This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
File: TC5icWMgr9SgFwBna-i_kmT0XkI.mft (raw, json)
Hash identifier: mzrc+wzVnMMwMk/xLOQQtlnImTNHcvOV8ahP9EsWXaI=
Subject key identifier: 93:4A:A5:8F:69:4A:A1:F2:11:68:3D:62:10:52:0E:30:30:57:2F:08
Authority key identifier: 4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
Certificate issuer: /CN=A91A10E4/serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Certificate serial: 1870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
Manifest number: 1866
Signing time: Wed 24 Dec 2025 16:17:53 +0000
Manifest this update: Wed 24 Dec 2025 16:17:52 +0000
Manifest next update: Wed 31 Dec 2025 16:17:52 +0000
Files and hashes: 1: TC5icWMgr9SgFwBna-i_kmT0XkI.crl (hash: MzqA4JGByr8aVA6iiAUyFA6EdgymXmsa1uwvjR85J2c=)
2: 221560BEAF3711E98F7FF448C4F9AE02.roa (hash: QdjDueVM8wncTyRNMQMy4qX7bQck6tPgDDwRBdsy/14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 16:17:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A10E4, serialNumber=4C2E62716320AFD4A01700676BE8BF9264F45E42
Validity
Not Before: Dec 24 16:17:52 2025 GMT
Not After : Dec 31 16:17:52 2025 GMT
Subject: CN=694c1231-6cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:f5:c9:1e:6c:fb:8e:f3:10:25:bb:32:2c:
17:c3:6a:15:26:8b:a3:74:49:43:7b:46:fe:97:09:
4b:56:15:18:38:8a:2e:f0:8a:08:f7:5a:cd:44:93:
6a:f0:79:da:3a:1f:e4:85:3e:2b:b4:07:8c:45:9e:
a8:23:4f:d1:c7:06:6c:e7:09:9f:2b:b2:a8:ef:3e:
de:43:d8:2c:13:e8:61:95:18:94:89:74:e4:7e:92:
02:d5:d3:fa:07:5f:11:26:b2:cf:e1:e1:61:64:cc:
39:7c:62:bc:e7:77:bc:7c:fa:97:69:bd:b5:50:7e:
7f:50:34:7b:c9:1d:16:d8:a0:d3:bd:c7:15:b7:b2:
ca:ac:cf:e9:d0:02:01:94:d8:6e:12:83:e5:c3:39:
e5:1e:1c:aa:51:a2:3d:ec:92:03:f6:d1:2a:ef:65:
a0:0e:bf:5e:08:d0:36:c7:f7:46:a1:bd:72:35:4a:
46:2d:c0:76:dc:4e:00:b5:06:be:81:64:09:34:13:
d2:f1:80:36:f9:a0:e6:7b:4d:73:c1:c6:40:3b:39:
62:b7:3d:8a:6b:99:85:c0:d2:67:f0:0b:78:ed:bd:
b6:40:ce:af:ef:f0:1c:cf:de:0a:12:55:8f:ee:9c:
76:81:30:62:fe:b2:de:38:f8:8a:d7:f2:ac:85:e7:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:A5:8F:69:4A:A1:F2:11:68:3D:62:10:52:0E:30:30:57:2F:08
X509v3 Authority Key Identifier:
keyid:4C:2E:62:71:63:20:AF:D4:A0:17:00:67:6B:E8:BF:92:64:F4:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TC5icWMgr9SgFwBna-i_kmT0XkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A10E4/449868FCB88511E7A482891AC4F9AE02/TC5icWMgr9SgFwBna-i_kmT0XkI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a2:df:c0:1e:3e:20:be:4f:cd:ea:63:39:9e:a3:42:66:33:
ae:9d:62:ad:12:5b:c9:15:01:d3:1e:98:00:c6:54:42:10:cd:
c8:27:8d:a3:55:ca:34:60:1e:b8:c6:13:91:70:b5:02:09:e5:
2c:66:64:ab:b9:00:e3:98:97:11:d8:c8:72:8e:4d:85:d5:b9:
06:f6:47:af:41:b6:21:82:49:64:e5:82:bd:4a:ef:60:15:e1:
15:30:bb:7c:c4:ae:13:19:93:3a:a7:44:8f:a6:ff:47:fc:bb:
d3:35:7a:53:bf:83:7b:cc:75:86:4d:4b:67:a5:5f:14:c5:7f:
e6:f8:ad:9b:d8:f0:2d:fd:15:f5:7d:59:61:cd:0a:2a:a3:8c:
be:ee:b0:cc:60:45:2b:1b:56:73:e8:05:ca:1b:1c:ba:b5:c0:
56:62:b1:04:a0:46:8a:45:ee:51:46:9e:50:75:1b:8c:ae:8a:
92:b9:f4:9d:bc:4d:10:b8:14:ab:fb:d3:05:0f:86:e5:c5:03:
c5:a6:d3:6b:fa:86:ad:14:61:0d:b5:03:96:16:7f:bf:ff:10:
d8:85:3f:b5:02:3e:b7:6d:b5:00:95:8c:b7:11:48:f0:b3:83:
2e:84:1a:64:f7:72:56:af:c9:96:a1:8e:83:1f:b3:35:ff:93:
dc:d4:00:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 17:11:33 2025 by rpki-client