This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File: F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier: 5to3QEGQaBeq8cGgYtX3hlzqOZ3MW2FI+tnSms6NctE=
Subject key identifier: D1:59:F9:0D:87:CB:FF:71:B5:6C:41:A0:F5:17:C4:A9:82:44:AB:08
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer: /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number: 6C
Signing time: Thu 18 Dec 2025 20:08:39 +0000
Manifest this update: Thu 18 Dec 2025 20:08:38 +0000
Manifest next update: Thu 25 Dec 2025 20:08:38 +0000
Files and hashes: 1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: a7twgb4UdBoMlQLYFQnd66KG9+jAngZmFu0sziC2SEo=)
2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: 8eHBf/IW6Kdn5rzP/J/PseLHB5iblvBzJEKUGKo/wC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:08:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Validity
Not Before: Dec 18 20:08:38 2025 GMT
Not After : Dec 25 20:08:38 2025 GMT
Subject: CN=69445f46-aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:14:83:9d:9e:91:92:ee:67:44:4b:f4:37:
16:86:d9:bc:ad:01:99:f0:52:d4:41:13:93:58:33:
fd:88:50:c1:77:bc:2f:b1:ec:f2:89:dd:d7:a2:53:
2a:a9:50:0c:4e:7e:ef:f5:40:f1:65:4e:8a:f2:49:
7e:b9:b9:be:6a:5c:fe:56:88:9b:a3:83:a9:53:67:
17:a1:cc:c9:28:c9:f5:9e:ee:a8:0c:2e:dd:82:2b:
e5:11:e7:35:f4:53:bb:f1:0b:7f:2d:85:1d:e2:b3:
9c:34:ec:4d:9e:1c:f5:2e:6e:15:2b:56:d1:1a:10:
58:3c:43:63:bf:22:47:db:fa:d2:ee:a1:11:d0:67:
b5:2a:0e:24:19:de:b1:7c:b9:65:30:ac:5b:a8:a2:
a9:d3:0f:f9:87:03:e5:24:07:83:e4:40:7a:36:eb:
5d:cb:fc:8b:59:df:f8:14:06:bc:72:ff:91:8c:1b:
83:96:fe:8a:a3:d9:08:db:8a:89:81:39:4d:46:b7:
aa:68:9d:5e:82:53:d1:24:b5:be:86:c3:d1:12:f6:
92:ed:53:37:e9:74:5f:34:6d:bb:e1:3f:45:20:0c:
0c:32:61:0c:b4:3f:a6:1c:ed:e4:c7:b2:88:f4:a4:
8a:d8:e3:73:5c:4f:0d:8c:fa:29:4a:4a:a1:a5:de:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:F9:0D:87:CB:FF:71:B5:6C:41:A0:F5:17:C4:A9:82:44:AB:08
X509v3 Authority Key Identifier:
keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8f:74:be:eb:08:2b:2d:63:b9:15:d4:85:de:c7:0b:56:09:
3a:2f:26:e5:77:8e:d5:0e:69:7e:b4:93:22:be:77:9b:fc:e0:
18:e8:36:cd:c6:f8:02:a1:eb:b9:25:a7:82:b2:47:e7:64:f8:
4d:08:73:75:3e:ba:bd:5b:dd:f9:6e:2a:cc:03:16:b8:35:cd:
4c:65:90:55:63:27:69:74:74:8e:eb:f8:fd:a3:e6:ba:9d:eb:
44:57:69:c0:0b:2a:69:17:a9:14:4f:f2:7f:3a:70:28:af:83:
34:eb:f1:cc:d6:2a:aa:41:b1:21:1f:8d:c4:da:10:1e:3f:6b:
d3:9b:6f:18:9b:18:59:43:01:0b:52:45:81:5b:0c:e0:5f:4e:
20:fe:38:96:81:bf:75:73:ea:73:e2:23:4d:67:40:6c:55:42:
18:1e:e0:db:4b:8a:03:92:60:2c:7f:77:4f:04:7d:b1:3d:a0:
cb:8c:5a:31:a2:b4:6f:44:d5:26:37:16:f8:b2:86:6c:57:e2:
a6:d5:22:a1:6e:af:1b:70:d8:3e:60:4b:60:4b:49:bd:15:8e:
fb:57:b0:45:0b:9b:62:5c:7e:06:01:73:9f:80:57:36:07:9f:
61:93:91:d0:8e:22:91:b4:ba:e9:46:59:35:6e:03:11:2f:35:
76:d5:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:04:37 2025 by rpki-client