This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
File: rC4NP0JyIX_vudMtzhozLelqOF4.mft (raw, json)
Hash identifier: DhDriV2LkH5opXsUv8w0H+Iit8XXRS/Lwk53Cu4rd/o=
Subject key identifier: 35:3E:41:A4:F3:43:E2:C9:53:A0:AF:CB:F0:47:EF:A6:71:3B:BD:EF
Authority key identifier: AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
Certificate issuer: /CN=A91DD5E1/serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Certificate serial: 090C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
Manifest number: 0903
Signing time: Thu 18 Dec 2025 20:17:13 +0000
Manifest this update: Thu 18 Dec 2025 20:17:12 +0000
Manifest next update: Thu 25 Dec 2025 20:17:12 +0000
Files and hashes: 1: rC4NP0JyIX_vudMtzhozLelqOF4.crl (hash: /i6VoiwM+erqISK94rWYvm75ko4GZmaGOMVMa2G9L4E=)
2: E034D1A6BC6F11EA8FE53280C4F9AE02.roa (hash: gGfvaVEV+hPlcS/KUAGxCctceZxcis75EZYZWWO9DrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD5E1, serialNumber=AC2E0D3F4272217FEFB9D32DCE1A332DE96A385E
Validity
Not Before: Dec 18 20:17:12 2025 GMT
Not After : Dec 25 20:17:12 2025 GMT
Subject: CN=69446149-7678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:be:72:ae:0f:8b:36:c9:00:28:98:11:cc:
70:2b:c0:8f:9c:53:85:e4:5c:20:87:8a:b2:53:a4:
b1:05:c1:8d:cb:7b:f0:34:42:d2:e9:88:22:03:22:
20:11:08:e9:69:48:dc:cc:ee:92:40:42:7c:90:cf:
4f:17:cb:22:73:3c:18:8b:77:48:1b:a0:8a:76:9c:
9a:f1:52:31:a3:27:ae:45:b9:09:91:e4:7f:2f:1f:
db:53:e1:2a:ae:64:13:4e:d8:fe:63:db:83:ff:94:
92:1e:6a:b2:15:7e:a4:06:7e:3f:7f:bb:3f:80:86:
5f:65:ec:b2:4d:fe:53:7d:d5:ec:10:7c:89:d5:25:
0d:4d:b7:ea:51:3d:e3:82:a0:97:de:fc:5f:00:b3:
2b:9b:ea:d7:b6:4c:fc:0f:f4:9d:be:d1:c3:ad:f1:
de:26:11:c6:f3:08:03:32:46:6e:88:fa:77:b3:9b:
41:bd:88:6b:0b:17:47:3c:2c:2e:57:92:db:02:b2:
ea:66:92:45:72:f8:8c:8b:1b:a9:00:97:ae:65:06:
4a:f5:a2:e2:78:72:ed:18:8b:2f:fa:94:6c:9e:f7:
7c:99:08:0b:5a:bc:d2:a1:15:5d:de:43:75:22:f0:
df:54:18:1d:6b:c0:25:96:57:53:14:b7:e3:e2:41:
f2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:41:A4:F3:43:E2:C9:53:A0:AF:CB:F0:47:EF:A6:71:3B:BD:EF
X509v3 Authority Key Identifier:
keyid:AC:2E:0D:3F:42:72:21:7F:EF:B9:D3:2D:CE:1A:33:2D:E9:6A:38:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rC4NP0JyIX_vudMtzhozLelqOF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD5E1/165B7BF6BC6E11EAA5CB037DC4F9AE02/rC4NP0JyIX_vudMtzhozLelqOF4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:c3:49:48:13:df:3f:1a:c2:40:d6:15:8d:b5:3a:b4:ff:
0f:45:fc:62:96:bf:19:ab:37:f9:0c:74:0f:f8:00:17:8f:d2:
66:67:c7:d1:9a:d7:e4:80:b1:99:e1:b0:38:b8:a2:60:c2:23:
4d:4a:2a:96:97:3d:53:79:8c:fb:81:42:33:98:69:07:a1:ea:
a6:c0:be:f8:d7:c0:d5:c5:25:f4:e3:a2:7f:6a:0f:78:51:38:
28:87:4e:63:a8:a3:7c:f8:ed:62:91:ac:00:63:b7:b7:28:9e:
7c:ed:fa:b6:4a:d5:c2:c7:5a:56:eb:3a:82:5b:26:8a:51:fa:
a3:e6:61:d3:2e:2a:6d:f5:80:67:fb:74:02:1d:ca:33:70:75:
c1:d4:9d:44:d7:72:41:4c:ab:b7:00:43:fb:b7:39:b3:ef:7c:
6a:b0:b9:f2:2b:bc:60:aa:dc:ee:bf:30:a5:01:cb:8e:27:71:
fc:c0:f2:b6:91:43:af:64:e2:69:1c:31:43:57:7c:7e:42:c5:
09:23:8c:70:6d:f2:44:2a:13:c7:88:6b:c5:13:d9:f1:65:c1:
33:93:70:d1:d4:5c:89:ee:6d:3d:2a:d7:b3:31:84:0f:1f:ad:
00:49:88:b3:b7:36:31:5a:77:e1:f5:13:c0:ce:9a:be:77:79:
8b:cf:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:12:57 2025 by rpki-client