This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json)
Hash identifier: a+qRwIVweAhq2TrmS3yCMsgtsintL34C+V45dBrrF5U=
Subject key identifier: E8:41:10:17:7F:C0:5B:DA:53:B5:B8:DC:D5:E3:99:BD:05:1D:5D:78
Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Certificate serial: EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
Manifest number: E4
Signing time: Fri 19 Dec 2025 04:39:12 +0000
Manifest this update: Fri 19 Dec 2025 04:39:11 +0000
Manifest next update: Fri 26 Dec 2025 04:39:11 +0000
Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: a2p/8QyYitsZ2Ug6HistiZfeJ4LiJaUNn96kALHllAo=)
2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: Nojw6SW1c2qdUt1xIl/URy2bbJQkP1siDyicayiSkH0=)
3: 4694313A887211EF840E431CC4F9AE02.roa (hash: fp7FgBhPpTHpi+5dBWhYmAHPKnWnnQFCEGfhvOTL7Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34
Validity
Not Before: Dec 19 04:39:11 2025 GMT
Not After : Dec 26 04:39:11 2025 GMT
Subject: CN=6944d6f0-881b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:20:d9:1b:6e:d4:83:09:2a:6d:e8:93:eb:
5a:91:25:9c:5b:b4:50:9c:6b:bd:e9:30:bf:b3:c8:
a3:ae:99:32:77:02:df:cc:b0:1f:f5:58:2f:b3:45:
84:b0:f7:9f:f1:32:95:6e:24:74:12:95:2d:72:17:
e2:98:30:c8:24:98:c0:ad:f2:d1:7e:33:f0:d0:39:
cf:69:f3:18:06:82:3a:a5:de:35:bf:ff:a9:55:da:
cf:42:fb:89:3c:b3:27:70:ad:a2:6e:4c:d7:b0:fa:
b5:af:89:9b:c6:1a:18:0a:4b:cb:a5:a6:45:71:d3:
2e:b7:ad:56:0e:75:17:36:56:a1:20:b3:32:80:67:
92:ca:e2:95:e7:15:06:a6:8c:e1:78:78:6f:c1:42:
64:1a:70:0a:4b:f2:fb:bc:54:c2:32:ea:f1:b9:14:
bd:f8:a1:b3:f2:4b:59:cb:d1:68:c5:32:4a:28:8c:
51:cc:aa:5a:fd:74:19:db:2d:d4:ef:13:f3:fe:35:
f8:2a:4d:7f:9f:4e:26:fb:7d:71:17:15:55:ac:b2:
a4:6b:28:cb:8e:23:a7:22:89:74:11:a0:2b:dd:70:
0c:f7:cb:88:88:03:e7:1c:c4:26:94:16:5f:f1:65:
32:ac:15:68:94:d8:01:62:5e:59:50:bb:88:8b:3e:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:41:10:17:7F:C0:5B:DA:53:B5:B8:DC:D5:E3:99:BD:05:1D:5D:78
X509v3 Authority Key Identifier:
keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:0a:33:b4:b8:0c:e7:3f:4c:8b:fa:1b:ea:1f:62:a9:c7:97:
a5:7c:54:ce:73:51:f6:73:b3:3f:26:4f:6b:34:8a:53:aa:cc:
a3:d9:bb:9f:81:15:a5:f4:a0:5c:c8:62:49:14:83:44:91:6d:
cf:bc:20:0c:49:8a:92:56:07:37:3f:76:a6:02:d9:68:a3:fb:
c6:7c:df:11:6a:0a:63:43:72:b8:97:dd:b1:5c:f2:66:f6:bb:
b1:c3:ec:45:29:b6:b5:68:17:32:0f:69:a0:93:df:39:0e:db:
c1:5e:fc:37:d7:ba:d1:c9:90:7e:2a:c2:17:67:89:3f:06:92:
3c:f6:ad:75:c2:5c:ed:de:fd:b6:ff:8d:13:d0:97:9c:48:3b:
e4:5d:d0:b5:eb:a9:bd:2a:d6:cb:03:53:4d:f5:7e:82:8c:48:
13:0e:3b:8e:35:61:d5:9a:89:3f:36:ae:25:95:8d:8b:ca:4d:
5c:6a:2f:d2:d3:82:d8:8b:b5:a9:cc:31:15:bc:42:11:20:05:
cc:91:92:33:0b:ef:29:92:6f:3e:e5:d8:1c:aa:ec:5f:f6:57:
f6:35:9c:4e:d1:66:ce:66:b8:18:6b:3d:57:51:d9:be:c8:36:
cd:e0:cd:ad:8b:ae:5b:71:55:f8:f3:8d:b5:6a:8d:af:43:73:
c3:54:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:17 2025 by rpki-client