:ad:2b:62:8d:2a:20:71:7b:d0:14:62:42:52:b0:f2:
89:4a:39:7a:5d:4b:c2:18:50:b6:4d:51:c8:b4:7f:9d:ff:12:
3e:58:ee:8e:8f:62:c0:f7:0e:e1:e9:d3:dd:40:25:a4:d2:30:
4c:31:45:cd:50:b5:29:7a:3e:8f:97:55:30:08:f3:c5:36:77:
5e:cb:2a:d1:a0:11:c1:ba:6f:8f:e6:03:fc:19:93:39:81:e1:
81:23:23:51:1a:b6:60:9f:60:be:87:15:b5:7c:df:fa:da:0d:
61:fa:92:55:28:35:15:2c:95:60:76:d6:68:ca:49:54:eb:53:
b3:82:44:e1:2a:cc:dc:8a:aa:d8:4c:13:fb:56:14:2d:f1:7f:
a3:de:07:7f:71:36:c6:74:e5:c3:d3:1a:e8:8c:33:2c:81:57:
ae:37:58:92:39:de:2c:f3:9d:f2:92:26:aa:45:fc:e3:b0:13:
e0:7c:87:0b:0b:83:ff:15:5c:c7:4b:8f:00:53:d1:63:c6:b8:
4b:6a:9f:f1:c5:a7:7e:6e:af:8a:21:ee:38:c8:d5:4b:53:7d:
a2:cd:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 00:02:57 2025 by rpki-client