This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File: T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier: mFC6mCXC4ASOlKvR6G3Fmi0bHmehLpe4+V9CZbWXPB0=
Subject key identifier: 50:74:32:FD:FB:59:F5:48:37:74:38:36:97:1A:D6:4E:B0:15:4B:C9
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer: /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial: 1918
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number: 47B5
Signing time: Thu 18 Dec 2025 15:43:05 +0000
Manifest this update: Thu 18 Dec 2025 15:43:04 +0000
Manifest next update: Thu 25 Dec 2025 15:43:04 +0000
Files and hashes: 1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: lVUB3sLvzMUXRRq2RxsiZm/xdvuq4tyAkIuWEOtR2rA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6424 (0x1918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Validity
Not Before: Dec 18 15:43:04 2025 GMT
Not After : Dec 25 15:43:04 2025 GMT
Subject: CN=69442109-8ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:43:e2:ae:cb:0f:fa:66:53:66:72:3f:7a:
be:19:86:f0:46:fa:79:1b:33:40:51:5b:4e:6a:1c:
55:b9:a0:7a:ec:85:ec:a8:12:41:d9:7e:2a:e5:d8:
2f:79:c2:a1:d0:5b:6d:61:fa:95:f5:07:cb:a4:72:
a9:5c:73:5f:9a:3a:82:43:a2:41:49:2c:5c:ec:7b:
1d:5e:7b:e5:79:17:39:5a:28:de:ca:1d:dc:db:52:
7e:91:be:f8:6e:a9:42:4d:8c:1f:03:f3:e2:df:b3:
84:de:e3:04:60:6a:fe:b1:05:8f:6e:3f:a0:8d:29:
02:db:42:5c:49:30:c8:4d:f6:3e:23:09:ef:5c:45:
f3:df:d4:53:be:4b:b6:3b:06:7c:c5:e7:3e:61:63:
a0:fe:70:c1:b2:0f:cf:fd:8e:1a:1b:df:03:d1:6e:
ab:5b:0e:9c:86:f8:3e:cd:1c:7c:9e:e1:4d:26:81:
57:83:c8:41:32:71:7a:a9:b0:51:fe:18:74:66:0a:
a9:f7:ab:e0:e5:95:9b:d2:04:80:e6:df:a1:c2:5c:
74:2e:d3:a8:03:ef:03:e9:9b:d6:1b:78:99:81:10:
b3:36:fb:24:7f:04:1c:f3:10:82:67:fa:a6:77:1c:
05:4a:ce:9d:d2:a5:9b:b2:a6:0f:db:13:52:22:de:
4e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:32:FD:FB:59:F5:48:37:74:38:36:97:1A:D6:4E:B0:15:4B:C9
X509v3 Authority Key Identifier:
keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:49:48:65:b7:92:bf:a5:38:22:02:77:26:07:4a:29:0a:
85:21:49:1c:f0:0f:64:a9:71:41:ab:3e:0f:f4:fe:29:30:fe:
57:cd:ee:ff:a2:a9:94:ef:ef:cb:0a:94:dd:a4:3a:90:20:42:
f8:24:aa:a0:7a:6b:96:f1:2d:b6:17:8f:6e:54:d7:71:71:05:
af:da:ba:f6:d1:62:5c:15:2e:b7:39:41:49:95:0a:71:c6:e4:
67:df:21:80:42:cc:54:8d:7a:1d:44:9c:ba:a4:c7:e0:a0:ac:
51:c3:88:9a:e1:c6:51:8d:7b:b8:43:a1:66:a2:3c:19:29:86:
ab:81:f1:0a:84:a7:c9:48:09:e4:cd:fc:b7:af:94:c5:be:4b:
ca:77:53:4b:92:cb:4c:22:bc:33:20:49:f0:33:12:24:ac:45:
a1:b3:8f:37:93:bf:db:c9:68:be:ab:13:db:76:a8:b1:0a:ba:
43:66:0c:2a:87:c0:0c:de:8c:76:da:db:8a:b4:b9:87:90:b7:
3b:d8:5b:8b:8d:9c:1c:a2:40:05:10:9b:df:75:07:70:27:33:
c4:fa:8a:87:73:50:21:fc:e5:2c:c4:91:ea:d6:32:af:db:d7:
4a:81:78:a3:ec:7b:2c:f4:6b:08:6e:a2:ec:0a:a5:fb:f3:59:
3f:df:92:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjJEMjkxMTAvBgNVBAUTKDRGODEyNTgyQjU3RjRDMTJDNzM2NUU2QUE3RjBGRkNB
NzcxMDk0OTEwHhcNMjUxMjE4MTU0MzA0WhcNMjUxMjI1MTU0MzA0WjAYMRYwFAYD
VQQDDA02OTQ0MjEwOS04YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzv1D4q7LD/pmU2ZyP3q+GYbwRvp5GzNAUVtOahxVuaB67IXsqBJB2X4q5dgv
ecKh0FttYfqV9QfLpHKpXHNfmjqCQ6JBSSxc7HsdXnvleRc5Wijeyh3c21J+kb74
bqlCTYwfA/Pi37OE3uMEYGr+sQWPbj+gjSkC20JcSTDITfY+IwnvXEXz39RTvku2
OwZ8xec+YWOg/nDBsg/P/Y4aG98D0W6rWw6chvg+zRx8nuFNJoFXg8hBMnF6qbBR
/hh0Zgqp96vg5ZWb0gSA5t+hwlx0LtOoA+8D6ZvWG3iZgRCzNvskfwQc8xCCZ/qm
dxwFSs6d0qWbsqYP2xNSIt5O+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFB0Mv37
WfVIN3Q4Npca1k6wFUvJMB8GA1UdIwQYMBaAFE+BJYK1f0wSxzZeaqfw/8p3EJSR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQyOS9GNzFFNzE2NjU1
MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RCTEhObDVxcF9EX3luY1Fs
SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q0RWxnclZfVEJMSE5sNXFwX0RfeW5jUWxKRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MkQyOS9GNzFFNzE2NjU1MjExMUU1QURCMjA5MkFDNEY5QUUwMi9UNEVsZ3JWX1RC
TEhObDVxcF9EX3luY1FsSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaTklIZbeSv6U4IgJ3JgdKKQqFIUkc8A9kqXFBqz4P9P4pMP5Xze7/
oqmU7+/LCpTdpDqQIEL4JKqgemuW8S22F49uVNdxcQWv2rr20WJcFS63OUFJlQpx
xuRn3yGAQsxUjXodRJy6pMfgoKxRw4ia4cZRjXu4Q6FmojwZKYargfEKhKfJSAnk
zfy3r5TFvkvKd1NLkstMIrwzIEnwMxIkrEWhs483k7/byWi+qxPbdqixCrpDZgwq
h8AM3ox22tuKtLmHkLc72FuLjZwcokAFEJvfdQdwJzPE+oqHc1Ah/OUsxJHq1jKv
29dKgXij7Hss9GsIbqLsCqX781k/35LQ
-----END CERTIFICATE-----
Generated at Sat Dec 20 08:18:09 2025 by rpki-client