This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier: OLzJuTAe0759joYfD4gLvCaXYkZfnbMd0I8GRH4p/c0=
Subject key identifier: 99:D2:0A:95:DC:E6:F1:8D:85:5B:8E:0F:67:DE:2E:58:18:B3:0E:B4
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer: /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial: 1981
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number: 1975
Signing time: Wed 24 Dec 2025 16:12:22 +0000
Manifest this update: Wed 24 Dec 2025 16:12:22 +0000
Manifest next update: Wed 31 Dec 2025 16:12:22 +0000
Files and hashes: 1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: usar7e8CAS4tDy2FBtFcA7aJICDug3g/J23/q+D75mA=)
2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: /U/CsYIhht9s+NW7SN7K/1R2JyIlhuy3zjDWLZs60Yg=)
3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: VTcOwA4/ZHFl9NF0jVq8bKcfk95wITIQIkP9/wxqkas=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 16:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6529 (0x1981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Validity
Not Before: Dec 24 16:12:22 2025 GMT
Not After : Dec 31 16:12:22 2025 GMT
Subject: CN=694c10e6-8fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:b3:4e:d2:4c:e1:e5:75:24:d9:2c:82:66:
b8:d1:8b:93:a4:9e:fc:eb:fd:27:3b:ca:13:46:8c:
ef:6b:27:cc:e7:41:f9:ee:e3:25:6c:85:e6:d4:86:
07:48:56:ce:08:9e:59:a6:bc:8e:79:9a:d5:ae:33:
75:0f:dc:02:b2:48:66:17:05:2c:85:46:af:b5:08:
de:6d:ab:d9:c6:4d:ed:2a:64:86:58:5d:3f:79:05:
4e:11:d8:d9:f2:ba:ec:53:e9:52:07:80:b0:23:31:
8b:da:3a:c9:31:fe:c3:0e:69:1c:48:ae:d9:13:66:
f6:48:2f:08:16:e0:58:99:dc:db:99:06:4a:ec:9e:
56:52:0c:e9:eb:9e:54:09:f5:75:f1:20:a3:cc:56:
a8:a8:21:b5:a7:1e:6c:35:ee:14:c4:69:b7:e9:09:
db:b5:23:f9:c4:52:4e:da:1e:ad:13:92:1f:2e:f5:
2e:f4:53:96:df:1f:72:d3:51:53:3a:ea:da:82:06:
85:8d:5a:46:bc:52:31:bc:75:97:b7:1e:9d:0f:f2:
a9:24:5e:d8:2a:f2:57:09:b2:2a:c5:28:d0:8f:ae:
0e:5b:8f:0b:6f:d2:57:c7:7f:c9:7b:28:1f:36:ca:
69:91:83:0c:8e:02:0a:7d:cd:32:a7:60:21:c2:c6:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:0A:95:DC:E6:F1:8D:85:5B:8E:0F:67:DE:2E:58:18:B3:0E:B4
X509v3 Authority Key Identifier:
keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ce:e9:03:ef:ab:f9:f0:c4:d8:05:d4:d8:27:f8:79:e2:e0:
69:33:e6:01:75:a5:a3:7f:04:8e:ea:8f:57:ac:bf:bc:3a:6a:
af:cd:db:60:bc:8c:bf:d5:1b:2f:b7:bb:d8:25:5b:21:65:77:
c3:eb:2d:78:e3:eb:61:76:69:52:bd:66:46:17:c2:b0:27:ed:
50:53:2d:13:61:de:06:96:2d:00:80:2b:24:da:c0:0a:b4:7f:
94:a3:20:32:1c:7e:04:3f:f1:01:0c:03:22:57:1d:0f:9f:b3:
0f:81:20:c6:7c:65:4b:77:0c:eb:6a:64:ff:f7:08:6d:29:d8:
88:7e:35:f7:bd:ff:1f:9d:d2:03:32:98:b7:c8:e8:90:ca:eb:
75:3d:03:50:ee:48:31:6c:bf:2f:da:38:c7:9d:1f:99:b5:aa:
92:34:7d:4a:f4:e5:56:3c:e1:9e:18:88:ea:c9:c6:63:fc:a0:
ad:a4:6d:94:aa:ec:12:91:29:80:15:64:04:34:5d:27:1e:90:
83:cd:16:db:63:e8:4e:75:e0:57:0e:09:12:30:3a:a6:81:a2:
ab:48:e8:c5:83:c3:5f:0d:89:e7:75:95:e2:62:8f:1d:7a:c2:
99:99:af:b1:b1:d8:88:a8:85:3f:62:6e:74:4f:d6:30:22:5e:
87:7b:07:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 11:05:38 2025 by rpki-client