This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
File: -Q4hD858Z6Lysy3hTusFoEsNEOE.mft (raw, json)
Hash identifier: JTDrhXdNisGAJqeI1mJ8coQvUb8gj0pngNG6hR4Vefw=
Subject key identifier: 82:48:B7:24:D9:BC:11:FF:19:53:CE:8D:0E:89:92:FE:FA:7A:54:38
Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
Manifest number: 01B3
Signing time: Sat 27 Dec 2025 02:09:48 +0000
Manifest this update: Sat 27 Dec 2025 02:09:48 +0000
Manifest next update: Sat 03 Jan 2026 02:09:48 +0000
Files and hashes: 1: -Q4hD858Z6Lysy3hTusFoEsNEOE.crl (hash: vTWpeJEAfhtSf59IVsGKyXLJy6c7ME8z0h+jAIAkR8s=)
2: A99E5658488011EE8113A766C4F9AE02.roa (hash: NccKQh/awErD0XICha+c3zCJvrDGH6h5P5yVRARZDuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 02:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1
Validity
Not Before: Dec 27 02:09:48 2025 GMT
Not After : Jan 3 02:09:48 2026 GMT
Subject: CN=694f3fec-dae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:4c:44:09:fb:f4:0e:65:c6:f3:b2:5b:ad:
8e:a6:8f:26:d1:d5:7d:2a:04:29:83:04:7f:d0:5d:
18:80:65:56:7c:45:9b:c0:dc:94:5d:c5:6a:fc:76:
ad:1c:28:43:94:4a:ee:e6:11:cf:b9:b1:db:99:5a:
cf:14:11:bf:bd:9c:9a:51:85:1b:b2:48:06:eb:0e:
fc:a8:ec:78:79:60:48:4b:d6:2e:31:23:ce:01:6b:
a4:6b:05:ee:f4:ef:d1:28:bd:89:a9:ef:07:52:e6:
8a:04:26:46:49:fb:2e:f9:1b:ee:41:0e:6f:0e:bf:
06:8c:6d:8c:85:33:14:4d:bf:c7:d8:ea:c9:78:75:
d7:9b:92:e0:46:b0:9b:de:67:e8:5b:1c:bb:4e:2a:
ab:c4:3f:59:e1:98:b3:6c:71:bb:cb:9a:b9:9b:63:
19:61:27:53:ff:64:1d:d5:7a:c9:f3:5b:0c:88:48:
af:17:8d:af:93:26:46:e5:7e:cf:74:6e:06:a8:0e:
b3:35:eb:3d:8a:a5:a7:0e:85:cb:47:2d:36:75:b4:
21:6a:df:5e:9b:d9:85:03:80:5b:d1:5b:70:96:3a:
f2:7d:5c:92:44:5b:af:f8:12:1c:b3:b1:6f:99:30:
86:f2:8f:0e:a9:90:fa:70:6e:54:fb:f0:1a:e0:a3:
c9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:48:B7:24:D9:BC:11:FF:19:53:CE:8D:0E:89:92:FE:FA:7A:54:38
X509v3 Authority Key Identifier:
keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9d:11:2f:21:d6:c4:74:a6:ae:fe:7f:4a:fc:28:68:55:ab:
17:64:14:8f:12:52:db:c0:a0:be:67:18:1c:ad:e6:34:92:4f:
c8:01:de:22:a0:46:03:85:36:5c:ac:28:56:85:80:e5:c8:4d:
65:ab:55:96:41:48:be:b8:40:47:7c:23:91:44:41:42:a8:c4:
52:e3:55:d5:14:e1:2d:19:3d:de:35:4a:f0:20:1c:be:c9:51:
17:d9:cd:99:bc:59:b0:75:bd:4a:f1:b4:3e:fc:fa:4d:8e:7d:
92:2d:ab:09:2b:60:a2:88:e9:d0:ec:62:f8:09:29:fd:1a:39:
de:6c:e4:f1:15:23:c5:e9:b2:90:c3:52:c5:4d:89:39:db:6e:
e1:20:b3:6a:ae:61:34:ea:e6:9f:34:76:df:31:97:3b:b1:8b:
55:b2:92:17:eb:81:b6:80:d9:5e:a6:0b:bf:16:bc:c8:8a:ae:
ea:a0:0b:63:f2:31:66:90:0e:a2:9d:ff:14:2a:71:31:ec:0b:
9a:6c:85:b2:bc:c2:65:71:5a:32:93:1c:f4:81:6f:51:0e:ea:
1c:03:6c:f1:cb:b7:82:c5:47:62:83:03:ca:73:87:c2:c4:4b:
a0:3d:c1:36:05:4a:4a:56:87:b0:fb:5c:e3:44:0f:d8:5d:72:
89:34:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 19:15:23 2025 by rpki-client