This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
File: c4wjqkznVV7qL8jCvtj0akiNyT0.mft (raw, json)
Hash identifier: 63u61CZPpJn5fmGd4T6y3l/VouCkHL6WFCg6ybm7H8I=
Subject key identifier: 3C:8C:0E:82:E8:A7:C4:5D:B8:C6:51:B0:5E:41:3A:C4:C3:2A:87:E4
Authority key identifier: 73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
Certificate issuer: /CN=A91B2D29/serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Certificate serial: 248D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
Manifest number: 47B4
Signing time: Thu 18 Dec 2025 15:43:02 +0000
Manifest this update: Thu 18 Dec 2025 15:43:02 +0000
Manifest next update: Thu 25 Dec 2025 15:43:02 +0000
Files and hashes: 1: c4wjqkznVV7qL8jCvtj0akiNyT0.crl (hash: CD/j+26Blz13Ff4x5Nn6G1rtOuHhYiB+EbnwDNIA+Qo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 15:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9357 (0x248d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B2D29, serialNumber=738C23AA4CE7555EEA2FC8C2BED8F46A488DC93D
Validity
Not Before: Dec 18 15:43:02 2025 GMT
Not After : Dec 25 15:43:02 2025 GMT
Subject: CN=69442106-5461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:e6:f8:9f:af:9e:26:d5:16:c5:0e:dd:03:
df:0c:fb:b1:a0:4d:15:d9:b4:26:99:af:74:aa:20:
d4:fe:bb:8c:71:c7:85:09:c7:3a:9d:cc:7d:ef:5d:
b5:f9:6c:89:47:d3:b6:0e:76:db:5e:fb:ba:a0:5e:
fd:5d:31:2a:77:ac:0f:2f:9f:be:66:15:01:f1:3c:
2f:7f:2c:2c:d1:a5:6a:9f:d8:0c:de:fa:22:28:d0:
5a:c1:5a:e2:a4:61:2c:3d:05:4e:34:07:d4:d1:13:
8a:4e:1d:81:60:1f:f5:4c:e8:8b:27:e6:97:a4:a4:
2b:67:51:dd:a4:7a:47:8f:74:4e:c0:b3:ee:50:97:
e9:9b:c9:4d:a4:de:81:2b:70:8d:d3:b3:10:5d:ca:
a7:98:77:b8:c7:13:a4:10:97:ee:89:4a:86:32:a7:
d5:36:09:06:60:ba:f1:bd:cc:d4:09:cd:e4:b4:ad:
0f:07:0c:86:57:d9:bb:1e:72:1f:eb:9d:b5:b8:02:
2a:ed:ba:08:9e:70:2b:49:97:88:6b:a8:fb:66:90:
0c:0e:4d:7b:fd:ca:8d:8c:83:e3:b4:b0:48:8b:d7:
b5:b2:21:c3:c0:af:ae:a6:92:13:88:ee:92:f6:80:
60:da:79:82:77:30:e5:ce:63:30:c1:27:46:f4:f7:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8C:0E:82:E8:A7:C4:5D:B8:C6:51:B0:5E:41:3A:C4:C3:2A:87:E4
X509v3 Authority Key Identifier:
keyid:73:8C:23:AA:4C:E7:55:5E:EA:2F:C8:C2:BE:D8:F4:6A:48:8D:C9:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c4wjqkznVV7qL8jCvtj0akiNyT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/c4wjqkznVV7qL8jCvtj0akiNyT0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:4f:a1:2e:87:4d:b8:9f:ac:98:d5:fc:04:8c:82:b2:92:0e:
f4:6d:8e:33:6e:38:e7:e2:87:97:88:ba:e0:91:69:c9:f5:86:
d9:a9:47:8e:7a:1c:dd:4d:53:17:fd:03:4a:52:a8:ca:98:58:
e0:ff:57:e0:4c:59:0e:a9:85:0a:a3:6b:61:44:b5:05:91:3c:
2e:3d:0f:75:d1:b5:39:d9:4a:93:be:80:5f:c4:23:3d:55:82:
cf:61:c6:cb:9a:47:13:75:9d:a1:44:76:5c:3e:c3:9e:a7:0c:
e8:0c:52:04:af:7f:33:1e:8b:a5:8f:5b:d9:b9:65:d3:b1:81:
2a:d3:27:ee:be:6d:fb:c7:eb:b1:ff:29:e4:ac:c5:f6:f9:7a:
b0:2c:39:32:81:26:01:55:74:cc:bb:b3:04:e6:a2:dc:66:a9:
69:6f:af:9b:84:29:4f:ce:67:dd:10:1e:78:37:54:ae:15:be:
33:c3:e6:a5:17:e9:61:95:c8:bc:6a:56:f4:50:cc:e5:a5:de:
1f:db:f3:51:3b:52:27:a0:af:7b:1d:bb:82:9c:02:77:f4:4f:
b4:4d:da:42:57:a3:8f:9f:54:12:ca:0b:1e:02:9d:c3:b6:dd:
44:d7:a2:06:d5:19:01:7d:4b:00:8b:a1:0e:d8:19:a9:8f:02:
98:20:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:17:56 2025 by rpki-client