This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File: 4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier: TotYqDANrpRBoDoXIRzU0/DvdREbfqcG3jPQ4H6JcH0=
Subject key identifier: 4C:FB:78:02:7D:2A:D9:7B:DA:D6:62:3A:D0:F8:F4:10:C9:A3:54:8B
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer: /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial: 0514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number: 050B
Signing time: Thu 18 Dec 2025 22:59:42 +0000
Manifest this update: Thu 18 Dec 2025 22:59:42 +0000
Manifest next update: Thu 25 Dec 2025 22:59:42 +0000
Files and hashes: 1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: H9DrgTE6cBxBoXrotI/wFCFocXTd4PRCBiRDjeHQttI=)
2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: nB1Fc0QMLbcF1uaFMm0p596y3EBZJfglMzsBOCS68V4=)
3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: twWAVRWCyGBu4AJbenJKIlIqQ97WQNS4qNYxUhMYIRg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Validity
Not Before: Dec 18 22:59:42 2025 GMT
Not After : Dec 25 22:59:42 2025 GMT
Subject: CN=6944875e-f015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:07:25:c4:cb:64:21:5a:ac:7b:b0:f4:51:
41:46:76:b0:ac:ea:71:54:0b:b6:0d:d9:c6:7f:91:
ac:34:e6:a0:aa:b3:47:06:dc:e1:e1:ef:7c:e0:e9:
bc:7b:2a:b6:2a:16:9d:b8:40:ed:ca:a6:bb:29:59:
c7:51:c0:57:43:86:a9:bc:b4:94:f7:64:8c:90:3a:
eb:b6:3f:da:bc:c5:7a:56:ff:c3:ad:44:2b:ed:a6:
9d:3c:88:64:f0:aa:47:52:3f:7e:ed:bf:cf:dd:58:
54:cc:b0:b5:a2:36:95:81:5c:3e:cd:a6:81:6d:10:
66:1b:e9:f8:cc:c6:37:a3:4e:ac:c4:80:b4:71:96:
ea:7d:c9:8d:6c:d7:3d:59:3e:9a:9d:42:55:0b:9b:
da:6b:a2:2f:fc:36:85:05:03:08:7b:e3:76:c7:c0:
a4:2a:78:c0:a2:5d:6b:cf:7e:d3:4f:86:1a:30:54:
1b:a2:d5:b9:65:d8:99:e1:02:44:31:99:d3:2b:1d:
62:15:9a:21:53:cf:81:28:74:d0:1f:47:c7:c0:6f:
51:50:6b:f1:c2:e4:21:dd:5f:c7:53:4f:ce:7d:05:
0b:b4:e0:6c:80:4b:bb:32:81:e0:b3:26:b0:9a:26:
87:34:6a:30:12:5f:e9:e9:4a:94:e4:8f:35:8c:b1:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FB:78:02:7D:2A:D9:7B:DA:D6:62:3A:D0:F8:F4:10:C9:A3:54:8B
X509v3 Authority Key Identifier:
keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:3e:a6:bc:09:3e:7e:4d:5b:fa:7c:f8:8e:79:34:63:7d:
d8:84:5f:69:ca:d0:03:55:0e:35:d9:72:f5:3f:a2:57:83:82:
8d:79:af:ee:36:72:71:f9:1a:e4:2c:96:a2:ff:9e:63:68:23:
9c:b9:cf:7a:00:2c:24:a2:70:f6:26:75:94:bf:15:4c:37:da:
04:13:e7:c7:93:df:68:a6:d1:19:a0:9e:4b:9c:7d:7a:bc:f6:
ec:0f:7e:4f:82:6b:cb:71:44:31:e2:d5:20:0c:60:18:16:81:
79:2d:dd:1c:52:ed:71:ce:e1:53:e9:54:33:bc:fc:1f:79:82:
04:f2:97:a5:01:a0:6c:d1:b7:5e:7a:5f:cb:24:ac:ab:ad:78:
cf:aa:8d:ee:71:b8:9e:52:dc:e8:e7:48:1f:31:c7:d4:3d:38:
c0:38:86:d9:96:65:0b:79:20:b8:1a:28:fd:50:60:48:65:8a:
17:87:1d:8e:55:0f:f7:e8:6a:1d:9d:81:85:fa:bb:6e:56:95:
34:26:81:65:3c:d3:e4:d4:97:32:0f:1d:22:da:f2:62:79:e0:
ce:77:e6:fe:88:64:3d:5b:db:e4:3c:8b:14:1c:98:3e:86:e8:
08:db:66:f3:9a:23:02:8d:77:b4:2a:1c:d4:23:89:67:0e:f7:
31:b5:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:56:13 2025 by rpki-client